正在加载视频...

视频加载失败

返回首页

The 2 security risks that come with running OpenClaw. (and how to fix them) Risk 1 — Backend access: Someone gets into your machine and operates as you. Fix: run it on a local Mac, not a cloud VPS. Apple's security does the heavy lifting. Risk 2 — Prompt...

startupideaspod's profile picture

The Startup Ideas Podcast (SIP) 🧃

40,324 subscribers

14,378 次观看 • 3 个月前 •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

How to use 50+ API keys (models) for FREE on OpenClaw API??? - go to - login or register your account - click on "more models" - click on "use case" and select what you need it for - choose the model and open it - click on "view code" → "Generate API key" many models don't allow direct deploy, so use the "view code" button to generate API access basically Nvidia NIM gives you the ability to test almost any model from their list for FREE some of them are not worse than GPT 5.2 or Claude Opus 4.6, some might even perform better depending on the task how to understand if a model is efficient and compare it with others??? - go to - type the model name in search - click on "benchmarks" - you’ll see performance tests and rankings this way you can easily compare free models with paid ones of course there are RPM limits, on many models it’s around ~40 requests per minute each model is different, after generating the API key, RPM limits are shown in the top-right corner nothing stops you from using them, many work perfectly fine, super solid option for first tests and for learning OpenClaw or any other system where you need an AI API model
1:54

How to use 50+ API keys (models) for FREE on OpenClaw API??? - go to - login or register your account - click on "more models" - click on "use case" and select what you need it for - choose the model and open it - click on "view code" → "Generate API key" many models don't allow direct deploy, so use the "view code" button to generate API access basically Nvidia NIM gives you the ability to test almost any model from their list for FREE some of them are not worse than GPT 5.2 or Claude Opus 4.6, some might even perform better depending on the task how to understand if a model is efficient and compare it with others??? - go to - type the model name in search - click on "benchmarks" - you’ll see performance tests and rankings this way you can easily compare free models with paid ones of course there are RPM limits, on many models it’s around ~40 requests per minute each model is different, after generating the API key, RPM limits are shown in the top-right corner nothing stops you from using them, many work perfectly fine, super solid option for first tests and for learning OpenClaw or any other system where you need an AI API model

Ronin

58,624 次观看 • 4 个月前

The reason your AI gives generic answers isn't the model. It's that your company's knowledge lives in 12 different tools and your agent can't see any of it. So here's how to build a context database your agents can actually use: 1) Pull it in: - Slack, email, meetings, docs, tickets - Auto-collected on a schedule into one place. 2) Clean it up. - An agent files what matters and drops the noise, so your brain doesn't bloat. 3) Store it as memory. - Folders of files your agents read from and write back to as they learn. 4) Point your agents at it. - Now they draft, build, and ship with full context instead of guessing. Same model. Same agent. The difference is whether it can understand your company or not. Build the database once. Everything downstream gets smarter.
8:17

The reason your AI gives generic answers isn't the model. It's that your company's knowledge lives in 12 different tools and your agent can't see any of it. So here's how to build a context database your agents can actually use: 1) Pull it in: - Slack, email, meetings, docs, tickets - Auto-collected on a schedule into one place. 2) Clean it up. - An agent files what matters and drops the noise, so your brain doesn't bloat. 3) Store it as memory. - Folders of files your agents read from and write back to as they learn. 4) Point your agents at it. - Now they draft, build, and ship with full context instead of guessing. Same model. Same agent. The difference is whether it can understand your company or not. Build the database once. Everything downstream gets smarter.

The Startup Ideas Podcast (SIP) 🧃

13,486 次观看 • 27 天前

Google just shipped a free dictation app for Mac and iPhone called AI Edge Eloquent, and the model running it is Gemma 4 12B, entirely on your device. What it actually does: you speak, it transcribes, removes filler words, and polishes the result before dropping clean text into whatever app you are using. You can also give it voice commands to reformat, like "translate to Hindi" or "make this a bullet list." Audio and video file transcription is built in too. The interesting part is the privacy angle. Most AI writing tools send your audio to a server. This one never leaves your machine, which matters if you are dictating anything sensitive. The tradeoff is hardware: you need a Mac with at least 16GB of RAM to run a 12B parameter model comfortably.
1:15

Google just shipped a free dictation app for Mac and iPhone called AI Edge Eloquent, and the model running it is Gemma 4 12B, entirely on your device. What it actually does: you speak, it transcribes, removes filler words, and polishes the result before dropping clean text into whatever app you are using. You can also give it voice commands to reformat, like "translate to Hindi" or "make this a bullet list." Audio and video file transcription is built in too. The interesting part is the privacy angle. Most AI writing tools send your audio to a server. This one never leaves your machine, which matters if you are dictating anything sensitive. The tradeoff is hardware: you need a Mac with at least 16GB of RAM to run a 12B parameter model comfortably.

