Open Source Developer · Computer Science Graduate Student · AI Agent Security Researcher
Building reliable software systems and exploring the security of AI agents.
I'm a Computer Science graduate student interested in software engineering, cybersecurity, distributed task systems, and AI agent security.
I enjoy turning ideas into practical, maintainable software — from backend architecture and plugin ecosystems to asynchronous task execution and security evaluation.
My current interests include:
- 🤖 AI Agent Security — runtime monitoring, behavior analysis, and security evaluation
- 🛡️ MCP & Tool Security — tool interfaces, permission boundaries, and secure execution
- ⚙️ Backend Engineering — plugin systems, task scheduling, workers, and asynchronous processing
- 🌍 Open Source — bug fixes, performance improvements, regression testing, and upstream contributions
- 🧠 AI & Machine Learning — LLM agents, deep learning, and evaluation methods
I value software that is not only functional, but also understandable, testable, and maintainable.
🇨🇳 中文介绍
你好,我是 Ankang / longfie,目前是一名计算机方向研究生,也是一名开源软件开发者。
我的主要兴趣包括 AI Agent 安全、后端工程、网络安全、异步任务系统和开源软件工程。
我关注的不只是功能实现,也包括系统的可靠性、可维护性、异常处理和安全边界。
目前主要投入于:
- AI Agent Runtime Security 与行为监控
- MCP 工具调用安全与安全评估
- 插件化后端架构与异步任务调度
- 开源项目贡献与工程实践
- 人工智能与深度学习研究
I contribute to open-source projects by identifying bugs, improving performance, strengthening validation, and making software systems more reliable.
perf(security): avoid Unicode folding for ASCII characters
- Optimized character handling to avoid unnecessary Unicode folding for ASCII characters.
- Improved the efficiency of a security-related character-processing path.
- Changed 2 files, adding 110 lines.
- Status: Merged into
mainon October 28, 2026.
The following PRs were verified as open on October 29, 2026. Their status may change as maintainers review and merge them.
| Project | Contribution | PR |
|---|---|---|
| Cisco AI Defense / MCP Scanner | Follow pagination for MCP tools, prompts, and resources | #281 |
| Promptfoo | Validate trajectory assertion count bounds | #11835 |
| Guardrails | Preserve nullable values when applying filters | #1679 |
| Nasiko | Add a missing build-ui recipe |
#348 |
I distinguish merged contributions from open pull requests so that every contribution is transparent and verifiable.
☁️ TFcloudMulti-platform Task Automation Platform A multi-platform, multi-account task automation system built around unified account management, scheduling, and plugin-based extensibility. Highlights
Stack
|
🛡️ agentSecureAI Agent Security Research & Learning A research-oriented repository exploring the engineering foundations of AI agent security monitoring and evaluation. Focus Areas
Stack
|
My research interests center on the security and reliability of autonomous AI agents.
AI Agent Security
│
├── Runtime Security Monitoring
│ ├── Behavior Analysis
│ └── Risk Detection
│
├── Tool & MCP Security
│ ├── Tool Invocation Validation
│ └── Permission Boundaries
│
├── Agent Interaction Security
│ ├── Multi-Agent Coordination
│ └── Authorization Consistency
│
└── Security Evaluation
├── Benchmark Design
└── Reproducible Experiments
I'm particularly interested in this question:
How can we detect unsafe agent behavior early enough to prevent unauthorized actions and harmful outcomes?
I also explore how asynchronous execution, task provenance, and runtime controls affect the security and reliability of agent systems.
|
|
Readable > Clever
Maintainable > Temporary
Modular > Coupled
Observable > Invisible
Reliable > "Works on my machine"
Good software should remain understandable and reliable as it grows.
I'm interested in collaborating on projects related to:
- AI Agents and Agent Security
- Cybersecurity and MCP Security
- Backend Architecture and Distributed Systems
- Automation Systems and Developer Tools
- Open Source Infrastructure
If you're working on something interesting, feel free to open an issue or start a discussion in one of my repositories.

