Skip to content

Security: pitimon/TokenTracker

Security

SECURITY.md

Security Policy

Supported Versions

Only the latest minor release is supported with security fixes. This is a small project — please run a recent version.

Reporting a Vulnerability

Please do not open a public GitHub issue for security reports.

Instead, use one of these private channels:

  • GitHub Private Vulnerability Reporting: Report a vulnerability
  • Email: open a GitHub issue asking the maintainer to enable an alternative private channel if you can't use GitHub Security Advisories

When reporting, please include:

  • A clear description of the issue
  • Steps to reproduce
  • Affected version(s)
  • Your assessment of impact (data exposure, privilege escalation, etc.)
  • Any suggested mitigation, if you have one

You can expect an initial response within a few days. Once a fix is ready, it will ship in the next release with a credit to you (or anonymously if you prefer).

Scope

TokenTracker is a local web tool: a browser dashboard served by a CLI HTTP backend bound to loopback. It reads AI CLI tool logs from the user's home directory. There is no hosted/cloud service or supported native app. The most sensitive areas to consider when reviewing security:

  • src/lib/rollout.js — parses logs from 8 different AI CLI tools. Privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths.
  • src/lib/cursor-config.js — reads Cursor's local SQLite to extract auth tokens for the Cursor usage API. Credentials may be sent only to declared Cursor authentication or quota hosts and must never enter TokenTracker queues, logs, diagnostics, or API responses.
  • src/lib/local-api.js — local HTTP server bound to 127.0.0.1. Should not accept connections from other hosts.
  • Archived native source — archive/native-apps/TokenTrackerBar/ and archive/native-apps/TokenTrackerWin/ are unsupported historical code and outside the active security-support boundary unless explicitly reactivated.

Out of Scope

  • Issues only reproducible with arbitrary modifications to the user's local files outside the documented data paths
  • Vulnerabilities in dependencies that have already been disclosed and patched upstream — please report those upstream first
  • Social engineering, phishing, or other non-technical attack vectors

Privacy Commitment

TokenTracker's foundational privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths. Credentials are used only for declared provider authentication or quota flows and their credential files; never place them in TokenTracker queues, logs, fixtures, diagnostics, API responses, or unrelated outbound payloads. Any change that risks violating this is treated as a security issue.

There aren't any published security advisories

, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Overview · pitimon/TokenTracker · GitHub
Skip to content
Security: pitimon/TokenTracker
Security

SECURITY.md

Security Policy
Supported Versions
Only the latest minor release is supported with security fixes. This is a small project — please run a recent version.
Reporting a Vulnerability
Please do not open a public GitHub issue for security reports.
Instead, use one of these private channels:
  • GitHub Private Vulnerability Reporting: Report a vulnerability
  • Email: open a GitHub issue asking the maintainer to enable an alternative private channel if you can't use GitHub Security Advisories
When reporting, please include:
  • A clear description of the issue
  • Steps to reproduce
  • Affected version(s)
  • Your assessment of impact (data exposure, privilege escalation, etc.)
  • Any suggested mitigation, if you have one
You can expect an initial response within a few days. Once a fix is ready, it will ship in the next release with a credit to you (or anonymously if you prefer).
Scope
TokenTracker is a local web tool: a browser dashboard served by a CLI HTTP backend bound to loopback. It reads AI CLI tool logs from the user's home directory. There is no hosted/cloud service or supported native app. The most sensitive areas to consider when reviewing security:
  • src/lib/rollout.js — parses logs from 8 different AI CLI tools. Privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths.
  • src/lib/cursor-config.js — reads Cursor's local SQLite to extract auth tokens for the Cursor usage API. Credentials may be sent only to declared Cursor authentication or quota hosts and must never enter TokenTracker queues, logs, diagnostics, or API responses.
  • src/lib/local-api.js — local HTTP server bound to 127.0.0.1. Should not accept connections from other hosts.
  • Archived native source — archive/native-apps/TokenTrackerBar/ and archive/native-apps/TokenTrackerWin/ are unsupported historical code and outside the active security-support boundary unless explicitly reactivated.
Out of Scope
  • Issues only reproducible with arbitrary modifications to the user's local files outside the documented data paths
  • Vulnerabilities in dependencies that have already been disclosed and patched upstream — please report those upstream first
  • Social engineering, phishing, or other non-technical attack vectors
Privacy Commitment
TokenTracker's foundational privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths. Credentials are used only for declared provider authentication or quota flows and their credential files; never place them in TokenTracker queues, logs, fixtures, diagnostics, API responses, or unrelated outbound payloads. Any change that risks violating this is treated as a security issue.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Overview · pitimon/TokenTracker · GitHub
Skip to content
Security: pitimon/TokenTracker
Security