Aditya ⚡Rao

84,813 次观看 • 1 个月前

Is Windsurf better than Cursor? impossible to say, but... it does one thing better: soooo... I spent an hour testing windsurf... and this is what i created... and app called "boop-boop" lol... one thing windsurf does is it searches the internet. If you've been watching my videos you know that i go to perplexity all the time to get code examples and docs. but with windsurf you can just say, "search the replicate top image gen models and add them to the chat we just created" It will search the internet, find the right model then write the code. This is great for replicate and openrouter. You can have one api key in your .env file then just tell windsurf to search for docs for [insert ai model] and it will just add it to your app. Impressed tbh.
2:30

Is Windsurf better than Cursor? impossible to say, but... it does one thing better: soooo... I spent an hour testing windsurf... and this is what i created... and app called "boop-boop" lol... one thing windsurf does is it searches the internet. If you've been watching my videos you know that i go to perplexity all the time to get code examples and docs. but with windsurf you can just say, "search the replicate top image gen models and add them to the chat we just created" It will search the internet, find the right model then write the code. This is great for replicate and openrouter. You can have one api key in your .env file then just tell windsurf to search for docs for [insert ai model] and it will just add it to your app. Impressed tbh.

Riley Brown

31,043 次观看 • 1 年前

I vibe-coded an AI agent for making presentations 🤖🖼️ - accessible to everyone and open-source! You can upload both your context files, as well as a style template (a file that captures the style of the presentation you want to create). Then you launch a prompt and watch the agent one-shot your presentation. After the presentation is generated, you can edit the text inline, chat with the agent to add/modify/delete slides, and export to Powerpoint or PDF. Built with Claude Code, powered by Claude Agent SDK + LlamaParse. Hosted on Vercel/Render. To use it, you do need to specify your LlamaCloud API key and Anthropic API key (see below). App: Repo: Sign up to LlamaCloud:
0:54

I vibe-coded an AI agent for making presentations 🤖🖼️ - accessible to everyone and open-source! You can upload both your context files, as well as a style template (a file that captures the style of the presentation you want to create). Then you launch a prompt and watch the agent one-shot your presentation. After the presentation is generated, you can edit the text inline, chat with the agent to add/modify/delete slides, and export to Powerpoint or PDF. Built with Claude Code, powered by Claude Agent SDK + LlamaParse. Hosted on Vercel/Render. To use it, you do need to specify your LlamaCloud API key and Anthropic API key (see below). App: Repo: Sign up to LlamaCloud:

Jerry Liu

21,073 次观看 • 5 个月前

this video is the CLEAREST explanation of how claude skills + AI agents work and how to use them most people set up an AI agent and wonder why it keeps disappointing them. the context window is everything context is what the model assembles before it takes any action. think of it like everything the agent needs to read before it does anything. the quality of what goes in determines the quality of what comes out. the models are genuinely really good right now. claude and gpt are exceptional. the variable is almost always the context you give them. 1. agent.md files are mostly unnecessary every single line you put in an agent.md file gets added to every single conversation you have with your agent. a 1000 line file is around 7000 tokens burning on every run. the model already knows to use react. it can read your codebase. save the agent.md for proprietary information specific to your company that the model genuinely cannot know on its own. 2. skills are the actual unlock a skill.md file works differently. what loads into context is only the name and description, around 50 tokens. the full instructions only appear when the agent recognizes it needs that skill. so instead of 7000 tokens on every run you have 50. and the agent stays sharp because the context window stays lean. the closer you get to filling the context window the worse the agent performs, same way you perform worse when someone dumps 10 things on you at once. 3. here is how to actually build a skill the right way most people identify a workflow and immediately try to write the skill. what you want to do instead is run the workflow by hand with the agent first. walk it through every single step. tell it what to check, what good looks like, what bad looks like. correct it in real time. once you have had a full successful run from start to finish, tell the agent to review everything it just did and write the skill itself. it writes a better skill than you will because it has the full context of what actually worked in practice not in theory. 4. recursively building skills is how you go from frustrated to reliable when the skill breaks, and it will break, ask the agent exactly why it failed. it will tell you specifically what went wrong. fix it together in that same conversation. then tell it to update the skill file so that failure mode never happens again. ross mike did this five times with his youtube report generator. it now pulls from eight different data sources and runs flawlessly every single time without him touching it. 5. sub agents are something you earn not something you set up on day one start with one agent. build one workflow. turn it into one skill. once that works add another. ross mike has five sub agents now covering marketing, business, personal and more. it took months to get there and every single one exists because a workflow proved it deserved to exist. the people who set up 15 sub agents on day one and wonder why nothing works skipped all the steps that make the thing actually run. 6. your workflow is the thing the model cannot get anywhere else the model has been trained on everything. it knows more than you about most things. what it does not have is your specific process, your taste, your way of doing things. that is what skills capture. that is what makes your agent actually useful versus a generic one. downloading someone else's skill means downloading their context onto your setup and it will not work the way you want it to because it was never built around how you work. this is the clearest explanation of how agents actually work i have heard. Micky runs this stuff every single day and the results show it. full episode is now live on The Startup Ideas Podcast (SIP) 🧃 where you get your pods people charge for this sorta stuff i give away the sauce for free i just want you to win watch
35:25

