Filter
Exclude
Time range
-
Near
Minor code inefficiencies and outdated architecture will eventually choke your site speed and performance. Dedicate time this weekend to clean up your digital garden by migrating old elements to native WordPress blocks and auditing your active tools. #TechnicalDebt #CodeAudit #WordPress #WebPerformance
39
"91 tests passing total across the retrieval test suite. Ready to review — do not merge until authorised." Always lifts your spirits #CodeAudit #Smoke #Building
11
The origin of the code does not matter. Humans write errors through exhaustion. Artificial intelligence writes errors through a lack of architectural context. Both scenarios require the exact same solution. A rigorous independent pre-production code audit. #CodeAudit #Cybersecurity #AI
1
1
7
#Code Risk Heatmap use the #codeaudit Python API to perform a Static Application Security Test and visualize results using an interactive Risk Heatmap See directly Maintainability risks (#complexity) Check nocomplexity.com/documents/c… #python #appsec #vibecoding #owasp #hnnews
2
3
43
You can’t fix what you can’t see. I just ran the #1 most-starred repo on GitHub (OpenClaw — 14,319 files, 32k commits) through my AI code underwriter Linor. It gave them a brutal D (40/100). 🚨 Bus Factor: 3,600 files 100% owned by ONE contributor 🚨 God Files: monitor.test.ts has 162 functions in a single file 🚨 Security: Hardcoded secrets in the Anthropic extension Full raw diagnostic dashboard in the video 👇 #OpenClaw #CodeAudit #RepoRisk #GitHub #AIAssistant #DevTools #OpenSource
1
2
129
Code Audit is FREE for a limited time. Upload your repo → get real performance issues → fix them before users feel them. No signup mess. Try now: softment.com/code-audit #CodeAudit #Developers #Performance #Programming
2
50
스마트 컨트랙트 취약점 분석 스킬즈 저장소 분석 with GitHub Copilot 🔥 Trail of Bits가 보안 업계의 게임을 바꿨습니다 "Skills" - Claude Code용 보안 전문 플러그인 마켓플레이스 📅 출시 하루 만에 ⭐743개 획득 💎 왜 특별한가? 단순한 도구 모음이 아닙니다. 세계적인 보안 컨설팅 회사 Trail of Bits의 실전 감사 노하우와 전문가의 사고 프로세스를 AI 스킬로 패키지화한 것입니다. 🛠️ 주요 플러그인들: 🔐 스마트 컨트랙트 보안 • 6개 블록체인 취약점 스캐너 • 상태 변경 진입점 분석 🔍 코드 감사 • Audit Context Building - 라인별 초세밀 분석으로 AI 환각 방지 • Differential Review - Git 히스토리 기반 보안 중심 코드 리뷰 • Variant Analysis - 유사 취약점 패턴 기반 탐색 • Sharp Edges - 위험한 API와 설계 패턴 탐지 ⚡ 검증 & 분석 • Constant-Time Analysis - 암호화 코드의 타이밍 사이드채널 탐지 • Property-Based Testing - 다중 언어 속성 기반 테스팅 • CodeQL/Semgrep/SARIF 통합 툴킷 🏆 실전 검증된 성과 constant-time-analysis 플러그인으로 RustCrypto의 ECDSA 검증 타이밍 사이드채널 취약점을 이미 발견했습니다. 이론이 아닌 실제 보안 이슈를 찾아내는 도구입니다. 💡 핵심 가치 "보안 전문가가 코드를 보는 방식, 취약점을 추적하는 방식, 위험을 평가하는 방식"을 AI에게 가르칩니다. First Principles, 5 Whys/Hows 기법을 적용하고, 추측 대신 명시적 검증을 강제합니다. 🚀 설치 방법 /plugin marketplace add trailofbits/skills /plugin menu 🔓 CC BY-SA 4.0 오픈소스 - 누구나 사용/개선/공유 가능 보안 감사자, 스마트 컨트랙트 개발자, 취약점 리서처라면 필수 체크! 👉 github.com/trailofbits/skill… #CyberSecurity #AI #Claude #SmartContract #CodeAudit #Web3Security #TrailOfBits #SecurityResearch #VulnerabilityDetection
스마트 컨트랙트 취약점 탐지를 위한 클로드 코드 스킬즈를 정리 해 놓은 저장소를 공유드립니다. STO, 스테이블코인 법제화가 속도를 내며 국내 유수의 전통 금융 기관들이 대규모 채용을 하고 있습니다. 새 시대의 핀테크가 드디어 국내에서도 태동하는 느낌입니다. NDA 안걸리는 선에서 다양한 매체 통해 좋은 자료 자주 공유드릴게요. github.com/trailofbits/skill…
3
11
1,496
🛡 In blockchain, everything moves through code, value, trust, communities, entire ecosystems. But the truth is simple: if your code isn’t secured, your project isn’t either. That’s why Vital Block is on a mission to lock down the movement of blockchain code with advanced smart contract audits, vulnerability scans, and real-time protection. No backdoors. No hidden mints. No silent rugpulls. Just clean, transparent, battle-tested code your users can trust. 🧲 Audit amd Secure your contracts. Secure your ecosystem. Secure your movement. #VitalBlock #BlockchainSecurity #CodeAudit #SmartContractSecurity
2
2
9
12,506
Smart Contracts are immutable. Our rigor is not. ✍️ That's why @beyond__tech Protocol executes rigorous, pre-deployment audits. We catch and rectify every potential attack vector before the launch button is pressed. Zero risks on-chain. #SmartContracts #CodeAudit #Immutable
2
146
12 Nov 2025
$GXY , @gxy402 , @berliangor UPDATE: 12.11.2025 I had a little nice convo with @berliangor I called out broken code. (my former code review-see timeline) - He said "Got it! I'll ping when FIXED." It's always good when a developer admits the truth. So is @berliangor a scammer? My opinion: Nah - 0% scammer - 70% builder. - 30% little hustler 😉 Next Steps for @berliangor (No Code, Just Plan) Why community loves it: - Transparency = trust. "We’re fixing it" > "It’s fine." - Real progress = real $GXY value. #CodeAudit #Web3 #CryptoTruth
2
17
3,002
11 Nov 2025
$GXY , @gxy402 Crypto degens, ever wondered if @gxy402 is the real diamond in the rough... or just another bag of moon dust? Dug deep into their GitHub: Clean code? Battle-tested security? Or smoke & mirrors hiding a rug pull? Thread dropping SOON with the unfiltered truth. Buckle up. #Crypto #Web3 #DeFi #CodeAudit #AltcoinSzn

ALT The Big Lebowski Coen Brothers GIF

2
1
6
1,652
30 Aug 2025
🚀 Starting a new code audit? Here's my go-to checklist to dive into any protocol like a pro! 🧑‍💻 Add your tips below! 👇 1️⃣ Read the docs (if they exist! 😅). It’s the fastest way to grasp the protocol’s big picture and purpose. No docs? Time to reverse-engineer the vision! 🕵️‍♂️ 2️⃣ Tap into an LLM for a quick breakdown of tricky code. I use tools like Grok to explain complex logic in plain English—saves hours of head-scratching! 🧠💡 3️⃣ Visualize it! I sketch out flowcharts or diagrams to map the code’s structure. Tools like Mermaid or even pen-and-paper work wonders to see the big picture. 📊 4️⃣ Run a static analysis tool to catch low-hanging bugs or vulnerabilities early. 🔍 5️⃣ Talk to the devs (if possible). A quick chat can reveal intent behind the code that docs might miss. Plus, it builds rapport! 🤝 What’s YOUR first move when auditing code? Drop your hacks, tools, or horror stories below! 😎 #CodeAudit #DevLife #web3 #blockchain #security
1
1
44
2,667