SECURITY.md

Security Policy
Supported Versions
Only the latest minor release is supported with security fixes. This is a small project — please run a recent version.
Reporting a Vulnerability
Please do not open a public GitHub issue for security reports.
Instead, use one of these private channels:
  • GitHub Private Vulnerability Reporting: Report a vulnerability
  • Email: open a GitHub issue asking the maintainer to enable an alternative private channel if you can't use GitHub Security Advisories
When reporting, please include:
  • A clear description of the issue
  • Steps to reproduce
  • Affected version(s)
  • Your assessment of impact (data exposure, privilege escalation, etc.)
  • Any suggested mitigation, if you have one
You can expect an initial response within a few days. Once a fix is ready, it will ship in the next release with a credit to you (or anonymously if you prefer).
Scope
TokenTracker is a local web tool: a browser dashboard served by a CLI HTTP backend bound to loopback. It reads AI CLI tool logs from the user's home directory. There is no hosted/cloud service or supported native app. The most sensitive areas to consider when reviewing security:
  • src/lib/rollout.js — parses logs from 8 different AI CLI tools. Privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths.
  • src/lib/cursor-config.js — reads Cursor's local SQLite to extract auth tokens for the Cursor usage API. Credentials may be sent only to declared Cursor authentication or quota hosts and must never enter TokenTracker queues, logs, diagnostics, or API responses.
  • src/lib/local-api.js — local HTTP server bound to 127.0.0.1. Should not accept connections from other hosts.
  • Archived native source — archive/native-apps/TokenTrackerBar/ and archive/native-apps/TokenTrackerWin/ are unsupported historical code and outside the active security-support boundary unless explicitly reactivated.
Out of Scope
  • Issues only reproducible with arbitrary modifications to the user's local files outside the documented data paths
  • Vulnerabilities in dependencies that have already been disclosed and patched upstream — please report those upstream first
  • Social engineering, phishing, or other non-technical attack vectors
Privacy Commitment
TokenTracker's foundational privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths. Credentials are used only for declared provider authentication or quota flows and their credential files; never place them in TokenTracker queues, logs, fixtures, diagnostics, API responses, or unrelated outbound payloads. Any change that risks violating this is treated as a security issue.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Overview · pitimon/TokenTracker · GitHub
Skip to content
Security: pitimon/TokenTracker
Security

SECURITY.md

Security Policy
Supported Versions
Only the latest minor release is supported with security fixes. This is a small project — please run a recent version.
Reporting a Vulnerability
Please do not open a public GitHub issue for security reports.
Instead, use one of these private channels:
  • GitHub Private Vulnerability Reporting: Report a vulnerability
  • Email: open a GitHub issue asking the maintainer to enable an alternative private channel if you can't use GitHub Security Advisories
When reporting, please include:
  • A clear description of the issue
  • Steps to reproduce
  • Affected version(s)
  • Your assessment of impact (data exposure, privilege escalation, etc.)
  • Any suggested mitigation, if you have one
You can expect an initial response within a few days. Once a fix is ready, it will ship in the next release with a credit to you (or anonymously if you prefer).
Scope
TokenTracker is a local web tool: a browser dashboard served by a CLI HTTP backend bound to loopback. It reads AI CLI tool logs from the user's home directory. There is no hosted/cloud service or supported native app. The most sensitive areas to consider when reviewing security:
  • src/lib/rollout.js — parses logs from 8 different AI CLI tools. Privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths.
  • src/lib/cursor-config.js — reads Cursor's local SQLite to extract auth tokens for the Cursor usage API. Credentials may be sent only to declared Cursor authentication or quota hosts and must never enter TokenTracker queues, logs, diagnostics, or API responses.
  • src/lib/local-api.js — local HTTP server bound to 127.0.0.1. Should not accept connections from other hosts.
  • Archived native source — archive/native-apps/TokenTrackerBar/ and archive/native-apps/TokenTrackerWin/ are unsupported historical code and outside the active security-support boundary unless explicitly reactivated.
Out of Scope
  • Issues only reproducible with arbitrary modifications to the user's local files outside the documented data paths
  • Vulnerabilities in dependencies that have already been disclosed and patched upstream — please report those upstream first
  • Social engineering, phishing, or other non-technical attack vectors
Privacy Commitment
TokenTracker's foundational privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths. Credentials are used only for declared provider authentication or quota flows and their credential files; never place them in TokenTracker queues, logs, fixtures, diagnostics, API responses, or unrelated outbound payloads. Any change that risks violating this is treated as a security issue.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
Overview · pitimon/TokenTracker · GitHub
Skip to content
Security: pitimon/TokenTracker
Security