this video is the CLEAREST explanation of how claude skills + AI agents work and how to use them most people set up an AI agent and wonder why it keeps disappointing them. the context window is everything context is what the model assembles before it takes any action. think of it like everything the agent needs to read before it does anything. the quality of what goes in determines the quality of what comes out. the models are genuinely really good right now. claude and gpt are exceptional. the variable is almost always the context you give them. 1. agent.md files are mostly unnecessary every single line you put in an agent.md file gets added to every single conversation you have with your agent. a 1000 line file is around 7000 tokens burning on every run. the model already knows to use react. it can read your codebase. save the agent.md for proprietary information specific to your company that the model genuinely cannot know on its own. 2. skills are the actual unlock a skill.md file works differently. what loads into context is only the name and description, around 50 tokens. the full instructions only appear when the agent recognizes it needs that skill. so instead of 7000 tokens on every run you have 50. and the agent stays sharp because the context window stays lean. the closer you get to filling the context window the worse the agent performs, same way you perform worse when someone dumps 10 things on you at once. 3. here is how to actually build a skill the right way most people identify a workflow and immediately try to write the skill. what you want to do instead is run the workflow by hand with the agent first. walk it through every single step. tell it what to check, what good looks like, what bad looks like. correct it in real time. once you have had a full successful run from start to finish, tell the agent to review everything it just did and write the skill itself. it writes a better skill than you will because it has the full context of what actually worked in practice not in theory. 4. recursively building skills is how you go from frustrated to reliable when the skill breaks, and it will break, ask the agent exactly why it failed. it will tell you specifically what went wrong. fix it together in that same conversation. then tell it to update the skill file so that failure mode never happens again. ross mike did this five times with his youtube report generator. it now pulls from eight different data sources and runs flawlessly every single time without him touching it. 5. sub agents are something you earn not something you set up on day one start with one agent. build one workflow. turn it into one skill. once that works add another. ross mike has five sub agents now covering marketing, business, personal and more. it took months to get there and every single one exists because a workflow proved it deserved to exist. the people who set up 15 sub agents on day one and wonder why nothing works skipped all the steps that make the thing actually run. 6. your workflow is the thing the model cannot get anywhere else the model has been trained on everything. it knows more than you about most things. what it does not have is your specific process, your taste, your way of doing things. that is what skills capture. that is what makes your agent actually useful versus a generic one. downloading someone else's skill means downloading their context onto your setup and it will not work the way you want it to because it was never built around how you work. this is the clearest explanation of how agents actually work i have heard. Micky runs this stuff every single day and the results show it. full episode is now live on The Startup Ideas Podcast (SIP) 🧃 where you get your pods people charge for this sorta stuff i give away the sauce for free i just want you to win watch

GREG ISENBERG

192,483 次观看 • 3 个月前

📢 New in Visual Studio: Bring Your Own Model to Chat We’re expanding flexibility in Copilot for Visual Studio. You can now connect API keys from providers like OpenAI, Anthropic, and Google to run Chat on the model of your choice. This update gives you: ✅ Choice – Access the latest models beyond the built-in defaults. ✅ Customization – Select models that fit your infrastructure and requirements. ✅ Control – Manage API usage, limits, and billing directly with your provider. ✅ Flexibility – Switch seamlessly between Copilot’s built-in models and your own. This release is the first step toward a more open and customizable chat experience in Visual Studio, with more providers and capabilities to come. 🔗
0:26

📢 New in Visual Studio: Bring Your Own Model to Chat We’re expanding flexibility in Copilot for Visual Studio. You can now connect API keys from providers like OpenAI, Anthropic, and Google to run Chat on the model of your choice. This update gives you: ✅ Choice – Access the latest models beyond the built-in defaults. ✅ Customization – Select models that fit your infrastructure and requirements. ✅ Control – Manage API usage, limits, and billing directly with your provider. ✅ Flexibility – Switch seamlessly between Copilot’s built-in models and your own. This release is the first step toward a more open and customizable chat experience in Visual Studio, with more providers and capabilities to come. 🔗

