5 ms·
Can't you do some kind of static analysis instead?
by snovv_crash 1y ago
Can't you do some kind of static analysis instead?
- fithisux 1y agoYes. It is much more clear to be explicit though.
- jacquesm 1y agoSafer too.
- Figs 1y agoDepends if your code has horrors like this lurking in it: m = importlib.import_module(requests.get("http://localhost:8000/package_name").content.strip().decode("ASCII"))
- falcor84 1y agoIf you want even better nightmares, you can make localhost:8000 forward to a container running claude code with --dangerously-skip-permissions which uses an unkindness of mcp servers to control that endpoint on the fly based (amongst other sources) on 4chan's /b/.
- snovv_crash 1y agoBetter to let the viewers on a twitch stream vote for it.
- zahlman 1y ago> which uses an unkindness of mcp servers I guess you meant "a feature of MCP servers which is unkind", but I couldn't help but interpret "unkindness" as the collective noun for a group of MCP servers.
- falcor84 1y agoThat was indeed the intent. I first considered "a conspiracy" like with lemurs, but eventually felt that "unkindness" was more appropriate.
- im3w1l 1y agoSince this should be a rare thing I don't think it's unreasonable to require users of patterns like this to put some kind of special annotation for that static analysis tool saying "it may not look like it but I'm doing an import here".