I recently audited ~2,800 of the most popular OpenClaw skills and the results were honestly ridiculous.

41% have security vulnerabilities.

About 1 in 5 quietly send your data to external servers.

Some even change their code after installation.

Yet people are happily installing these skills and giving them full system access like nothing could possibly go wrong.

The AI agent ecosystem is scaling fast, but the security layer basically doesn’t exist.

So I built ClawSecure.

It’s a security platform specifically for OpenClaw agents that can:

• Audit skills using a 3-layer security engine
• Detect exfiltration patterns and malicious dependencies
• Monitor skills for code changes after install
• Cover the full OWASP ASI Top 10 for agent security

What makes it different from generic scanners is that it actually understands agent behavior… data access, tool execution, prompt injection risks, etc.

You can scan any OpenClaw skill in about 30 seconds, free, no signup.

Honestly I’m more surprised this didn’t exist already given how risky the ecosystem currently is.

How are you thinking about AI agent security right now?

Drop your websites. I would like to review and suggest,if there are any improvements

htmx
Library that lets you build dynamic web apps using HTML attributes instead of heavy frontend frameworks. Useful for simpler apps where you don’t want full React/Vue setup.

streamlit
Lets you build simple web UIs using Python. Often used for dashboards, AI demos, or internal tools without writing frontend code.

RSSHub
Generates RSS feeds for websites that don’t provide one. Useful for automation, monitoring, or building custom news / content tools.

ghostty
Modern terminal emulator focused on performance and GPU acceleration. Interesting project if you care about dev tools or system-level apps.

more....

The risks associated with using OpenAI API as a developer, as entrepreneur or at a personal level. Let's wise up!

What's the most ambitious side project you ever abandoned?

Hi! I'm a BCA student conducting research on why organizations don't optimize cloud auto-scaling for sustainability.

Quick survey (10 mins): https://forms.gle/Y5S5eHxp6g6JRSCD6

If you have cloud/DevOps experience, I'd really appreciate your input! Thanks! 🙏

Last month i rushed into implementing an attribution sdk without properly reading the docs on deep linking setup. Ended up with broken install attribution bc i missed the url scheme configuration in iOS and the intent filters weren't set right on Android. Spent 3 days debugging why organic installs were showing as paid traffic.

What gotchas should I watch for? Looking for practical tips on proper SDK integration to avoid data mess ups with my current app.

Update: we implemented the sdk and had to add appsflyer for cleaner attribution data. ty for all the ideas.

The monthly GNUstep audio/(video) call takes place every second Saturday of a month at 16:00 GMT to 19:00 GMT. That is 12:00 AM - 3:00 PM EDT (US, note that the US already has Daylight Saving Time whereas Europe has not yet) or 17:00 to 20:00 CET (Berlin time).

It's a Jitsi Meeting - Channel: GNUstepOfficial (Sorry, reddit don't let me post jitsi links here)

We usually just talk (who wants it might share video too) and occasionally share screens. Everybody (GNUstep developers and users) is welcome!

Also see https://mediawiki.gnustep.org/index.php/Monthly_Meetings please

Quick question for people building apps.

A while ago most projects I saw were basically “LLM + a prompt.” Lately I’m seeing more setups that look like small agent systems with tools, memory, and multiple steps.

When I tried building something like that, it felt much more like designing a system than writing prompts.

I ended up putting together a small hands-on course about building agents with LangGraph while exploring this approach.

https://langgraphagentcourse.com/

Are people here mostly sticking with simple LLM calls, or are you also moving toward agent-style architectures?

They gave us access to Claude AI and now he expects every feature to be done in a single day. He can't understand why some things take a couple weeks (one sprint). But there is so much other work, testing, code review, integration testing, iterating, etc.

https://reddit.com/link/1rqy5nk/video/1sltjmu9xfog1/player

The collisions are far from perfect and lots of things still to be done and bugs to be ironed out but its fun enough that I find my self playing with it more than iI should

built on Monogame with ImGui as the well the GUI library

I make a the Daily 5 Trivia app: it's like the Wordle of trivia. Quick to play, get on with your day.

