Post

A lot of people are now building and using their own hackbots daily. Here's a nice blog on using AI to hunt for vulns by 0xAsm0d3us. Some takeaways that I've also been experiencing:

Instead of asking "is this code secure?", ask "how would you break this?". This shifts the flow from auditor to attacker. It will force it to generate attack strategies.

Avoid bloated prompts. Stuffing big MD files and skills into context degrades reliability of the model. Your scaffolding becomes the haystack and the bug becomes the needle.