Show HN: Airgap-check – find what your AI app silently downloads offline

airgap-check is an open-source Go tool that statically scans AI app manifests and code for first-use download patterns (tiktoken, Hugging Face, ChromaDB ONNX, nltk, Playwright) and can run the app in a Docker container with --network none plus a DNS sinkhole to log lookup and connection attempts. It also prints Dockerfile remediation lines via --fix, including offline ENV flags and build-time pre-warming commands. On a held-out set of 10 repos it reported 35 true positives, 4 false positives and 5 false negatives, with limits noted for non-Python/Node runtimes, hardcoded IPs and DNS-over-HTTPS.