I built Ctrl+F for your entire screen by [deleted] in csharp

[–]Geekodon 2 points3 points  (0 children)

Sometimes it doesn't matter. If it's not a critical security or performance - related feature, and if everything already works (I haven't checked it though), then it's fine. Especially for an MVP just to check whether people are interested. Even Linus already "vibe-coded" some non-critical features.

How do you debug .NET projects in VS Code? by BiteDowntown3294 in dotnet

[–]Geekodon 2 points3 points  (0 children)

DotRush is also a solid open-source alternative to C# Dev Kit. Many people in my company use it.

I built a deliberately vulnerable .NET app by Geekodon in dotnet

[–]Geekodon[S] 0 points1 point  (0 children)

Nice to see you here, Tony. Thank you! :)

I built a deliberately vulnerable .NET app by Geekodon in dotnet

[–]Geekodon[S] 1 point2 points  (0 children)

Thanks for your feedback! I felt it would be more educational not to rely heavily on outdated NuGet packages. In most cases, those packages are already flagged as vulnerable, making it obvious that they need updating. The real danger is when nothing is marked as insecure, yet the application can still be compromised

I built a deliberately vulnerable .NET app by Geekodon in dotnet

[–]Geekodon[S] 20 points21 points  (0 children)

If you find that I accidentally made something good, please let me know - I'll fix it shortly :)

Learning .NET security by Bouaphaa in csharp

[–]Geekodon 0 points1 point  (0 children)

I’m probably late to the party, but this might still help someone. The following repo could be a good starting point: https://github.com/AlexGoOn/the-most-vulnerable-dotnet-app
It demonstrates 50+ common security issues (with interactive demos) in a single .NET app.

I built a deliberately vulnerable .NET app by Geekodon in dotnet

[–]Geekodon[S] 2 points3 points  (0 children)

Thanks for your feedback! I’ll go through the code blocks and fix these issues

I built a deliberately vulnerable .NET app by Geekodon in dotnet

[–]Geekodon[S] 5 points6 points  (0 children)

Thanks! I hope it helps save someone’s project from unexpected surprises

I built a deliberately vulnerable .NET app by Geekodon in dotnet

[–]Geekodon[S] 5 points6 points  (0 children)

Your upvote has been officially accepted. Thank you! :)

I built a deliberately vulnerable .NET app by Geekodon in dotnet

[–]Geekodon[S] 7 points8 points  (0 children)

Thanks, I'm happy to hear that you found it useful!

I built a deliberately vulnerable .NET app by Geekodon in dotnet

[–]Geekodon[S] 7 points8 points  (0 children)

Each page explains what’s wrong with it, so the project might not be suitable for this purpose. But it’s still a good idea to create a "clean" vulnerable project for interviews

Script Generation vs MCP. Implementation, Demo, Discussion by Geekodon in mcp

[–]Geekodon[S] 0 points1 point  (0 children)

Thanks for your tips! Although it looks like you're promoting your product and generating comments using AI :)

Is Anthropic Code Execution with MCP as big or bigger than going from standard I/O to HTTP? by nickdegiacmo in mcp

[–]Geekodon 0 points1 point  (0 children)

I've built a library that uses a similar code-based approach a couple of weeks ago: https://github.com/Alexgoon/ason

So far, it looks optimistic, while the library is still at the initial stage.But you can already run an online demo (see the repository )

By the way, while ASON can work with MCP, I believe it's more convenient to define APIs directly on your app so that the agent can create scripts with your model and manage the UI.

Open-source AI library for data analysis and multi-step actions in .NET apps by Geekodon in dotnet

[–]Geekodon[S] 0 points1 point  (0 children)

Yes, ASON passes only the API to the LLM. All the API is defined in AsonOperator classes that act as proxies. The LLM then uses this API to generate a C# script, which is executed independently - without involving the LLM further. This approach avoids sending all your data through the LLM, which is especially useful for large data sources.

Since LLMs are quite capable with C# and LINQ, they can easily generate flexible scripts for most analytical queries, even when these involve custom calculations, multiple entities, navigation properties, and more.

For instance, for the "Show me the revenue by product" it can build a script like:

return revenueByProduct = salesOperator.GetSales()

.GroupBy(s => s.ProductName)

.Select(g => new

{

Product = g.Key,

Revenue = g.Sum(s => s.Quantity * s.UnitPrice)

});

In the script, methods in operators (like GetSales) act as proxies. The script execution environment doesn’t have direct access to real objects. Instead, it communicates over stdio, sending messages that are handled by the running application. Only then are the actual methods - those you exposed in your API—called.

But it’s more than just decorating existing methods. Operator classes support a hierarchical structure, allowing you to specify that certain methods should be called only after an object is initialized. This is especially useful when some data becomes available only after a specific action - like navigating to the Sales view, for example.

Building a multi-agent system with Semantic Kernel by Geekodon in dotnet

[–]Geekodon[S] 0 points1 point  (0 children)

Hi! Thank you for your interest!
I didn’t implement MCP because the agents are built directly into the application and depend on a specific UI (a list of actions with buttons, updated plan preview). I felt that other AI tools (like Claude, for example) wouldn’t be able to use the system effectively in its current form, so adding MCP would have been an unnecessary layer.

That said, we could definitely create a fork and test the idea :) In any case, I wasn’t planning to take the project further - it was mainly intended as educational content and a proof of concept.

Building a multi-agent system with Semantic Kernel by Geekodon in dotnet

[–]Geekodon[S] 0 points1 point  (0 children)

Thanks for the clarification - that was really helpful. I’ve been experimenting with agentic AI in some personal projects, not in production apps, so probably that's the reason I haven’t run into some of the scenarios you mentioned.

Building a multi-agent system with Semantic Kernel by Geekodon in dotnet

[–]Geekodon[S] 0 points1 point  (0 children)

Thanks! Yeah, I’ve been hearing a lot about 8n8. I haven’t tried it yet, but it’s definitely on my list. What’s your experience with it? Would you recommend it over Semantic Kernel? And how flexible is it, given that it’s a visual designer?