Following X, xAI · Prompt Engineering · Vibe Coding · X Growth Experiments

💥 We scanned 50 Claude skills. Here’s what I found: - 60% had potential security risks - 20% could execute shell commands - Several could access local files There is no “npm audit” for agent skills. Now you can test whether your skills are safe: github.com/WilliamHE-cyber/c…
5
181
💥 I’m repeating the same mistake from early npm days. Blindly installing dependencies. Now it’s happening again with AI agent skills. But skills are worse: they can execute code, access files, and call APIs. Security is not optional anymore. Built a simple auditor: github.com/WilliamHE-cyber/c…
3
142
💥 We’re inside a window right now. The defaults we set today become the industry standard for the next decade. Right now: • No default security layer • No permission audit • No trust system Just like early open-source. Except this time the code doesn’t just run. It acts on your behalf. Build the security layer now. Or spend years rebuilding trust later. Scan before you trust. github.com/WilliamHE-cyber/c…
2
77
💥 There are 80,000+ Claude Skills in the community registry. Most of them are over-privileged. Some can: - read your local files - run shell commands - make external network calls And people install them blindly. We scanned dozens of Claude skills. Found real risks. So there is a simple “npm audit for agent skills”: → detects data exfiltration → flags dangerous commands → catches prompt injection patterns Before you install a skill, scan it. github.com/WilliamHE-cyber/c…
1
62
💥 The best prompts give AI exactly 4 things: 1. Context — what's the situation 2. Role — who should it be 3. Constraints — what are the limits 4. Output format — what does done look like Missing any one of these is why your prompts feel inconsistent. Save this. Use it every time.
1
1
3
53
💥92% of US developers now use AI tools daily. 41% of all code written globally is AI-generated. We crossed a threshold nobody announced. The question isn't whether to use AI to code. It's whether you're building the skills to oversee what it builds for you.
1
35
🔥 STOP SCROLLING. The Token is NOT just a crypto asset. It is the CORE INFRASTRUCTURE of the entire AI Era. We’re talking about the atomic unit that will turn raw data into tradable value, and abstract computation into measurable incentives. If you think Tokens are just speculation, you’re missing the biggest infrastructure shift coming. I broke down why Tokens are the currency of AI and how they are building the next decentralized economy. 👇🧵
1
1
33
💡 3: Productizing the Token.
The Token isn't the final product; it's the infrastructure layer. The real product is the solution built on it. •Infrastructure Product: Decentralized Compute Marketplaces (paying for GPU time). •Application Product: Tokenized Expert Agents (specialized AI that earns rewards for accuracy). •Governance Product: DAOs that vote on the future of foundational models. The shift: Competition won't be "Whose model is better?" It will be "Whose Token ecosystem is more efficient and fairer?"
3
2
19
🔮 Conclusion: The Currency of Infrastructure. 
The future isn't about better algorithms alone. It’s about creating a fair, incentivized, and transparent economic layer underneath the algorithms. Are you building the application, or are you building the infrastructure layer?
1
13
💥 Karpathy hacked the future: stop writing notes, let LLMs do it. Raw docs → auto-wiki in Markdown. Obsidian graphs the links, agents query & update everything. Every question compounds your brain-dump.
LLM Knowledge Bases Something I'm finding very useful recently: using LLMs to build personal knowledge bases for various topics of research interest. In this way, a large fraction of my recent token throughput is going less into manipulating code, and more into manipulating knowledge (stored as markdown and images). The latest LLMs are quite good at it. So: Data ingest: I index source documents (articles, papers, repos, datasets, images, etc.) into a raw/ directory, then I use an LLM to incrementally "compile" a wiki, which is just a collection of .md files in a directory structure. The wiki includes summaries of all the data in raw/, backlinks, and then it categorizes data into concepts, writes articles for them, and links them all. To convert web articles into .md files I like to use the Obsidian Web Clipper extension, and then I also use a hotkey to download all the related images to local so that my LLM can easily reference them. IDE: I use Obsidian as the IDE "frontend" where I can view the raw data, the the compiled wiki, and the derived visualizations. Important to note that the LLM writes and maintains all of the data of the wiki, I rarely touch it directly. I've played with a few Obsidian plugins to render and view data in other ways (e.g. Marp for slides). Q&A: Where things get interesting is that once your wiki is big enough (e.g. mine on some recent research is ~100 articles and ~400K words), you can ask your LLM agent all kinds of complex questions against the wiki, and it will go off, research the answers, etc. I thought I had to reach for fancy RAG, but the LLM has been pretty good about auto-maintaining index files and brief summaries of all the documents and it reads all the important related data fairly easily at this ~small scale. Output: Instead of getting answers in text/terminal, I like to have it render markdown files for me, or slide shows (Marp format), or matplotlib images, all of which I then view again in Obsidian. You can imagine many other visual output formats depending on the query. Often, I end up "filing" the outputs back into the wiki to enhance it for further queries. So my own explorations and queries always "add up" in the knowledge base. Linting: I've run some LLM "health checks" over the wiki to e.g. find inconsistent data, impute missing data (with web searchers), find interesting connections for new article candidates, etc., to incrementally clean up the wiki and enhance its overall data integrity. The LLMs are quite good at suggesting further questions to ask and look into. Extra tools: I find myself developing additional tools to process the data, e.g. I vibe coded a small and naive search engine over the wiki, which I both use directly (in a web ui), but more often I want to hand it off to an LLM via CLI as a tool for larger queries. Further explorations: As the repo grows, the natural desire is to also think about synthetic data generation + finetuning to have your LLM "know" the data in its weights instead of just context windows. TLDR: raw data from a given number of sources is collected, then compiled by an LLM into a .md wiki, then operated on by various CLIs by the LLM to do Q&A and to incrementally enhance the wiki, and all of it viewable in Obsidian. You rarely ever write or edit the wiki manually, it's the domain of the LLM. I think there is room here for an incredible new product instead of a hacky collection of scripts.
