Auto-disabling idle Claude Code plugins can save up to 4,000 tokens per session

·1 views

A developer running Claude Code at scale discovered that having over 50 plugins enabled silently consumes thousands of context-window tokens every session, even when those plugins are never used. Each enabled plugin causes Claude Code to enumerate all its tool names in a system-reminder block at startup, with a single plugin like Playwright alone listing nearly 30 tool names. This fixed token overhead degrades response accuracy and can push useful information out of long conversations. To address the problem, the developer built an automated system that disables any plugin with zero activity over the past 30 days, running every Sunday without human intervention. The approach reflects a broader philosophy that maintaining an AI development environment proactively is more effective than managing it manually on an ad-hoc basis.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How to Build a Real-Time Polymarket Order Book Monitor Using Python

A developer tutorial published on DEV Community walks through building a lightweight, real-time order book monitor for Polymarket using Python and its public CLOB Market WebSocket. The guide explains how to connect to Polymarket's WebSocket endpoint, subscribe to market data using asset token IDs, and process live events such as book snapshots and price changes. It demonstrates how to calculate key metrics including best bid, best ask, and spread from streaming data without requiring any authentication. The tutorial intentionally separates WebSocket transport from order book state management, making the tool suitable as a foundation for research, dashboards, or automated trading systems. It also covers practical considerations such as handling reconnects, heartbeats, and detecting stale market data.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Identify Known CVEs in Closed-Source Firmware Without Source Code

Security researchers working with embedded and IoT devices often face the challenge of auditing closed-source firmware binaries for known vulnerabilities without access to vendor source code. The recommended approach begins with unpacking firmware images using tools like binwalk to extract the underlying filesystem, followed by scanning binaries for version strings using the 'strings' command. Identified component versions can then be cross-referenced against CVE databases using automated tools such as CVE-bin-tool, which matches findings against NVD vulnerability data. For kernel modules lacking readable version banners, utilities like modinfo and reverse engineering tools such as Ghidra can help narrow down applicable vulnerabilities. Crucially, a version match should be treated as a lead rather than a confirmed finding, since vendors sometimes backport fixes without updating version strings.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Fully automated trading system required human intervention three times in a month

A developer building a fully automated stock trading system documented three separate incidents within a month where human intervention was required to correct failures the system could not handle on its own. In the first case, a sell order for a specific stock was repeatedly blocked because the order size always exceeded the remaining daily trading quota, making execution structurally impossible regardless of scheduling. The second incident involved a safety circuit incorrectly blocking two valid buy orders after misreading intraday price snapshots as cumulative loss indicators, triggering a halt that was not warranted. A third failure occurred during the manual fix for the second incident, when a tool used to log human trades silently misclassified a first-time purchase of a new stock as an unrelated transaction, briefly leaving a real asset unrecorded in the ledger. The developer concluded that true automation requires well-designed human intervention pathways that are fully logged and cover all edge cases, since gaps in automation only become visible after failures occur.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Three Times a Self-Running Trading Bot Still Required Human Intervention

A developer running a fully automated algorithmic trading system had to intervene manually three times in a single month due to distinct structural failures. In the first case, a daily budget allocation rule repeatedly starved one sell order, which was never large enough to clear within the remaining budget, requiring a manual execution and a rule redesign. The second failure involved a drawdown guard that incorrectly blocked two valid buy orders by mixing intraday price snapshots with a metric meant to track cumulative state, prompting a fix that separated the two measurement types. A third incident occurred when the tool used to log manual trades silently misclassified a brand-new position, briefly leaving a purchased asset outside the ledger entirely. Each failure revealed a gap between a system designed to run autonomously and the edge cases that only surfaced during real-world operation.

0 comments Read more at DEV Community