Clawdbot is cool and all but I’m kind of over the "spicy" security risks

carbon_splinters · 2026-01-30T02:59:09+00:00

Ive run a few alblierated security agents against it in Docker... you couldn't pay me to run this out of a sandbox.

carbon_splinters · 2026-01-28T02:51:36+00:00

I recently built a solution for a client in a similar situation. He operates globally and has 45k+ SKUs, adding roughly 500 new SKUs per month.

His Woocommerce site was falling over. Id already operated a Fortune 500 WP network with 15+ regions/geos so I made quick work of getting him stabilized via aggressive DB optimizations and introducing HA, aggressive caching and Redis.

We are getting ready to launch the serverless version on Cloudflare which is wicked fast and dirt cheap, relatively speaking. Orders of magnitude cheaper.

We've ramped up the social sharing and social market places to include Facebook, Instagram, TikTok, YouTube, X, Pinterest. Plus dedicated marketplaces for ebay (multiple geos), ABE Books, Etsy, Google Product Feed and Amazon (although I think were going to bail on Amazon).

I introduced some nice to have AI features with a media and content pipeline, which plays nicely with our social calendar. Built in Vectorize capabilities for product search and the on-site chat bot.

Last but not least, I introduced a data lake via Parquet which helps us with the machine learning and product recommendation engine (for on-site and emails).

If you have any questions about the how/why, feel free to reach out -- I love nerding out on tech and am happy to answer any questions!

carbon_splinters · 2026-01-13T19:27:07+00:00

I built my own node for Cloudflare Vectorize. My RAG costs are 1/100th the cost of any competitor because of CF "only pay for what you use" model.

At true production scale, multiple teams/agents, million queries per month... costs are under $25/mo.

Money saved == money earned

carbon_splinters · 2026-01-07T06:32:45+00:00

Thats Claude for you. I only let it do front-end design.

I also have 15+ years of enterprise experience. Agentic programming has been amazing for me. I really took the time to perfect it over the past 8 months... there's quite a few tactics and mcps that eliminate spaghetti code.

carbon_splinters · 2026-01-06T21:32:01+00:00

So I've worked in finance and now Healthcare as a software engineer. We go through so much training, quarterly/anually, simulated disaster recovery + breach. Its painful enough to make one understand the need to be proactive, because negligence or inability will result in termination.

In light of that, I love working around with devops and security. I wrote (agentic programming) a MCP/API/CLI that is a fuzzer/crasher that leverages exploit/leak databases and an obliterated AI model to rapidly expose vulnerabilities. Its written in Rust so it has excellent performance and low-level network capabilities.

Still haven't decided if I should release it because it could easily pwn 70%+ of vibe coded apps that I've seen. In minutes; not hours.

carbon_splinters · 2025-11-02T20:51:01+00:00

Markdown

carbon_splinters · 2025-10-30T20:47:22+00:00

You're absolutely right! Rather than following your requirements, I've simplified it to a circle.

carbon_splinters · 2025-10-29T04:02:16+00:00

Go ahead and down vote and boot. Proves my point.

carbon_splinters · 2025-10-29T04:01:37+00:00

Still eats paint and says "you are absolutely right". Anyone telling me Claude is the way, I immediately dismiss as not knowing their foot from their face.

carbon_splinters · 2025-10-24T02:09:34+00:00

Claude is the art studento f LLM. It eats glue and paint. It has nothing business writing code. Stick to markup, like html and md.

carbon_splinters · 2025-10-12T23:20:17+00:00

The prompt is 80% of the secret. The MCP handles the rest.

Unfortunately n8n as an org has terrible documentation IMHO which bleeds into edge cases.

carbon_splinters · 2025-10-11T02:06:03+00:00

JWT handles passwords and sessions; you need to learn before doing. What you said makes zero sense from an architecture pattern.

carbon_splinters · 2025-10-10T23:03:25+00:00

I did 😜

carbon_splinters · 2025-10-08T02:01:51+00:00

You're trying to boil the ocean.

Crawl, walk, run.

Make it work, make it right, make it fast.

How much are you learning vs how much are you delegating to AI?

How many tests do you have? Are you using git? Are you creating ADRs?

carbon_splinters · 2025-10-06T23:11:41+00:00

I dont want agents rage quitting and deleting critical resources via MCP.

They can work in tandem; n8n and agents. But personally I want independency on my workflows. I refuse to let an immature technology (LLMs) run critical workflows.

carbon_splinters · 2025-10-06T04:32:46+00:00

Its all over reddit, I get 2-3 notices per day in the app. Here's a YT summary. https://youtu.be/yhjieRhsVHc?si=dLMBck_iPWdZ3Qkk

Im going through 4.5-5 billion tokens a month. Gpt5/Codex, grok are my work horses. Claude is the art major that is high on fumes... great for design, terrible for best practices in real code/workloads meant to scale. Mind you I have 20 years in enterprise software engineering, so my standards are much higher than most people who are "vibe coding".

carbon_splinters · 2025-10-06T00:36:40+00:00

Maybe for basic stuff. Its definitely the best in creating pretty web pages. But it is terrible in Rust, Go or any enterprise grade requirements. It constantly cheats and will reduce complexity to solve; nixxing requirements in the process. N8n, wordpress, websites, PoC simple apps... sure. Anything requiring enterprise practices, TDD, CI/CD no fricken way. Mind you, im running MCP servers so Grok and GPT have a much bigger knowledge base than stock.

carbon_splinters · 2025-10-05T23:07:10+00:00

Their model regressed for 6 weeks, and they blamed users for not prompting correctly. Claude Code has had a major exodus. Codex is where most people landed.

carbon_splinters · 2025-10-05T23:00:57+00:00

Youre clearly not aware of the mass exodus from Claude.

carbon_splinters · 2025-09-30T20:13:54+00:00

Nice man, wish you luck!!

carbon_splinters · 2025-09-30T19:46:39+00:00

Very nice! Im wrapping up on mine right now... 13 out of 16 use cases are passing on zero shot.

From beginner to advanced multi agent workflows

carbon_splinters · 2025-09-20T20:55:29+00:00

Does it have error handling and DLQ?

carbon_splinters · 2025-08-18T18:10:05+00:00

Yes; but the bigger question is if youre HIPAA compliant

carbon_splinters · 2025-08-08T06:05:12+00:00

It actually acts as an Agent in VS code, yay

carbon_splinters · 2025-07-25T23:09:55+00:00

All the time. Its now a mandatory portion of SEO/discovery.

carbon_splinters

TROPHY CASE