Dev.to Security 🔐 Cybersecurity 👁 0 📖 2 min read

Where your code goes when a coding agent talks to your phone

Companion tools for coding agents (remote viewers, notifiers, approval apps) sit right next to your code, your conversations and the secrets an agent hands you. Kiteline is one of them: Claude Code, Codex and a dozen oth

Companion tools for coding agents (remote viewers, notifiers, approval apps) sit right next to your code, your conversations and the secrets an agent hands you. Kiteline is one of them: Claude Code, Codex and a dozen other agents keep running on the computer, while the phone shows progress, takes replies and approves permissions. The desktop side (Mac, Windows, Linux) is open source at github.com/hon6/kiteline.

Here is how it answers the obvious question: where does the data go?

It reads the agent's own records, nothing more

Agents already write their sessions to local files. Kiteline reads those files and never touches the agent's login, API keys or config. The agent keeps talking to its model exactly as before.

The trade-off is that what the phone can do depends on what each agent exposes, so the desktop app lists, per agent, which actions work and which don't.

Direct when possible, relayed only as a fallback

  • Same Wi-Fi: the phone connects straight to the computer.
  • Away from home: it tries a peer-to-peer connection first and falls back to a relay only when that fails. Either way the content is end-to-end encrypted; the relay forwards ciphertext.
  • Devices pair by scanning a QR code, which exchanges keys. Unpaired devices can't connect.

Secrets get their own card

When an agent hands over an app ID, a gateway URL and a private key, mixing them into a chat reply makes them hard to find and easy to leak in a screenshot. Kiteline gives agents a "key info" command; the phone renders a separate card with copy buttons, sensitive fields masked until tapped, and the card can be saved to favorites.

Read-only sharing that stays on the LAN

A session can be shared as a read-only link. The page is served by your computer on the local network, the viewer can read the conversation and steps but can't send anything, and you can revoke the link at any time. Nothing goes through a server.

Evidence that the work is done

The other half of trust is knowing the agent actually finished. Kiteline ships a few agent skills for that: a browser test report with a screenshot per step, task stages ("2/4 testing") shown in every list, and a separate reminder for things only you can do.

The phone app is on the App Store (search Kiteline); there's no Android version yet. Claude Code is a product of Anthropic; Kiteline is an independent third-party tool.

📰 Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.