PR Diff Sentinel

Scan a GitHub PR or commit from this tab. On a repo home, pick what to scan. Muse explains. Local dashboard included.

PR Diff Sentinel is a merge gate for secrets that survive a delete. Paste or open a public GitHub pull request. The extension reads the tab URL and scans through the hosted Sentinel API. The gate fails if a secret is in the PR diff or still recoverable from those commits. Muse can label and explain a hit. Muse cannot clear the check. How to use 1. Install the extension and pin it. 2. Open a public GitHub pull request. 3. Click the Sentinel icon. The PR link fills from the tab. 4. Confirm the API field is https://pr-diff-sentinel.vercel.app (saved in the browser). 5. Click Scan. Pass or Fail appears with masked findings. What it checks - Pull request diff - Recent commits on that request (including removed lines and commit messages) - AI authorship signals (advisory only — never blocks) Privacy - Scans run against public GitHub URLs you choose. - Secrets are masked in results. - The extension stores only the API base URL in chrome.storage.local. - No account required inside the extension. Not for private repositories unless your own API backend can reach them.