Local CLI that audits coding-agent configuration for security, instructions, context, and MCP — no API key or code upload by default.