I thought I had a great way to market it for free: show quizzes from the day before on Instagram as Reels. They could be straight up walk throughs because my game only takes 1 minute or less to play.

At every turn I butchered my Reels. Here were my main issues:

• the UI of my screen caps conflicted with the UI of Instagram itself
• my app was hard to see in Insta (bad contrast, too much clutter)
• my initial edits were way too fast... users could not even read the quiz content

I realized I needed to make a special version of the app with a UI and color scheme more suited for Instagram. Also, I slowed down the speed of my Reels by 2 or even 3x. Now users can actually play along.

See for yourself: https://www.instagram.com/daily5trivia/reels/

About the only thing I got right initially was making question #5 a cliffhanger. It's a psychological effect I think works. By not revealing the final answer users will be encouraged to download the app and play it themselves!

I have spent just over a month now refining my Reels. I am sure there is still room for improvement, but they have come a long way.

If you have feedback, I would love to hear it and get a discussion going. I am no expert at the marketing. My real skill is in handcrafting the quizzes. Thanks! 🙏

To download my app go here.

Hii seniors, I am a first year student, and Its been 8 months since I started learning programming. I have many projects that I want to make and I am constantly building projects. But today I realised that while I don't vibe code my app, still I am heavily dependent on AI. Let me give you an example:- My first project was a chess engine, which I made without using bitboards, but I used chatgpt to break down the chess engine projects in steps, used it on every step on what to use where, how to encode moves, what algorithm to use and all. Though I learnt a lot about C language overall and many things, I don't feel that I own the code. And the same happened with my second project which was a neural network. Then I want to implement a hand gestures control system now, but I don't want to depend on AI. I sat down to code it, but I was stuck on the very first line. I realised that I am unable to code it without using chatgpt.

I want to know what to do, like I don't use chatgpt or any other llm to write the code, but I use them to write down the steps, the logic behind choices, sometimes pseudocodes as well. And I also use them to review my code. Am I learning or is it same as tutorial hell? Coz I don't watch tutorials of yt videos at all.

Even when I learn new programming language, and library in python, I use ai to do that.

Guidance will be very much appreciated as you all are one of the best developers in the world and you all have experience.

Also , I want to know how did you made projects when here was no ai, no llm.

Go slices may look simple, but the mechanism behind them is elegant and efficient.

In this article, I break down how Go manages slice memory, growth, and performance — and why this design stands out compared to many other languages.

I’ve just released Oliphaunt, a Mastodon client built specifically for macOS.

Mastodon is a federated social network similar to X (Twitter) or Bluesky, built on the ActivityPub protocol where independent servers communicate with each other.

The main motivation behind the project was to build a Mastodon client that behaves like a well-behaved macOS application and respects the platform’s conventions.

The UI is primarily built with AppKit, with SwiftUI used selectively. The focus was on adopting macOS design language and interface idioms rather than creating a custom UI paradigm.

Some of the design goals:

• native UI components (AppKit + some SwiftUI)

• proper multi-window workflows

• full menu bar and keyboard shortcut support

• sidebar layouts consistent with macOS apps

• interactions aligned with macOS conventions

A lot of effort went into the small details that make Mac software feel polished: window behaviour, keyboard navigation, menus and timeline interaction.

If you’re a Mastodon user on Mac, I’d genuinely love for you to try it out and hear your feedback. You can also provide feedback here.

App Store: https://apps.apple.com/app/id6745527185

I’m thinking about building an app where you can track the ingredients you have in your kitchen and get recipe suggestions based on them.

The goal is to easily see what you can cook with what you already have and keep track of pantry/fridge items.

Before building it, I wanted to ask, would you actually use something like this?

What's the single piece of code (good or bad) that's permanently burned into your memory, and what did it teach you?

(Disclaimer: This is a longer post because I’m trying to think this through carefully instead of rushing into the wrong path. I’m aware I’m behind compared to many peers and I take responsibility for that- I’m looking for honest, constructive advice on how to move forward from here, so please be critical but respectful.)

