Configuration review
Read bucket policies, ACLs, encryption, and public-access settings, then flag the risky combinations.
Tauri desktop app
An agentic workbench for object storage
A local desktop app that puts an agent to work on your S3-compatible storage — reviewing configuration, analyzing logs, and triaging errors, all read-only and on your machine.
Investigation
Check prod-assets for public exposure
- Read bucket policy
- Scan ACLs and CORS
- Query access logs (DuckDB)
FINDING 1 bucket allows public list
policy statement AllowPublicList → s3:ListBucket for *. Evidence: policy.json line 12.
Read-only · evidence stays localmacOS · Windows · Linux
Desktop agent app
A workbench that investigates storage for you
Storage Agent Workbench is a local desktop app: point it at an S3-compatible account, and an agent runs read-only investigations — configuration review, log and inventory analysis, error triage, and cost profiling — with the evidence kept on your machine.
What it investigates
What it investigates
Log and inventory analysis
Import access logs and inventory locally, then let DuckDB answer questions about usage and access.
Error triage
Bring a failing request or error and the agent narrows it to a cause with the evidence attached.
Cost and usage profiling
See where storage and requests concentrate, so cleanup and tiering target the right prefixes.
How a session runs
How a session runs
Connect an account
Add read-only credentials for an S3-compatible account; they stay in the app on your machine.
Import evidence
Point it at inventory or access-log exports, or read live metadata — read-only, never writing back.
Let the agent work
The agent plans an investigation, runs the analysis in DuckDB, and threads its findings in the session.
Read the evidence
Every finding links back to the log rows or configuration it came from, so you can verify before acting.
FAQ
Does my data leave my machine?
No. Credentials, imported evidence, and analysis stay local. The workbench is built to investigate without moving data out.
How is this different from StorageOps?
StorageOps gives an existing agent (Pi) storage skills; Storage Agent Workbench is a self-contained desktop app that runs the investigation on its own.
Can it change my storage?
No. Investigations are read-only by design. It reads configuration, logs, and metadata and leaves the account untouched.
What platforms does it run on?
It is a Tauri desktop app for macOS, Windows, and Linux. The project is Apache-2.0.