nick_wolf

3 ms·

1.
Show HN: CapSlap – Local caption generation using Whisper(github.com)
3 points by nick_wolf 11mo ago|0 comments
2.
by nick_wolf 1y ago
Thanks! Glad identify-as makes sense. Your prior research was definitely valuable context, appreciate you putting that out there. Checked out mcp-scan yesterday, nice work! Good to see more tools emerging for MCP security. Feels like these
3.
by nick_wolf 1y ago
It's definitely a weird loop, relying on another LLM call to analyze potential issues in stuff meant for an LLM. And you're right, it's not perfectly predictable – you might get slightly different feedback run-to-run until ca
4.
by nick_wolf 1y ago
Thanks for the kind words – really appreciate you taking the time to look it over and get what we're trying to do here. Yeah, combining the regex/pattern checks with having Claude take a look felt like the right balance... catch t
5.
by nick_wolf 1y ago
Hmm, yeah, that's a fair point. You're right, we're looking at the tool definitions – the descriptions, schemas, etc. – not the stuff that comes back after a tool runs. It's tricky, because actually running the tools...
6.
by nick_wolf 1y ago
That was faster than expected - here's the merged commit implementing the --identify-as flag: https://github.com/riseandignite/mcp-shield/commit/e7e2a6c04... . Thanks again!
7.
by nick_wolf 1y ago
Great point, thanks for raising it. You're spot on – the client currently sends name: 'mcp-shield', enabling exactly the bait-and-switch scenario you described. I'll push an update in ~30 mins adding an optional --identi
8.
Show HN: MCP-Shield – Detect security issues in MCP servers(github.com)
134 points by nick_wolf 1y ago|39 comments
9.
by nick_wolf 2y ago
This article could be an unintentional case study in why letting patterns emerge beats designing them upfront. Java devs insisted on enum classes while JS devs gravitated towards plain objects tells us something about language evolution. Ma