Visual Studio

11,873 次观看 • 10 个月前

This is literally the easiest way to build an AI agent. Zero code. You only need to run a couple of commands. (I've said this before, but Google ADK is my favorite way to build code-first agents.) Here is what you need to do: 1. Open your terminal and create an empty folder 2. Run `uv init` inside the folder (if you don't have uv installed, you are really missing out!) 3. Install the google-adk library using the following command: `uv add google-adk`. 4. At this point, you can use the ask to create your agent with a single command: `uv run adk create --type=config my_agent`. This will ask you a couple of questions, including your GEMINI_API_KEY (you can create one online). 5. The command above will create a my_agent/root_agent.yaml file. Open it and add the following two lines at the end of the file so your agent can use Google to search for stuff: tools: - name: google_search 6. You have everything you need now. Run the adk web interface and start playing with your agent: `uv run adk web` That's it! Literally zero code. The agent works off the YAML configuration file.
1:33

This is literally the easiest way to build an AI agent. Zero code. You only need to run a couple of commands. (I've said this before, but Google ADK is my favorite way to build code-first agents.) Here is what you need to do: 1. Open your terminal and create an empty folder 2. Run `uv init` inside the folder (if you don't have uv installed, you are really missing out!) 3. Install the google-adk library using the following command: `uv add google-adk`. 4. At this point, you can use the ask to create your agent with a single command: `uv run adk create --type=config my_agent`. This will ask you a couple of questions, including your GEMINI_API_KEY (you can create one online). 5. The command above will create a my_agent/root_agent.yaml file. Open it and add the following two lines at the end of the file so your agent can use Google to search for stuff: tools: - name: google_search 6. You have everything you need now. Run the adk web interface and start playing with your agent: `uv run adk web` That's it! Literally zero code. The agent works off the YAML configuration file.

Santiago

140,737 次观看 • 7 个月前

OpenAI just released Codex Security, an AI agent that scans software projects to fix vulnerabilities while ignoring harmless bugs. Testing on 1.2mn commits found 792 critical flaws and dropped false alarms by 50%. Here is how the Codex Security agent works Initially, it scans your software project to learn how all the different pieces of code connect. It uses that knowledge to build a threat model, which acts as a custom map showing exactly where your software might be exposed to hackers. The agent then hunts for potential security holes based on that specific map. When it spots a possible flaw, it does not just send you a random alert. Instead, it creates a completely safe and isolated copy of your system known as a sandbox. The agent then actively tries to break into that sandboxed copy to prove if the security weakness is a real danger. If the agent successfully exploits its own test environment, it knows the bug is a genuine threat and not a false alarm. After confirming the danger, the agent writes a custom software patch to fix the broken code. It then tests that new patch to guarantee the fix does not accidentally break any other features in your software.
0:37

OpenAI just released Codex Security, an AI agent that scans software projects to fix vulnerabilities while ignoring harmless bugs. Testing on 1.2mn commits found 792 critical flaws and dropped false alarms by 50%. Here is how the Codex Security agent works Initially, it scans your software project to learn how all the different pieces of code connect. It uses that knowledge to build a threat model, which acts as a custom map showing exactly where your software might be exposed to hackers. The agent then hunts for potential security holes based on that specific map. When it spots a possible flaw, it does not just send you a random alert. Instead, it creates a completely safe and isolated copy of your system known as a sandbox. The agent then actively tries to break into that sandboxed copy to prove if the security weakness is a real danger. If the agent successfully exploits its own test environment, it knows the bug is a genuine threat and not a false alarm. After confirming the danger, the agent writes a custom software patch to fix the broken code. It then tests that new patch to guarantee the fix does not accidentally break any other features in your software.

Rohan Paul

13,208 次观看 • 4 个月前

Michael Chomsky reveals that 98% of people are using OpenClaw dangerously “I guarantee if you try to set it up, you will do it completely insecurely. All your keys are there and someone can prompt inject and get your OpenClaw to reveal your private API keys through a tweet if you set things up wrong. It’s super insecure” “I think 95-98% of people setting up OpenClaw themselves are doing it in an insecure fashion”
0:24

Michael Chomsky reveals that 98% of people are using OpenClaw dangerously “I guarantee if you try to set it up, you will do it completely insecurely. All your keys are there and someone can prompt inject and get your OpenClaw to reveal your private API keys through a tweet if you set things up wrong. It’s super insecure” “I think 95-98% of people setting up OpenClaw themselves are doing it in an insecure fashion”

