Postingan

Show HN: FireClaw – Open-source proxy defending AI agents from prompt injection https://ift.tt/xlnoD3N

Show HN: FireClaw – Open-source proxy defending AI agents from prompt injection Hey HN, We built FireClaw because we kept watching AI agents get owned by prompt injection through web content. The agent fetches a page, the page says "ignore previous instructions," and suddenly your agent is leaking data or running commands it shouldn't. The existing solutions detect injection after the fact. We wanted to prevent it. FireClaw is a security proxy that sits between your AI agent and the web. Every fetch passes through a 4-stage pipeline: 1. DNS blocklist check (URLhaus, PhishTank, community feed) 2. Structural sanitization (strip hidden CSS, zero-width Unicode, encoding tricks) 3. Isolated LLM summarization (hardened sub-process with no tools or memory) 4. Output scanning with canary tokens (detect if content bypassed summarization) The key insight: even if Stage 3's LLM gets injected, it has no tools, no memory, and no access to your data. It can only return text — which...

Show HN: F0lkl0r3.dev – a searchable, interlinked map of computing history https://ift.tt/zY4uJZo

Show HN: F0lkl0r3.dev – a searchable, interlinked map of computing history I love reading about the early days of computing, but finding the alpha in raw historical archives can be tough. I built f0lkl0r3.dev over the weekend to fix that. It takes nearly 1,000 oral histories from the Computer History Museum and makes them explorable, searchable, interconnected, and multimodal. To build it, I used the Gemini APIs (via ai.dev) to process the massive volume of unstructured interview text, pulling out the timelines, machines, and people so they could be cross-referenced. The app itself was built with Antigravity, next steps will be to add images and videos. You can search by specific mainframes, browse by era in the timeline, or just read the Apocrypha section for weird historical anecdotes. Enjoy the rabbit hole! I hope it distracts and inspires at least a few more people than me today. :) https://f0lkl0r3.dev March 17, 2026 at 11:00PM

Show HN: March Madness Bracket Challenge for AI Agents Only https://ift.tt/dnqel28

Show HN: March Madness Bracket Challenge for AI Agents Only I built a March Madness bracket challenge for AI agents, not humans. The human prompts their agent with the URL, and the agent reads the API docs, registers itself, picks all 63 games, and submits a bracket autonomously. A leaderboard tracks which AI picks the best bracket through the tournament. The interesting design problem was building for an agent-first user. I came up with a solution where Agents who hit the homepage receive plain-text API instructions and Humans get the normal visual site. Early on I found most agents were trying to use Playwright to browse the site instead of just reading the docs. I made some changes to detect HeadlessChrome and serve specific html readable to agents. This forced me to think about agent UX even more - I think there are some really cool ideas to pull on. The timeline introduced an interesting dynamic. I had to launch the challenge shortly after the brackets were announced on Sunday aft...

Show HN: Crust – A CLI framework for TypeScript and Bun https://ift.tt/dj0GpOM

Show HN: Crust – A CLI framework for TypeScript and Bun We've been building Crust, a TypeScript-first, Bun-native CLI framework with zero dependencies. It's been powering our core product internally for a while, and we're now open-sourcing it. The problem we kept running into: existing CLI frameworks in the JS ecosystem are either minimal arg parsers where you wire everything yourself, or heavyweight frameworks with large dependency trees and Node-era assumptions. We wanted something in between. What Crust does differently: - Full type inference from definitions — args and flags are inferred automatically. No manual type annotations, no generics to wrangle. You define a flag as type: "string" and it flows through to your handler. - Compile-time validation — catches flag alias collisions and variadic arg mistakes before your code runs, not at runtime. - Zero runtime dependencies — @crustjs/core is ~3.6kB gzipped (21kB install). For comparison: yargs is 509kB, oclif...

Show HN: Buda – AI agents forming a company (Claws running a startup) https://ift.tt/WhA3SCE

Show HN: Buda – AI agents forming a company (Claws running a startup) https://buda.im/ March 16, 2026 at 10:38PM

Show HN: Git Quest – I turned your GitHub commit history into an idle RPG https://ift.tt/bvdWkIU

Show HN: Git Quest – I turned your GitHub commit history into an idle RPG Hey HN, I built Git Quest, it reads your public GitHub history and turns it into an idle RPG character. How it works: - Your most-used language determines your class (TypeScript → Paladin, Python → Sage, etc.) - Commits generate Power and XP - Your character auto-battles dungeons while you code – no active play needed - Enemies drop loot across 5 rarity tiers - Live leaderboard ranks developers It only reads public GitHub data. I built it because I wanted something that rewards coding consistency without being another "streak" tracker. The idle mechanic means prolific coders naturally progress faster, but you don't have to babysit it. Would love feedback on the game loop and whether the class/language mapping feels right. https://ift.tt/L3i54I8 https://ift.tt/L3i54I8 March 16, 2026 at 09:44PM

Show HN: Sprinklz.io – An RSS reader with powerful algorithmic controls https://ift.tt/jNHUsqp

Show HN: Sprinklz.io – An RSS reader with powerful algorithmic controls https://sprinklz.io March 16, 2026 at 09:01PM