SECURITY.md

Security Policy
Supported Versions
Only the latest minor release is supported with security fixes. This is a small project — please run a recent version.
Reporting a Vulnerability
Please do not open a public GitHub issue for security reports.
Instead, use one of these private channels:
  • GitHub Private Vulnerability Reporting: Report a vulnerability
  • Email: open a GitHub issue asking the maintainer to enable an alternative private channel if you can't use GitHub Security Advisories
When reporting, please include:
  • A clear description of the issue
  • Steps to reproduce
  • Affected version(s)
  • Your assessment of impact (data exposure, privilege escalation, etc.)
  • Any suggested mitigation, if you have one
You can expect an initial response within a few days. Once a fix is ready, it will ship in the next release with a credit to you (or anonymously if you prefer).
Scope
TokenTracker is a local web tool: a browser dashboard served by a CLI HTTP backend bound to loopback. It reads AI CLI tool logs from the user's home directory. There is no hosted/cloud service or supported native app. The most sensitive areas to consider when reviewing security:
  • src/lib/rollout.js — parses logs from 8 different AI CLI tools. Privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths.
  • src/lib/cursor-config.js — reads Cursor's local SQLite to extract auth tokens for the Cursor usage API. Credentials may be sent only to declared Cursor authentication or quota hosts and must never enter TokenTracker queues, logs, diagnostics, or API responses.
  • src/lib/local-api.js — local HTTP server bound to 127.0.0.1. Should not accept connections from other hosts.
  • Archived native source — archive/native-apps/TokenTrackerBar/ and archive/native-apps/TokenTrackerWin/ are unsupported historical code and outside the active security-support boundary unless explicitly reactivated.
Out of Scope
  • Issues only reproducible with arbitrary modifications to the user's local files outside the documented data paths
  • Vulnerabilities in dependencies that have already been disclosed and patched upstream — please report those upstream first
  • Social engineering, phishing, or other non-technical attack vectors
Privacy Commitment
TokenTracker's foundational privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths. Credentials are used only for declared provider authentication or quota flows and their credential files; never place them in TokenTracker queues, logs, fixtures, diagnostics, API responses, or unrelated outbound payloads. Any change that risks violating this is treated as a security issue.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Overview · pitimon/TokenTracker · GitHub
Skip to content
Security: pitimon/TokenTracker
Security

SECURITY.md

Security Policy
Supported Versions
Only the latest minor release is supported with security fixes. This is a small project — please run a recent version.
Reporting a Vulnerability
Please do not open a public GitHub issue for security reports.
Instead, use one of these private channels:
  • GitHub Private Vulnerability Reporting: Report a vulnerability
  • Email: open a GitHub issue asking the maintainer to enable an alternative private channel if you can't use GitHub Security Advisories
When reporting, please include:
  • A clear description of the issue
  • Steps to reproduce
  • Affected version(s)
  • Your assessment of impact (data exposure, privilege escalation, etc.)
  • Any suggested mitigation, if you have one
You can expect an initial response within a few days. Once a fix is ready, it will ship in the next release with a credit to you (or anonymously if you prefer).
Scope
TokenTracker is a local web tool: a browser dashboard served by a CLI HTTP backend bound to loopback. It reads AI CLI tool logs from the user's home directory. There is no hosted/cloud service or supported native app. The most sensitive areas to consider when reviewing security:
  • src/lib/rollout.js — parses logs from 8 different AI CLI tools. Privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths.
  • src/lib/cursor-config.js — reads Cursor's local SQLite to extract auth tokens for the Cursor usage API. Credentials may be sent only to declared Cursor authentication or quota hosts and must never enter TokenTracker queues, logs, diagnostics, or API responses.
  • src/lib/local-api.js — local HTTP server bound to 127.0.0.1. Should not accept connections from other hosts.
  • Archived native source — archive/native-apps/TokenTrackerBar/ and archive/native-apps/TokenTrackerWin/ are unsupported historical code and outside the active security-support boundary unless explicitly reactivated.
Out of Scope
  • Issues only reproducible with arbitrary modifications to the user's local files outside the documented data paths
  • Vulnerabilities in dependencies that have already been disclosed and patched upstream — please report those upstream first
  • Social engineering, phishing, or other non-technical attack vectors
Privacy Commitment
TokenTracker's foundational privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths. Credentials are used only for declared provider authentication or quota flows and their credential files; never place them in TokenTracker queues, logs, fixtures, diagnostics, API responses, or unrelated outbound payloads. Any change that risks violating this is treated as a security issue.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Overview · pitimon/TokenTracker · GitHub
Skip to content
Security: pitimon/TokenTracker
Security

SECURITY.md

Security Policy
Supported Versions
Only the latest minor release is supported with security fixes. This is a small project — please run a recent version.
Reporting a Vulnerability
Please do not open a public GitHub issue for security reports.
Instead, use one of these private channels:
  • GitHub Private Vulnerability Reporting: Report a vulnerability
  • Email: open a GitHub issue asking the maintainer to enable an alternative private channel if you can't use GitHub Security Advisories
When reporting, please include:
  • A clear description of the issue
  • Steps to reproduce
  • Affected version(s)
  • Your assessment of impact (data exposure, privilege escalation, etc.)
  • Any suggested mitigation, if you have one
You can expect an initial response within a few days. Once a fix is ready, it will ship in the next release with a credit to you (or anonymously if you prefer).
Scope
TokenTracker is a local web tool: a browser dashboard served by a CLI HTTP backend bound to loopback. It reads AI CLI tool logs from the user's home directory. There is no hosted/cloud service or supported native app. The most sensitive areas to consider when reviewing security:
  • src/lib/rollout.js — parses logs from 8 different AI CLI tools. Privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths.
  • src/lib/cursor-config.js — reads Cursor's local SQLite to extract auth tokens for the Cursor usage API. Credentials may be sent only to declared Cursor authentication or quota hosts and must never enter TokenTracker queues, logs, diagnostics, or API responses.
  • src/lib/local-api.js — local HTTP server bound to 127.0.0.1. Should not accept connections from other hosts.
  • Archived native source — archive/native-apps/TokenTrackerBar/ and archive/native-apps/TokenTrackerWin/ are unsupported historical code and outside the active security-support boundary unless explicitly reactivated.
Out of Scope
  • Issues only reproducible with arbitrary modifications to the user's local files outside the documented data paths
  • Vulnerabilities in dependencies that have already been disclosed and patched upstream — please report those upstream first
  • Social engineering, phishing, or other non-technical attack vectors
Privacy Commitment
TokenTracker's foundational privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths. Credentials are used only for declared provider authentication or quota flows and their credential files; never place them in TokenTracker queues, logs, fixtures, diagnostics, API responses, or unrelated outbound payloads. Any change that risks violating this is treated as a security issue.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
Overview · pitimon/TokenTracker · GitHub
Skip to content
Security: pitimon/TokenTracker
Security

SECURITY.md

Security Policy
Supported Versions
Only the latest minor release is supported with security fixes. This is a small project — please run a recent version.
Reporting a Vulnerability
Please do not open a public GitHub issue for security reports.
Instead, use one of these private channels:
  • GitHub Private Vulnerability Reporting: Report a vulnerability
  • Email: open a GitHub issue asking the maintainer to enable an alternative private channel if you can't use GitHub Security Advisories
When reporting, please include:
  • A clear description of the issue
  • Steps to reproduce
  • Affected version(s)
  • Your assessment of impact (data exposure, privilege escalation, etc.)
  • Any suggested mitigation, if you have one
You can expect an initial response within a few days. Once a fix is ready, it will ship in the next release with a credit to you (or anonymously if you prefer).
Scope
TokenTracker is a local web tool: a browser dashboard served by a CLI HTTP backend bound to loopback. It reads AI CLI tool logs from the user's home directory. There is no hosted/cloud service or supported native app. The most sensitive areas to consider when reviewing security:
  • src/lib/rollout.js — parses logs from 8 different AI CLI tools. Privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths.
  • src/lib/cursor-config.js — reads Cursor's local SQLite to extract auth tokens for the Cursor usage API. Credentials may be sent only to declared Cursor authentication or quota hosts and must never enter TokenTracker queues, logs, diagnostics, or API responses.
  • src/lib/local-api.js — local HTTP server bound to 127.0.0.1. Should not accept connections from other hosts.
  • Archived native source — archive/native-apps/TokenTrackerBar/ and archive/native-apps/TokenTrackerWin/ are unsupported historical code and outside the active security-support boundary unless explicitly reactivated.
Out of Scope
  • Issues only reproducible with arbitrary modifications to the user's local files outside the documented data paths
  • Vulnerabilities in dependencies that have already been disclosed and patched upstream — please report those upstream first
  • Social engineering, phishing, or other non-technical attack vectors
Privacy Commitment
TokenTracker's foundational privacy rule: usage metadata only — source, model, token and conversation counts, timestamps, and derived cost; never prompts, responses, message bodies, or private user-code paths. Credentials are used only for declared provider authentication or quota flows and their credential files; never place them in TokenTracker queues, logs, fixtures, diagnostics, API responses, or unrelated outbound payloads. Any change that risks violating this is treated as a security issue.
 There aren't any published security advisories