- 🔨 Building bough, which reads your Claude Code and Codex history and draws what you actually built
- 🔍 Breaking MCP servers & Web Applications mostly. Path traversal, injection, the usual
- ⚙️ Reach for: security issues in the tools everyone is wiring up
- 💬
pingme aboutAI,MCP,coding agents, orAI security
- SSRF to private hosts in the MCP Ruby SDK ·
GHSA-4m5j-jjfc-97gx - Path traversal in CircleCI's MCP server ·
GHSA-4pxc-9x5p-39fc - Malformed JSON-RPC crashes the MCP PHP SDK ·
php-sdk#412