Mikli

56,275 次观看 • 4 个月前

Hermes is powerful. But Open WebUI makes it way easier to actually use. Here’s the setup: → Run Hermes locally → Add the API server → Set up the environment file → Install Open WebUI with Docker → Connect Hermes as the chat agent → Log in and start chatting through a clean UI Now you can use Hermes without living inside the terminal. You get a ChatGPT-style interface, file uploads, model switching, web search, image tools, previews, and cleaner conversation management. Save this video, you’ll make Hermes 10x easier to use. Want the SOP? DM me. 💬
9:10

Hermes is powerful. But Open WebUI makes it way easier to actually use. Here’s the setup: → Run Hermes locally → Add the API server → Set up the environment file → Install Open WebUI with Docker → Connect Hermes as the chat agent → Log in and start chatting through a clean UI Now you can use Hermes without living inside the terminal. You get a ChatGPT-style interface, file uploads, model switching, web search, image tools, previews, and cleaner conversation management. Save this video, you’ll make Hermes 10x easier to use. Want the SOP? DM me. 💬

Julian Goldie SEO

60,851 次观看 • 2 个月前

Clawbot security is being massively misunderstood. If you’re running it on a VPS or locally, you’re exposing your entire system. Here’s the safer setup ↓ → VPS = full machine access → Email prompt injection = takeover risk → Plain-text API keys = nightmare The fix? Run Clawbot inside Cloudflare Workers using Moltworker. ✔ Isolated sandbox ✔ Zero Trust login ✔ No exposed keys ✔ Device approval required Save this video, you’ll avoid a painful security mistake. Want the SOP? DM me. 💬
15:17

Clawbot security is being massively misunderstood. If you’re running it on a VPS or locally, you’re exposing your entire system. Here’s the safer setup ↓ → VPS = full machine access → Email prompt injection = takeover risk → Plain-text API keys = nightmare The fix? Run Clawbot inside Cloudflare Workers using Moltworker. ✔ Isolated sandbox ✔ Zero Trust login ✔ No exposed keys ✔ Device approval required Save this video, you’ll avoid a painful security mistake. Want the SOP? DM me. 💬

Julian Goldie SEO

43,481 次观看 • 5 个月前

happy friday. sneak peek at some new features i'm building for the bankr agent: > sandboxed filesystem (your agent gets its own secure file system in the browser. you control what it can access. no agent running loose on your actual computer) > skill uploads (plugin new capabilities so your agent learns new things) > cli download & access > secure environment variables for api keys > github integration (connect your repo for reads and writes directly from your agent) all of this runs in a secure browser environment. no desktop app. no messy configuration. no downloading agent harnesses from the terminal. just a sandbox you control. in the video: i download an audit skill, run it against a smart contract, and save the report straight to the filesystem. then i ask the agent to pull all my 2026 transactions and write a csv for my accountant.
0:58

happy friday. sneak peek at some new features i'm building for the bankr agent: > sandboxed filesystem (your agent gets its own secure file system in the browser. you control what it can access. no agent running loose on your actual computer) > skill uploads (plugin new capabilities so your agent learns new things) > cli download & access > secure environment variables for api keys > github integration (connect your repo for reads and writes directly from your agent) all of this runs in a secure browser environment. no desktop app. no messy configuration. no downloading agent harnesses from the terminal. just a sandbox you control. in the video: i download an audit skill, run it against a smart contract, and save the report straight to the filesystem. then i ask the agent to pull all my 2026 transactions and write a csv for my accountant.

deployer

45,638 次观看 • 3 个月前

One of my best engineers just showed me how to set up OpenClaw securely & without a Mac Mini. Here's his step-by-step: 1) Spin up a VPS on Hetzner It's a virtual server in the cloud. basically a computer you rent for $5-10/month. Pick 8GB RAM, Ubuntu, US East. Takes 2 minutes. 2) Install Tailscale This makes your server invisible to the public internet. Think of it like moving from a house on Google Maps into a gated community where only your devices can get in. Without this, bots start attacking your server within seconds of it going live. 3) Harden the server SSH keys only. Firewall. Intrusion prevention. Auto security updates. CJ actually uses AI to red team his own servers. Tells it to try and break in, then patches whatever it finds. 4) Install OpenClaw🦞 and run the onboarding. You pick your model provider, connect Telegram via BotFather, and configure hooks that give your agent long-term memory. The hooks auto-save sessions and context so the agent gets smarter over time. 5) Set up the gateway This is the piece that makes it actually powerful. It's a message bus that lets your main agent talk to sub-agents, receive messages from Telegram/Discord/Slack, and orchestrate everything. this is what keeps it running 24/7. 6) Hatch your claw and start training it Dump as much info about yourself as possible. tell it your preferences, your workflows, your tools. CJ's agent monitors his email, Slack, and manages his to-do list autonomously. Watch the video for the full break-down & follow CJ Hess for more AI engineering sauce.
38:52

