
完整作品展
技术栈
17 projects


粘贴 URL 获取 web apps 的安全发现,用通俗易懂的方式呈现
@luqmandv · X
I built a free security scanner for vibe-coded apps. You shipped with Cursor, Bolt, or Lovable. But did you check if it's actually safe? Paste your URL → get a plain English security report in 30 seconds. No setup! 👉 #buildinpublic #vibecode

AppTruth AI — 通过AI验证发现应用中的隐藏漏洞
@uriel_bitton · X
As you add more features to your vibe coded app, you increase the chances for bad behaviour. The worst part is you dont know they exist Every beta user i've had try out the app told me they found a few issues they had no idea existed Find yours using

用对抗测试检查LLM端点安全,获取OWASP审计报告。
@aryaan_sheth · X
- LLM security for small teams

粘贴 GitHub 仓库扫描安全漏洞,自动修复代码问题。
u/Still_Amphibian545 · Reddit
almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex