Detect hidden-from-capture windows
Camoscope inspects macOS WindowServer sharing state and flags windows worth reviewing. The signal is behavioral rather than a simple product-name blocklist.
An opt-in macOS audit CLI for investigating app windows that may be concealed from a screen share. Review WindowServer sharing state, owning-process and code-signing metadata, and — when you explicitly enable Accessibility — text exposed by the app.
python3 -m pip install camoscope==0.1.3
Camoscope inspects macOS WindowServer sharing state and flags windows worth reviewing. The signal is behavioral rather than a simple product-name blocklist.
For flagged windows, Camoscope can show the owning process and available application/code-signing metadata to help a human understand what is running.
With Accessibility permission, Camoscope can optionally inspect text exposed through the macOS Accessibility tree. Installing or importing Camoscope does not perform this scan.
Because Camoscope surfaces system signals rather than issuing a cheating verdict, the output is intended as a starting point for investigation — not proof of screen-share visibility or misconduct.
For technical interviews or assessments, a participant can run Camoscope locally on their own Mac, with their knowledge and consent, and review or share the result. The project grew from exploring the defensive side of screen-share-resistant AI overlays while building SmaranQ, and the approach has been tested against real macOS overlay behavior including Cluely.
A flagged result is a reason to investigate, not proof of cheating or even proof that a particular capture method hides the window. A clean scan does not prove that every window or tab is visible. Camoscope cannot remotely inspect another person’s Mac.
While building SmaranQ, I explored how real-time macOS assistants can stay useful during a call without becoming part of the shared screen. That raised the inverse question: if an assistant can be visible locally but absent from a screen share, what can an interviewer or proctor verify on the participant’s Mac?
Camoscope is that defensive experiment. Similar products such as Cluely and Parakeet illustrate why a screen share alone should not be treated as a complete view of a participant’s desktop. Camoscope has been tested against Cluely overlay behavior on macOS, but it does not claim guaranteed detection of any named product or version.
Camoscope runs locally and is intended for transparent, consent-based auditing. It does not silently scan when installed or imported, and it does not send scan results to a Camoscope server. Accessibility remains an explicit macOS permission boundary. The project is released under MIT.