1
2
59
💥 Everyone’s talking about AI agents… But 99% still think you need a CS degree + 3 years of backend experience. Wrong. You can build your FIRST real AI agent this weekend — even if you’ve never coded seriously. Not a chatbot. A system that takes a goal → reasons step-by-step → uses tools → and actually gets shit done autonomously. @eng_khairallah1 just dropped the most practical beginner guide I’ve seen: ✅ 2-hour setup (Claude API + Python) ✅ Core agent loop (the magic part) ✅ Real tools: web search + file reading ✅ Memory + error handling ✅ Your own custom tool by Sunday night By bedtime Sunday you’ll have something running that genuinely feels like future tech. Stop watching. Start building.
2
70
💥 Claude Code’s source code just leaked… …and it’s the most valuable AI engineering lesson of 2026. Everyone thinks Claude Code is “just better because the model is better.” Wrong. @rasbt just dissected the leak and showed it’s actually a *masterclass in harness engineering*: • Live git repo context on every prompt • Aggressive prompt cache reuse (saves insane tokens) • Dedicated Grep + Glob + LSP tools (not lazy bash) • Smart context bloat fixes (dedup files, spill to disk, auto-summarize) • Structured session memory like a human dev notebook • Forked subagents that work in parallel without breaking the main loop This is why it feels 10x better than the web UI. Not the model. The system around it. If you’re building any coding agent (or want to), study this leak. The model was never the moat. The harness is.
1
43
🚨 Most devs are using Claude Code like a Ferrari in first gear. They open it, type one prompt, wait, type another. But after reading the entire source code, here’s what almost nobody realizes: Claude Code isn’t a chat tool. It’s a full agent orchestration platform wearing a terminal UI. Here are the 9 secrets that 10x your output 👇 (Save this thread — you’ll reference it daily) 1. CLAUDE.md is your secret weapon It reloads every single turn (not just at session start). Most people leave it empty or stuff the whole bible in it. Reality: 40,000 characters of pure leverage. Global style → project rules → never-do-this list. Write it once. Claude becomes YOUR assistant that already knows your codebase, preferences, and architecture. 2. Parallel subagents are basically free When you fork subagents, they share the exact same prompt cache. 5 agents working at once (security audit + refactor + tests + docs + bugs) costs the same as 1. The architecture literally supports fork/teammate/worktree modes. Stop working single-threaded. Parallelize like the source code wants you to. 3. Never click “allow” again Permissions have a 5-level cascade + “auto” mode that uses an LLM classifier. Set glob patterns in ~/.claude/settings.json once → zero click fatigue forever. Every “allow” popup is a failure of configuration, not a feature. 4. Context pressure is solved (5 ways) The source has microcompact, context collapse, session memory, full compact, and PTL truncation. Pro move: Use /compact proactively like a save point. Opt into 1M token mode for big refactors. Let session memory build up learnings over time. 5. Hooks = the real extension API (25+ events) PreToolUse, PostToolUse, UserPromptSubmit, etc. Run linting/tests automatically, inject git diffs, send Slack notifications, validate security — all before/after every action. This is how you turn Claude Code into a custom dev environment. 6. Sessions are persistent & resumable Everything is saved as JSONL. Use --continue or --resume instead of starting fresh every time. Context + learnings accumulate. Starting over is like closing your IDE every hour. 7–9. The rest (tools, streaming, retries) • 60+ tools run concurrently for reads, serially for writes • Escape to interrupt mid-stream with zero penalty • Built-in retries, model fallback, OAuth refresh — it’s designed to run in the background TLDR highest-leverage moves: • Write a real CLAUDE.md • Parallelize with subagents • Configure permissions & hooks • Use --continue + /compact • Connect MCP servers Claude Code isn’t just smarter prompting. It’s configured orchestration. Who’s actually going to set this up today? Drop a 🔥 if you’re in.
1
80
✨ Success is not final; failure is not fatal: It is the courage to continue that counts.🌱 Grok Imagine Share
1
2
21
🚨 Want to build + sell your first digital product in just 7 days… using **FREE** AI? No coding. No big audience. No experience needed. Claude (free version) can take you from random idea → finished product → first sale. Here are the **exact 7 prompts** that make it stupidly simple 👇 (Save this thread before it gets buried)
1
1
26
Prompt 7: 7-Day Sales Plan "Act as a beginner business coach. Create a dead-simple 7-day plan to get my first sale. Include what to focus on each day, what to post online, and how to turn attention into actual buyers without overthinking or fancy tools."
1
1
19
Pro tip: Don’t paste all prompts at once — Claude’s free tier has limits. Do **one prompt per new chat**, copy the output, and continue step-by-step. This system turns “I have an idea” into “I made my first $100 online” in a week. Who’s actually going to try this? Drop a 🔥 if you’re in. Follow @WheN2g for practical AI business hacks that actually work.
1
16