One of my best engineers just showed me how to set up OpenClaw securely & without a Mac Mini. Here's his step-by-step: 1) Spin up a VPS on Hetzner It's a virtual server in the cloud. basically a computer you rent for $5-10/month. Pick 8GB RAM, Ubuntu, US East. Takes 2 minutes. 2) Install Tailscale This makes your server invisible to the public internet. Think of it like moving from a house on Google Maps into a gated community where only your devices can get in. Without this, bots start attacking your server within seconds of it going live. 3) Harden the server SSH keys only. Firewall. Intrusion prevention. Auto security updates. CJ actually uses AI to red team his own servers. Tells it to try and break in, then patches whatever it finds. 4) Install OpenClaw🦞 and run the onboarding. You pick your model provider, connect Telegram via BotFather, and configure hooks that give your agent long-term memory. The hooks auto-save sessions and context so the agent gets smarter over time. 5) Set up the gateway This is the piece that makes it actually powerful. It's a message bus that lets your main agent talk to sub-agents, receive messages from Telegram/Discord/Slack, and orchestrate everything. this is what keeps it running 24/7. 6) Hatch your claw and start training it Dump as much info about yourself as possible. tell it your preferences, your workflows, your tools. CJ's agent monitors his email, Slack, and manages his to-do list autonomously. Watch the video for the full break-down & follow CJ Hess for more AI engineering sauce.

Alex Lieberman

64,618 次观看 • 4 个月前

You probably know OpenClaw🦞, one of the fastest-growing open-source projects around. An OpenClaw harness lets you build, code, analyze, and take real control of your machine. But the more access an agent has to your machine, the more it matters where your data goes & who can see it. With QVAC, you can run your OpenClaw agent fully on your own machine in a few minutes. Nothing leaves your computer. Full setup guide on the blog, see first comment below. 💡 Pro tip: already running OpenClaw? Send the blog article to your agent and let the it do the set up.
1:44

You probably know OpenClaw🦞, one of the fastest-growing open-source projects around. An OpenClaw harness lets you build, code, analyze, and take real control of your machine. But the more access an agent has to your machine, the more it matters where your data goes & who can see it. With QVAC, you can run your OpenClaw agent fully on your own machine in a few minutes. Nothing leaves your computer. Full setup guide on the blog, see first comment below. 💡 Pro tip: already running OpenClaw? Send the blog article to your agent and let the it do the set up.

QVAC

15,013,509 次观看 • 21 天前

8 rules to improve your AI coding agent. All of these rules work with Claude Code, Cursor, VS Code, and with most programming languages. Automating these rules will 10x the code quality and security produced by your AI coding agents. 1. Dependency checks - Prevent your agent from suggesting insecure libraries based on outdated training data. 2. Secret exposure - Auto-fix the use of hardcoded credentials introduced by your coding agent. 3. File and function size - Automatically refactor any files or functions that exceed a reasonable length. 4. Complexity and parameter limits - Simplify overly complex code written by the agent. 5. SQL Injection - Auto-fix all database interactions with unsanitized user input. 6. Unused variables and imports - Detect and remove dead code. 7. Detect invisible unicode characters in AI rules files - Remove zero-width spaces, direction overrides, and other invisible characters that can hide malicious behavior. 8. Insecure OpenAI API usage - Enforce use of secure OpenAI endpoints, proper authentication, and context isolation Here is how you can automate this: Install the Codacy extension. This will give you access to a CLI for local scanning and an MCP server for agent communication. From here on out, every time you need to generate some code: 1. Your agent will write the code 2. It will then call Codacy's CLI to check it 3. It will find any issues in real time 4. Your coding agent will fix the issues 5. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Here is the link to download the extension for your IDE: Thanks to the Codacy team for collaborating with me on this post.
3:50

