SlothFinance: Open-Source AI Tool Flags Forgotten Subscriptions and Price Hikes

·1 views

A developer has released SlothFinance, an open-source web app that analyzes bank transaction CSVs to surface unwanted charges. It uses Prior Labs' TabPFN-3.5 model for zero-shot detection of recurring payments, forgotten subscriptions, and silent price increases. A Google Gemma 2 agent then produces a financial audit with a scorecard and a humorous critique of the user's spending. The tool also drafts cancellation and refund letters that reference FTC Click-to-Cancel rules and California auto-renewal law, and projects three-year cash losses from unaddressed charges. The project was submitted to a Hacktoberfest open-source AI challenge and is available on GitHub Pages and Vercel.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why One AI Agent Is Designed Never to Touch a Life Insurance Database

A developer building an AI agent for a life insurance agent platform describes why the model is kept away from direct database access. Instead of a generic query tool, the agent can only call narrow, predefined functions, and the data layer attaches the authenticated user's identity and filters results accordingly. Sensitive client fields are tagged so the model never receives them, and unknown columns default to being withheld. The approach is part of a broader review of OWASP's top risks for LLM applications, and the author notes the design still needs testing and does not yet address write capabilities or model provider data terms.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Preventing duplicate refunds in AI agent integrations with signatures, idempotency and limits

AI assistants are beginning to call business systems on users' behalf, such as requesting a return or rescheduling an appointment. Reading order data is low-risk, but refunds move money and require careful engineering. The author outlines four key failure modes to design for, with TypeScript examples using the open-source allowfy package, which applies to any webhook-based integration. Requests are verified against a signed timestamp over the raw body with a constant-time comparison to block replays from the internet-facing endpoint. Agent actions are split into a quote step, where terms are computed without changes and approved by the customer, and an execute step, so that changed terms invalidate prior approval. Stable operation IDs and idempotency keys, passed down to the payment provider, ensure a retry after a dropped connection does not refund twice.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Marks Birthday Reflecting on a Year of Coding Lessons

A software developer posted on DEV Community to mark their birthday. They reflected on a year spent learning, debugging, and repairing code, comparing life to a changelog with hopes for fewer bugs and better decisions. The author also said they are working on a new engineering article to be published soon. The post was lighthearted in tone and invited fellow developers to send birthday wishes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Hobbyist Builds Brotato-Style Game on 2013 Laptop Using AI Assistant and No Coding Background

A 35-year-old gamer with no programming experience decided to make his own game after years of playing titles from childhood onward. Unable to run heavier engines like Unity or Unreal on his aging 2013 laptop, he chose the free Godot engine, which powers Brotato. He relied on tutorials and Google's Gemini AI to write code, a process he says produced many hallucinated fixes and over 1,400 debugging errors. The result ended up closely resembling Brotato, so he added active abilities and permanent upgrades to differentiate it. The account, shared on DEV Community, presents the project as a humorous illustration of how accessible AI-assisted game development has become.

0 comments Read more at DEV Community