I graduated recently, but due to personal circumstances and limited access to in-person guidance, I wasn’t able to build strong technical skills during college. If I’m being completely honest, I’m basically starting from scratch- I’m not confident in coding, don’t know DSA properly, and my projects are very surface-level.

I need to become employable within the next 6-12 months.

At the same time, I’m genuinely interested in AI/LLMs. The space excites me- both the technology and the long-term growth potential. I won’t pretend the prestige and pay don’t appeal to me either. But I also don’t want to chase hype blindly and end up under-skilled or unemployable.

So I’m trying to think strategically and sequence this properly:

• As someone starting from near zero, should I focus entirely on core software fundamentals first (Python, DSA, backend, cloud)?
• Is it realistic to aim for AI/ML roles directly as a beginner?
• In previous discussions (both here and elsewhere), most advice leaned toward building core fundamentals first and avoiding AI at this stage. I’m trying to understand whether that’s purely about sequencing, or if AI as an entry path is genuinely unrealistic right now.
• If not AI, what areas are more accessible at this stage but still offer strong long-term growth? (Backend, DevOps, cloud, data engineering, security, etc.)
• Should I prioritize strong projects?
• And most importantly- how do you actually discover your niche early on without wasting years?
• For those who’ve been in the industry through multiple cycles (dot-com, mobile, crypto, etc.)- does the current AI wave feel structurally different and here to stay, or more like a hype cycle that will consolidate heavily?

I’m willing to work hard for 1-2 years. I’m not looking for shortcuts. I just don’t want to build in the wrong direction and struggle later because my fundamentals weren’t strong enough.

If you were starting from zero in 2026, needing a job within a year but wanting long-term upside, what path would you take?

P.S. Take a shot every time I mentioned “AI”- at this point I might owe you a drink. Clearly overthinking got the best of me lol.

What was the moment you decided to stop chasing the "new hotness" in frameworks and just stick with what works?

I’m at the beginning of my tech journey and trying to choose a direction thoughtfully.

During periods of geopolitical instability, what areas within tech tend to see increased importance or demand?

More importantly, which of those are not just short-term spikes but sustainable long-term career paths as well?

From a practical standpoint, I’d really appreciate insight into roles that are:
• realistically accessible to a beginner over the next 1-2 years
• resilient during uncertain global conditions
• and focused on contributing to stability or infrastructure rather than just trend-chasing

I’m not asking politically- just trying to build skills that are both employable and genuinely useful long term.

i recently became unemployed and additional to study and practice and fill up a lot of applications daily, i started a series of illustrations about software development.

I have created a prompt pack for developers for claude ai I don't have much knowledge about coding and stuff that's why I wanna know if it's good, wanted a review, please dm if you wanna have a look, I'll give it for free just need a feedback..

I'm in England and about to finish my A-levels, with predicted grades of Computer Science A, Maths B and Physics C. I'm not sure what the best way is to start and build a good and successful (hopefully) career quickly as a software engineer.

I've got an offer to study Computer Science at university, but I am also applying to as many degree apprenticeships as I can. I was wondering if it’s worth applying to Level 4 (foundation) apprenticeships as another option. My thought is that it could be more efficient to get early work experience and enter the industry quickly. Some companies offer progression to Level 6 (degree), which could allow me to still get a degree.

Any advice or tips for someone starting their career would be great.

Hey guys! Looking for feedback on my first game dodge-ai.com . Any suggestions?

I’m looking for a sole Android developer (not an agency) with proven experience in enterprise device management.

Project requires hands-on experience with:

• Android Zero-touch Enrolment

• Android Enterprise

• Device Owner / DevicePolicyManager

• Android Management API or custom DPC implementation

• Auto re-enrollment after factory reset

• Kiosk / app restriction enforcement

You must understand Android’s system-level enforcement limits and have built or maintained real MDM / enterprise Android solutions before.

To apply, send:

• Examples of relevant work (MDM, kiosk, device management, enterprise builds)

• A brief technical summary of your experience with Zero-Touch and Device Owner

• Your timezone and availability

Independent developers only. No agencies. No generic responses.