nyell
What Running a Multi-Agent Software Project Looks Like
Show HN: Fast, private command-line history search with instant documentation
https://github.com/cybrota/recaller
Hi, HN community,I have built a CLI tool called Recaller to fuzzy-search your command history based on recency and frequency. Recaller can magically curate your history and hands over most useful commands to you. Think it like a second brain while recalling history.Please check it out and let me know your feedback.
My Failure Resume
Scharf: A fast SAST tool to fix GitHub Actions supply chain risks
Project link: https://github.com/cybrota/scharf
Quick demo: https://imgur.com/a/wEyk9AR
This tool can cutdown hours of grind for Security engineers.
Show HN: Scharf – Find and protect ur GitHub Actions from supply-chain attacks
https://github.com/cybrota/scharf
Welcome to "Scharf", a blazing-fast security scanner for hardening third-party GitHub actions with mutable references. Using mutable references (version tags, main/master/dev etc.) is a security vulnerability that can result in supply-chain attacks.The recent `tj-actions/changed-files` security incident is scary, so we built a mutable-reference scanner that performs a deep scan across branches...
For whoever aware of recent `tj-actions/changed-files` security incident, I built a mutable-reference scanner that performs a deep scan across branches to identify all third-party GitHub actions used in organization Git projects. The output report can be exported to CSV or JSON (default).
Using mutable references (version tags, main/master/dev etc.) is a security vulnerability that can result in supply-chain attacks.
Project link:
Whispr: Securely develop software without leaking secrets
It is easy for developers to place their database credentials in a `.env` file for local testing and accidentally commit them to a version control system.
Even not committed, storing credentials as plain text is a risk as per MITRE ATT&CK Framework: credential access.
Whispr helps you store nothing locally and provides on-demand, Just In Time (JIT) secret access for applications. It supports AWS, Azure and GCP secret vaults.
Best part is no bash scripts nor CLI commands required. The tool is language & application agnostic.
Show HN: Prompt Markup Language (PromptML) CLI
https://github.com/narenaryan/promptml-cli
A CLI tool to execute PromptML (Prompt Markup Language) scripts with multiple AI providers.Supports streaming & raw AI responses. For demo, see here: https://asciinema.org/a/664270
Programming HTTP clients in native Go without using third-party libraries
https://gist.github.com/narenaryan/651d8081eaaffa846e05da7a3...
You can test it with Claude and GPT-3.5 or GPT-4o, and they all will bring strikingly bring similar results with differences in detail.
YAML & XML serializations are coming in v0.6.0 of PromptML.
https://github.com/narenaryan/promptml/ https://www.promptml.org/
It isn't XML nor JSON, but a DSL built especially for writing prompts. We do not have published benchmarks but running few examples, we see consistent outputs from LLM, and supplements RAG by separating context and using it for enriching prompt.
Show HN: PromptML, a new markup language for writing structured AI prompts
https://github.com/narenaryan/promptml
Hi friends, let me show you a new language I designed for writing AI Prompts as Code (APaC). Think it like Terraform for prompting. Write in PromptML once, and template the parsed object to any flavor of LLM.It is open-sourced and contributions are very welcome.
I took your point down. Thanks for brining it forward.
We are building a smart bookmark manager for Chrome. Need your feedback
Hi hackers. We (at Vidura Labs) are working on an amazing alternative to standard browser bookmarks that can smartly organize, and visualizes bookmarks, so that your brain can easily follow, rather than searching through a heap of objects(like in traditional bookmarks).It is a chromium extension that lets you bookmark any web site, automatically tags it and puts it into the right folder (or...
Does Python really sucks?
Show HN: Vidura, an AI prompt manager for text, image, and audio
Hi HN community: I am one of the creators of vidura, the missing "AI prompt manager" for prompt engineers. Vidura is essentially a Prompt Management System(PMS) where a user can categorize, tag, and test their GPT and Stable diffusion prompts in one single place. With syntax highlighting and export responses to PDF, it provides a practical user experience.