#Python Codeaudit – A modern Python #source #code analyser based on distrust. #Codeaudit is a tool to find #security issues in Python code. Check github.com/nocomplexity/code… #infosec #malware #owasp #oss #sast
2
3
82
21 Aug 2025
Sᴏᴍᴇᴛɪᴍᴇs ᴛʜᴇ ʙᴇsᴛ ᴡᴀʏ ᴛᴏ ᴇxᴘᴏsᴇ ᴀ sʏsᴛᴇᴍ’s ᴡᴇᴀᴋɴᴇss ɪs ᴛᴏ ʟᴇᴛ ᴛʜᴇ ᴄᴏᴅᴇ sᴘᴇᴀᴋ ғᴏʀ ɪᴛsᴇʟғ. Aᴜᴛᴏ-ᴅᴇᴛᴇᴄᴛɪᴏɴ ɴᴇᴠᴇʀ ʟɪᴇs. // Auto-Detect Mode : ENABLED # include <stdio.h> # include <stdbool.h> int main(void) { bool anomaly = true; if (anomaly) { printf(">>> [SYS_ALERT] CorporateBehavior Detected\n"); printf(">>> Escalation: Pending_Global_Audit\n"); } else { printf(">>> Status: Normal_Operations\n"); } return 0; } #AutoDetectMode #CorporateBehavior #CodeAudit #DigitalAccountability #JusticeByDesign #CodeNeverLies
3
161
🚨 Before you ship that AI code... Get a second pair of (human) eyes on it. AI writes fast. Humans catch what AI misses. ✅ Security vulnerabilities ✅ Logic flaws ✅ Compliance gaps ✅ Architecture issues Stay tuned for @Orbitshield coming soon 👁️‍🗨️ #AICode #Security #CodeAudit
1
2
105
The #Python construct s.bind() can be dangerous from a #security perspective. It opens #network #sockets and makes your #application #vulnerable. Use Python Codeaudit - A modern Python #code analyzer based on #distrust. github.com/nocomplexity/code… #sast #research #trust #infosec
2
3
67
Hey @X , Connect me with people who are into - 1) Blockchain 2) Smart-contract security 3) Ai #Ethereum #Blockchain #ZKProofs @TrailOfBits, @OpenZeppelin #CodeAudit #BugBounty #AI #Web3 #DeFiAI
3
103
I recently tried out Semgrep, a powerful SAST (Static Application Security Testing) tool, using the OWASP Juice Shop demo project. What is SAST? SAST tools analyze source code, bytecode, or binaries without executing the application. They help detect security vulnerabilities early in the development lifecycle, long before the app reaches production. In my test, Semgrep flagged critical and medium issues like: --express-mongo-nosqli: Risk of NoSQL Injection due to unsanitized $REQ input. --express-fs-filename: Path traversal from untrusted file paths Why SAST matters in Pentesting: Getting familiar with tools like Semgrep is crucial for pentesters and AppSec professionals. It helps: Detect flaws early in the SDLC Understand deeper code-level vulnerabilities Communicate findings effectively with development teams #AppSec #SAST #Semgrep #CyberSecurity #OWASPJuiceShop #StaticAnalysis #Pentesting #DevSecOps #SecurityTesting #CodeAudit
1
4
276
28 Jul 2025
From sluggish dev and buggy releases → to clarity, speed, and real progress. Impact Week takes you through a structured 4-step process: 1️⃣ Access your platform, code, and design files 2️⃣ Analyze your product with our team 3️⃣ Get actionable improvements (code UX/UI) 4️⃣ Walk away with a clear, focused roadmap Where you are now isn’t where you have to stay. 🧭 Impact Week = your path to smarter decisions and stronger software. #ImpactWeek #ProductDevelopment #SaaS #CodeAudit #UX #CustomSoftware #Designli
1
2
30