Developer releases 18 free, dependency-free agent skills for security and site audits

·12 views

A developer has released a collection of 18 small Node.js tools packaged as SKILL.md skills that AI agents can use. Most of the tools focus on security audits, such as detecting leaked credentials, linting Dockerfiles, checking CORS and security headers, and reviewing GitHub Actions workflows. Others cover non-security tasks like broken-link crawling, SEO checks, and contract triage. The tools run offline on files or standard input, output JSON, and require only Node 18 or later. Several paste-in tools have also been ported to run entirely in the browser, where users can confirm in developer tools that no data is uploaded.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

A Year of Running Dioxus Fullstack in Production: Benefits and Pain Points

A blog post reflects on one year of using Dioxus, a Rust framework, for fullstack development in a production environment. The author weighs the framework's advantages against the difficulties encountered during that period. The piece was published on oxidt.com and shared on Hacker News, where it gathered 10 points and 3 comments. The source text provides only the article link and discussion metadata, so the specific technical details of the author's experience are not available here.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Anthropic Reports Early Progress on Using Claude to Speed Up Drug Development

Anthropic has published research describing early progress in applying its Claude AI model to accelerate drug development. The company shared the findings in a research post on its website. The source material provided is limited to the headline and link, so specific methods, results, and timelines cannot be confirmed from it. The item gained attention on Hacker News, where it received 25 points and a few comments. Readers seeking details on the scope and outcomes should consult Anthropic's original publication.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

GitGeist Uses Local AI to Investigate Suspicious Commits in Legacy Code

GitGeist is an open-source, offline-first tool created for the Hacktoberfest Open-Source AI Challenge that helps developers investigate puzzling code in legacy repositories. It combines Prior Labs' TabPFN, which produces a Haunting Risk Score from commit and telemetry signals, with Google's Gemma 3 running through Ollama to generate plain-language explanations of Git history. The project also includes a digital remembrance card feature inspired by Día de los Muertos to honor retired code and its maintainers. Designed to run locally even on CPU-only systems, it keeps private repository data on the user's machine and requires no paid AI API key. It offers both a terminal CLI and a web interface, and is released under the MIT license.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Experts Point to AI Misuse, Scams, and Applicant Glut as IT Job Market Slumps

A DEV Community contributor argues that the IT job market's decline stems from several combined factors rather than one cause. The author blames executives who lack a clear understanding of what AI can and cannot do, and who have pursued quick cost savings by replacing workers with AI. Automated tools that tailor résumés and submit applications automatically have also flooded employers with candidates, with some postings drawing thousands of applications within days. The piece further points to fake job listings and scam recruiters that harvest personal data, and to an oversupply of candidates that has tilted the market heavily toward employers. Mass AI-related layoffs are cited as compounding these problems.

0 comments Read more at DEV Community