8 rules to improve your AI coding agent. All of these rules work with Claude Code, Cursor, VS Code, and with most programming languages. Automating these rules will 10x the code quality and security produced by your AI coding agents. 1. Dependency checks - Prevent your agent from suggesting insecure libraries based on outdated training data. 2. Secret exposure - Auto-fix the use of hardcoded credentials introduced by your coding agent. 3. File and function size - Automatically refactor any files or functions that exceed a reasonable length. 4. Complexity and parameter limits - Simplify overly complex code written by the agent. 5. SQL Injection - Auto-fix all database interactions with unsanitized user input. 6. Unused variables and imports - Detect and remove dead code. 7. Detect invisible unicode characters in AI rules files - Remove zero-width spaces, direction overrides, and other invisible characters that can hide malicious behavior. 8. Insecure OpenAI API usage - Enforce use of secure OpenAI endpoints, proper authentication, and context isolation Here is how you can automate this: Install the Codacy extension. This will give you access to a CLI for local scanning and an MCP server for agent communication. From here on out, every time you need to generate some code: 1. Your agent will write the code 2. It will then call Codacy's CLI to check it 3. It will find any issues in real time 4. Your coding agent will fix the issues 5. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Here is the link to download the extension for your IDE: Thanks to the Codacy team for collaborating with me on this post.

Santiago

49,331 次观看 • 8 个月前

How can you solve complex tasks using a Large Language Model? Here is a 2-minute introduction to everything you need to know to 10x the quality of your results. Let's talk about three techniques, in order of complexity, starting with the easiest one: • In-Context Learning • Indexing + In-Context Learning • Fine-tuning In-Context Learning The team that trained GPT-3 found something they couldn't explain: You can condition a model using examples of how you want it to behave. I included an example prompt in the attached video. You can "teach" the model how you want it to interpret questions, select the correct answers, and format the results by giving a few examples. You can also give specific knowledge to the model that will be helpful when formulating answers. We call this approach "grounding the model." There's another example in the video. Indexing + In-Context Learning Unfortunately, there is a limit to how much data you can include in a prompt. We call this the "context size." One version of GPT-4 supports a context of approximately 6,000 words, while the other supports 25,000 words. Although this sounds like a lot, many applications need more than that. Imagine you wrote a book and want to build an application to answer any questions about your story. What happens if your book is longer than the context? That's where Indexing comes in. Using a model, you can turn every book passage into an embedding. These are vectors, numbers that "encode" the passage's text. You can then store these embeddings in a particular database that supports fast retrieval of these vectors. You can then turn any question into an embedding and search the database for the list of passages that are similar to that query. Instead of using the entire book to ask the model, you can now use the relevant passages as in-context information, effectively working around the context size limitation. Fine-tuning Fine-tuning can give you an extra boost to get reliable outputs from your LLM. It is, however, the most complex approach on the list. There are different approaches to fine-tuning a model with your data. A popular technique is to process your data with your LLM and use the outputs to train a new classifier that solves your specific task. Notice that here you aren't modifying the LLM. Instead, you are chaining it with your trained classifier. Another approach is to modify the parameters of the LLM using your data. Think of this as "rewiring" the model in a way that solves your particular task. The results and costs will vary depending on how many layers you want to fine-tune from the original model. Many companies think that fine-tuning is the solution to their problems. In my experience, many will benefit from exploring the other two approaches. I love explaining Machine Learning and Artificial Intelligence ideas. If you enjoy in-depth content like this, follow me Santiago so you don't miss what comes next.
4:50

How can you solve complex tasks using a Large Language Model? Here is a 2-minute introduction to everything you need to know to 10x the quality of your results. Let's talk about three techniques, in order of complexity, starting with the easiest one: • In-Context Learning • Indexing + In-Context Learning • Fine-tuning In-Context Learning The team that trained GPT-3 found something they couldn't explain: You can condition a model using examples of how you want it to behave. I included an example prompt in the attached video. You can "teach" the model how you want it to interpret questions, select the correct answers, and format the results by giving a few examples. You can also give specific knowledge to the model that will be helpful when formulating answers. We call this approach "grounding the model." There's another example in the video. Indexing + In-Context Learning Unfortunately, there is a limit to how much data you can include in a prompt. We call this the "context size." One version of GPT-4 supports a context of approximately 6,000 words, while the other supports 25,000 words. Although this sounds like a lot, many applications need more than that. Imagine you wrote a book and want to build an application to answer any questions about your story. What happens if your book is longer than the context? That's where Indexing comes in. Using a model, you can turn every book passage into an embedding. These are vectors, numbers that "encode" the passage's text. You can then store these embeddings in a particular database that supports fast retrieval of these vectors. You can then turn any question into an embedding and search the database for the list of passages that are similar to that query. Instead of using the entire book to ask the model, you can now use the relevant passages as in-context information, effectively working around the context size limitation. Fine-tuning Fine-tuning can give you an extra boost to get reliable outputs from your LLM. It is, however, the most complex approach on the list. There are different approaches to fine-tuning a model with your data. A popular technique is to process your data with your LLM and use the outputs to train a new classifier that solves your specific task. Notice that here you aren't modifying the LLM. Instead, you are chaining it with your trained classifier. Another approach is to modify the parameters of the LLM using your data. Think of this as "rewiring" the model in a way that solves your particular task. The results and costs will vary depending on how many layers you want to fine-tune from the original model. Many companies think that fine-tuning is the solution to their problems. In my experience, many will benefit from exploring the other two approaches. I love explaining Machine Learning and Artificial Intelligence ideas. If you enjoy in-depth content like this, follow me Santiago so you don't miss what comes next.

