DEV Community

holistis profile picture

holistis

Building things people actually use: Longevity AI, personal health reports. Yad, a free open-source browser agent, a smart contract security scanner for AI agents (Bug Bounty Intelligence).

PyMC Labs has 1,256 stars. A GitHub issue title could still steal their API key.

PyMC Labs has 1,256 stars. A GitHub issue title could still steal their API key.

Comments
2 min read

Want to connect with holistis?

Create an account to connect with holistis. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
A GitHub comment can steal your secrets. I found 22 repositories where it could.

A GitHub comment can steal your secrets. I found 22 repositories where it could.

Comments
3 min read
I spent a day auditing GitHub Actions across a dozen AI agent frameworks

I spent a day auditing GitHub Actions across a dozen AI agent frameworks

Comments
2 min read
I built a scanner for CI checks that can't fail. Nvidia just built one for AI skills that can't be trusted.

I built a scanner for CI checks that can't fail. Nvidia just built one for AI skills that can't be trusted.

Comments
2 min read
Two Strangers, Zero Stars, Two Boundaries Still Open

Two Strangers, Zero Stars, Two Boundaries Still Open

Comments
8 min read
We had two independent proofs of a critical RCE. The real software disagreed.

We had two independent proofs of a critical RCE. The real software disagreed.

Comments
3 min read
I counted how many CI checks cannot fail. On a 120-file sample, 74 percent.

I counted how many CI checks cannot fail. On a 120-file sample, 74 percent.

Comments
5 min read
A CI timeout is a kill, not a failure. Playwright's defaults changed because of it.

A CI timeout is a kill, not a failure. Playwright's defaults changed because of it.

Comments
5 min read
Zero stars, seventy cloners, and a readme that said nothing about either

Zero stars, seventy cloners, and a readme that said nothing about either

Comments
3 min read
79 clones, 2 stars, 4 installs, and I only just checked

79 clones, 2 stars, 4 installs, and I only just checked

Comments
3 min read
My QA bot was cancelled 60 nights in a row and never said a word

My QA bot was cancelled 60 nights in a row and never said a word

Comments
5 min read
I shipped a Series-A-grade security autopilot in one day. It costs €2.60/year.

I shipped a Series-A-grade security autopilot in one day. It costs €2.60/year.

Comments
8 min read
x402 payments prove money moved. They don't prove you got what you paid for.

x402 payments prove money moved. They don't prove you got what you paid for.

Comments
4 min read
I open sourced my QA tool, then spent three nights trying to break it before anyone else could

I open sourced my QA tool, then spent three nights trying to break it before anyone else could

Comments
5 min read
What a Sentiment Index Cant See: A Live Example From Real DeFi Execution Data

What a Sentiment Index Cant See: A Live Example From Real DeFi Execution Data

Comments
3 min read
I scanned 1,049 AI-built apps. 71 got flagged for the same mistake. Here's how many were actually real.

I scanned 1,049 AI-built apps. 71 got flagged for the same mistake. Here's how many were actually real.

Comments
4 min read
Your AI-built app shipped in a week. Was it checked in a week too?

Your AI-built app shipped in a week. Was it checked in a week too?

Comments
2 min read
I built a browser agent that never lets your AI key drain quietly, then I tried to break it myself

I built a browser agent that never lets your AI key drain quietly, then I tried to break it myself

Comments
6 min read
I built a judge that argues with itself before you submit a bug bounty finding

I built a judge that argues with itself before you submit a bug bounty finding

Comments
3 min read
What actually gets paid in smart contract audit contests

What actually gets paid in smart contract audit contests

Comments
4 min read
Your AI-built app is impressive. It is just not yours yet.

Your AI-built app is impressive. It is just not yours yet.

Comments
2 min read
A payment gateway for MCP servers, and the security bugs I found in my own code first

A payment gateway for MCP servers, and the security bugs I found in my own code first

1
Comments 3
6 min read
The cheapest question you can ask before writing a PoC

The cheapest question you can ask before writing a PoC

Comments
2 min read
I Built a Pay-Per-Call DeFi Bot Intelligence API Using x402 — No Signup Required

I Built a Pay-Per-Call DeFi Bot Intelligence API Using x402 — No Signup Required

Comments 1
2 min read
I Built a Self-Improving Health Platform: Five AI Agents That Learn Every Week

I Built a Self-Improving Health Platform: Five AI Agents That Learn Every Week

1
Comments
6 min read
I Added Legal Compliance Checks to My E2E Test Suite for €0. Here's How (and Why a Non-Developer Had To).

I Added Legal Compliance Checks to My E2E Test Suite for €0. Here's How (and Why a Non-Developer Had To).

Comments
6 min read
I Didn't Buy Octomind. I Built My Own for €0. Here's Why It's Better.

I Didn't Buy Octomind. I Built My Own for €0. Here's Why It's Better.

Comments
5 min read
Why I Built a Halal-By-Design AI Image Pipeline

Why I Built a Halal-By-Design AI Image Pipeline

Comments
6 min read
How I Built a Health-Content Autopilot for €12/Month

How I Built a Health-Content Autopilot for €12/Month

Comments
5 min read
Three free wearable integrations for an AI health report: Oura, Withings, Polar

Three free wearable integrations for an AI health report: Oura, Withings, Polar

Comments
2 min read
De invloed van plantaardige eiwitten op je darmgezondheid

De invloed van plantaardige eiwitten op je darmgezondheid

Comments
5 min read
De impact van trainingsintensiteit op je darmmicrobioom en metabolische gezondheid

De impact van trainingsintensiteit op je darmmicrobioom en metabolische gezondheid

Comments
5 min read
De impact van eicosapentaeenzuur op spierprestaties: Feiten en inzichten

De impact van eicosapentaeenzuur op spierprestaties: Feiten en inzichten

Comments
5 min read
De Kracht van Vitamine D bij Depressieve Klachten

De Kracht van Vitamine D bij Depressieve Klachten

Comments
4 min read
De Rol van Machine Learning in de Diagnostiek van Chronische Vermoeidheid

De Rol van Machine Learning in de Diagnostiek van Chronische Vermoeidheid

Comments
4 min read
Oxidatieve Stress en de Invloed van Onze Leefstijl

Oxidatieve Stress en de Invloed van Onze Leefstijl

Comments
5 min read
loading...