⟲

Code Transformer & LLM Sanitizer

transform.ignlab.net

100% Local Processing • Zero Data Transmitted • Safe for Proprietary Code
Mode
AI Safeguard {{ redactions.length }} redacted
Indent
No history yet — copy or download a result to save it here.
Source {{ activeMode.from }} detected: {{ detectedLabel }}
Drop file to load…
{{ inputGutter }}
{{ inputError }} {{ stats.in.lines }} lines · {{ stats.in.chars }} chars · {{ stats.in.bytes }}
Output {{ activeMode.to }} 
{{ output }}{{ outputError ? '' : 'Transformed output appears here…' }}
⚠ {{ outputError || copyError }} {{ stats.out.lines }} lines · {{ stats.out.chars }} chars · {{ stats.out.bytes }}
🛡 Sanitizer redacted {{ redactions.length }} sensitive item{{ redactions.length===1?'':'s' }} before transforming
{{ r.name }} ×{{ r.count }}

Is It Safe to Paste Code Into Copilot Chat? Sanitize It First

Copilot Chat is often used right inside the editor with real project files open, which makes it easy to paste a snippet that still has a live credential in it. AI Safeguard scans your code or config for API keys, tokens, passwords and PII and redacts them locally in your browser before you paste it into a Copilot Chat prompt.

How to sanitize before pasting into GitHub Copilot Chat

  1. Paste your code, config or log into the source panel — AI Safeguard is already switched on.
  2. Check the redaction summary to see what was caught.
  3. Copy the sanitized output and paste that into GitHub Copilot Chat instead of the original.

Frequently asked questions

Is it actually unsafe to paste code into GitHub Copilot Chat?

Not inherently — the risk is specific to what’s in the text, not the assistant itself. A stray API key, password, or database URL sitting in a config file or log is what actually creates exposure.

What does AI Safeguard redact?

Private key blocks, JWTs, AWS/GCP/Azure/Stripe/GitHub/OpenAI/Slack/npm tokens, bearer tokens, credential assignments (password=, api_key:), credit card numbers, emails and IP addresses.

Is my code uploaded anywhere?

No — sanitization and any format conversion both run entirely in your browser; nothing is sent to a server.

See the full AI Safeguard overview, or browse format conversions. Want to double-check what's actually in your text first? Run it through DataExtract's API key extractor to see every exposed credential before you sanitize.