Santiago

384,495 次观看 • 3 年前

My agent is now paying for its own data. No API key. No account. No credit card. Check the video I recorded. This uses the x402 open protocol built by Coinbase, along with a simple skill. This is an open protocol governed by the Linux Foundation. To complete a goal, an agent can now search for an actor on the Apify Store, pay for it, and use it without any human intervention. The way it works is pretty simple: 1. Your agent finds an Actor it wants to use 2. It sends a request 3. The Actor sends back an HTTP 402 "Payment Required" response 4. Agent authorizes payment from a wallet in USDC on Base 5. The Actor runs 6. User receives the result The model is pay-as-you-go: the agent authorizes a spending ceiling, pays only for usage, and the remaining balance is automatically settled. This brings an entire marketplace of AI tools into the agentic economy. Here is the skill you need. Add it to your agent, and it will take care of everything for you: If you want to know how this works, including what you can do with $1, read this post: Thanks to the Apify team for partnering with me on this post.
5:56

My agent is now paying for its own data. No API key. No account. No credit card. Check the video I recorded. This uses the x402 open protocol built by Coinbase, along with a simple skill. This is an open protocol governed by the Linux Foundation. To complete a goal, an agent can now search for an actor on the Apify Store, pay for it, and use it without any human intervention. The way it works is pretty simple: 1. Your agent finds an Actor it wants to use 2. It sends a request 3. The Actor sends back an HTTP 402 "Payment Required" response 4. Agent authorizes payment from a wallet in USDC on Base 5. The Actor runs 6. User receives the result The model is pay-as-you-go: the agent authorizes a spending ceiling, pays only for usage, and the remaining balance is automatically settled. This brings an entire marketplace of AI tools into the agentic economy. Here is the skill you need. Add it to your agent, and it will take care of everything for you: If you want to know how this works, including what you can do with $1, read this post: Thanks to the Apify team for partnering with me on this post.

Santiago

25,792 次观看 • 7 天前

In this week’s Stability Seconds, we’re showing you how to use prompt weighting, a technique that helps you control which parts of your prompt have more or less influence on the final image. It’s a fast way to steer your image toward your desired output without rewriting your prompt. Here’s how to do it: 1️⃣ Emphasize elements: Put parentheses around the part of your prompt you want to focus on, then add a colon and a number. For example, (trench coat:1.5) tells the model to emphasize the trench coat. The higher the number, the more it stands out. 2️⃣ De-emphasize elements: Put parentheses around the part of your prompt you want to make less prominent, then add a colon and a number below one. For example, (background:0.5). The lower the number, the less it stands out. You can try prompt weighting with Stable Image Ultra here 👉
0:59

In this week’s Stability Seconds, we’re showing you how to use prompt weighting, a technique that helps you control which parts of your prompt have more or less influence on the final image. It’s a fast way to steer your image toward your desired output without rewriting your prompt. Here’s how to do it: 1️⃣ Emphasize elements: Put parentheses around the part of your prompt you want to focus on, then add a colon and a number. For example, (trench coat:1.5) tells the model to emphasize the trench coat. The higher the number, the more it stands out. 2️⃣ De-emphasize elements: Put parentheses around the part of your prompt you want to make less prominent, then add a colon and a number below one. For example, (background:0.5). The lower the number, the less it stands out. You can try prompt weighting with Stable Image Ultra here 👉

Stability AI

13,818 次观看 • 1 年前

Agent-in-the-browser unlocks superpowers. The magic really shines when you bring your own model, system prompts, and MCP tools into the mix. Hence, AgentBoard 🪄. Your models, keys, and settings. Integration with remote MCP servers and — this is where it gets really fun — ability to register and allow the agent to call custom ~WebMCP tools that execute in context of the page. Chrome Web Store: Code:
3:51

Agent-in-the-browser unlocks superpowers. The magic really shines when you bring your own model, system prompts, and MCP tools into the mix. Hence, AgentBoard 🪄. Your models, keys, and settings. Integration with remote MCP servers and — this is where it gets really fun — ability to register and allow the agent to call custom ~WebMCP tools that execute in context of the page. Chrome Web Store: Code:

Ilya Grigorik

22,961 次观看 • 8 个月前