Skip to content
View longfie's full-sized avatar
🤣
🤣

Block or report longfie

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
longfie/README.md

Hi, I'm Ankang 👋

Open Source Developer · Computer Science Graduate Student · AI Agent Security Researcher

Building reliable software systems and exploring the security of AI agents.


👨‍💻 About Me

I'm a Computer Science graduate student interested in software engineering, cybersecurity, distributed task systems, and AI agent security.

I enjoy turning ideas into practical, maintainable software — from backend architecture and plugin ecosystems to asynchronous task execution and security evaluation.

My current interests include:

  • 🤖 AI Agent Security — runtime monitoring, behavior analysis, and security evaluation
  • 🛡️ MCP & Tool Security — tool interfaces, permission boundaries, and secure execution
  • ⚙️ Backend Engineering — plugin systems, task scheduling, workers, and asynchronous processing
  • 🌍 Open Source — bug fixes, performance improvements, regression testing, and upstream contributions
  • 🧠 AI & Machine Learning — LLM agents, deep learning, and evaluation methods

I value software that is not only functional, but also understandable, testable, and maintainable.

🇨🇳 中文介绍

你好,我是 Ankang / longfie,目前是一名计算机方向研究生,也是一名开源软件开发者。

我的主要兴趣包括 AI Agent 安全、后端工程、网络安全、异步任务系统和开源软件工程。

我关注的不只是功能实现,也包括系统的可靠性、可维护性、异常处理和安全边界。

目前主要投入于:

  • AI Agent Runtime Security 与行为监控
  • MCP 工具调用安全与安全评估
  • 插件化后端架构与异步任务调度
  • 开源项目贡献与工程实践
  • 人工智能与深度学习研究

🌍 Open Source Contributions

I contribute to open-source projects by identifying bugs, improving performance, strengthening validation, and making software systems more reliable.

✅ Merged Contributions

perf(security): avoid Unicode folding for ASCII characters

  • Optimized character handling to avoid unnecessary Unicode folding for ASCII characters.
  • Improved the efficiency of a security-related character-processing path.
  • Changed 2 files, adding 110 lines.
  • Status: Merged into main on October 28, 2026.

View merged pull request →

🔧 Open Pull Requests

The following PRs were verified as open on October 29, 2026. Their status may change as maintainers review and merge them.

Project Contribution PR
Cisco AI Defense / MCP Scanner Follow pagination for MCP tools, prompts, and resources #281
Promptfoo Validate trajectory assertion count bounds #11835
Guardrails Preserve nullable values when applying filters #1679
Nasiko Add a missing build-ui recipe #348

I distinguish merged contributions from open pull requests so that every contribution is transparent and verifiable.


🚀 Featured Projects

☁️ TFcloud

Multi-platform Task Automation Platform

A multi-platform, multi-account task automation system built around unified account management, scheduling, and plugin-based extensibility.

Highlights

  • 🔌 Plugin-oriented architecture
  • ⏱️ Task scheduling and retries
  • 🔄 Asynchronous task execution
  • 👤 Multi-account management
  • 🔐 Credential storage
  • 🖥️ User and admin dashboards
  • 🐳 Docker deployment
  • 📊 Execution history and task status

Stack

PHP Webman React MySQL Docker

🛡️ agentSecure

AI Agent Security Research & Learning

A research-oriented repository exploring the engineering foundations of AI agent security monitoring and evaluation.

Focus Areas

  • 🤖 Agent behavior analysis
  • 📝 Runtime behavior logging
  • 🌐 Browser automation
  • 🔧 Tool interface security
  • 🐳 Isolated execution environments
  • 🛡️ Agent security evaluation
  • 🔎 Runtime security detection

Stack

Python FastAPI Playwright Docker


🔬 Research Interests

My research interests center on the security and reliability of autonomous AI agents.

AI Agent Security
│
├── Runtime Security Monitoring
│   ├── Behavior Analysis
│   └── Risk Detection
│
├── Tool & MCP Security
│   ├── Tool Invocation Validation
│   └── Permission Boundaries
│
├── Agent Interaction Security
│   ├── Multi-Agent Coordination
│   └── Authorization Consistency
│
└── Security Evaluation
    ├── Benchmark Design
    └── Reproducible Experiments

I'm particularly interested in this question:

How can we detect unsafe agent behavior early enough to prevent unauthorized actions and harmful outcomes?

I also explore how asynchronous execution, task provenance, and runtime controls affect the security and reliability of agent systems.


🛠️ Tech Stack

Languages

Frontend

Backend

Infrastructure & DevOps

AI & Machine Learning


🧩 Current Focus

🌍 Open Source Engineering

  • Contributing fixes and improvements upstream
  • Writing regression tests
  • Improving reliability and maintainability
  • Learning collaborative development workflows

🛡️ AI Agent Security

  • Runtime behavior monitoring
  • Tool and MCP security
  • Security evaluation and benchmarking
  • Reproducible research experiments

📊 GitHub Stats


📌 Engineering Philosophy

Readable        > Clever
Maintainable    > Temporary
Modular         > Coupled
Observable      > Invisible
Reliable        > "Works on my machine"

Good software should remain understandable and reliable as it grows.


🤝 Open Source & Collaboration

I'm interested in collaborating on projects related to:

  • AI Agents and Agent Security
  • Cybersecurity and MCP Security
  • Backend Architecture and Distributed Systems
  • Automation Systems and Developer Tools
  • Open Source Infrastructure

If you're working on something interesting, feel free to open an issue or start a discussion in one of my repositories.


📫 Find Me

Code · Research · Build · Repeat

Building things, breaking assumptions, and learning how systems really work.

Pinned Loading

  1. TFcloud TFcloud Public

    天方云签到,采用react+webman实现的轻量级自动签到系统

    PHP 16 2

  2. cloudsign cloudsign Public

    基于php的云签到

    PHP 8 2