do_anh_tu
Remote: Yes — daily overlap with US-Eastern mornings (~9:30am–1:30pm ET)
Willing to relocate: No (remote only)
Technologies: Python (10+ yrs) — Django/DRF, FastAPI, Celery · LLM agent orchestration (LangGraph, MCP, Claude Code/Codex/Antigravity, Gastown, Openclaw) · RAG (pgvector + Cohere) · workflow automation (n8n, ComfyUI) · PostgreSQL/Redis · Docker, GitHub Actions · Playwright · Stripe
Senior backend/AI engineer. For the last two years I built and ran autonomous coding agents in production: they pick up bug reports, reproduce, fix, write tests, and open PRs - engineers review instead of writing. The same multi-agent harness now runs a fully automated content platform (five sites, no human in the publish loop). Before LLMs: cryptocurrency exchanges, an end-to-end ML training platform, and 10 years mentoring at Vietnam's biggest Python community (Pymi.vn).
What I care about: agent infra where correctness and observability actually matter — building systems where an agent can be wrong without being dangerous (credential isolation, sandboxed tools, review gates). Contract or full-time.
Résumé/CV: https://bit.ly/doanhtu
Github: https://github.com/tudoanh
Linkedin: https://www.linkedin.com/in/doanhtu/
Email: [email protected]
It started because my wife watches Chinese dramas and new episodes never have subtitles for our language. Turns out thousands of people have the same problem — Arabic speakers watching anime, Russian speakers following Turkish series, Persian speakers catching up on K-dramas.
Supports 40+ languages, works with any video link or direct file upload. There's also a Mini App inside Telegram for a more visual experience.
Show HN: RankClaw – AI-audited all 14,706 OpenClaw skills; 1,103 are malicious
RankClaw (rankclaw.com) is a security scanner for AI agent skills — the OpenClaw/ClawHub ecosystem that extends Claude-based agents with file, web, and shell access.Data: - 14,706 skills indexed - Every single skill has a full AI deep audit report (14,704 complete) - 1,103 confirmed malicious (7.5%)The key finding: automated surface scanning (metadata, dependency checks, pattern...
I've been scanning all 14,704 skills in the registry and running AI deep audits on ~3,800 so far. The headline finding: surface heuristics (pattern matching, dependency checks, metadata) flag about 6.6% as malicious. AI deep audit of the same skills finds 16.4%. Surface scanning misses roughly 60% of the actual risk.
The reason is that these skills aren't traditional packages — they're markdown instruction files that tell an AI agent what to do, with full shell, file system, and network access. The attacks are in natural language: prompt injection, social engineering targeting the AI itself, instructions to generate and execute code at runtime. There's no malicious code to detect because the payload doesn't exist until the AI writes it during a conversation.
Some of the attack patterns I've documented: one actor published 30 skills under the name "x-trends" across multiple accounts (28/30 confirmed malicious). Another cluster impersonates ClawHub's own CLI with base64 curl|bash payloads. One skill has a "Talking to Your Human" section with a pre-written pitch for the AI to ask the user's permission to mine Monero.
The most counterintuitive case: lekt9/foundry contains zero malicious code. It instructs your AI agent to generate and execute code as part of its normal workflow. Static analysis finds nothing because the dangerous code doesn't exist until the AI writes it during a live conversation. This attack class requires AI to detect AI.
Free to check any skill. All AI audit reports are public.
Key finding from our AI deep audit data: surface heuristics find 6.6% malicious. AI audit of the deep-scanned cohort finds 16.4% — surface scanning misses roughly 60% of the risk.
The most counterintuitive case: lekt9/foundry contains zero malicious code. It instructs your AI agent to generate and execute code as part of its workflow. Static analysis finds nothing because the dangerous code doesn't exist until the AI writes it during a live conversation.
Data at rankclaw.com. AI audit reports public for all 3,721+ deep-scanned skills.
Check it out at: https://addons.subly.xyz & https://subly.xyz
The Firefox addon/Chrome extension is free, but you need your own OpenRouter/Gemini API key. The cost of web translation is really low, you can translate an article for ~$0.01 with really good quality. (You can try at https://addons.mozilla.org/en-US/firefox/addon/subly-xyz/)
I built it because I use Firefox the most and it seemed like no translate addon was good or simple enough. Chrome translate kinda works, but the quality is so low; it usually doesn't understand the article context.
Cyberdore 2064 – RPi0 based cyberdeck
As developers, we often want everything to be rich, verbose, and customizable — but the reality is that for most users (and now for AIs acting on their behalf), simplicity wins every time. It’s like designing a great UI: the fewer ways you can get lost, the more people (or models) can actually use it productively.
If MCP ends up nudging the ecosystem toward small, well-defined, composable capabilities, that’s a win far beyond just “AI integration.”
[1] https://huggingface.co/bartowski/DeepSeek-R1-Distill-Qwen-32...
Show HN: Fixthis.me – Fix your grammar and email
Hi, as a non-native English speaker, it's sometimes difficult for me to write a sentence without any errors. I'm not happy with that, which is why I created this website. Now I can simply paste a paragraph and quickly receive a corrected version using ChatGPT. Feel free to try and give me some feedback. Thank you!
Pretty awesome idea btw. I would like to highlight a branch for deeper questions. Just to speed things up.