The most autonomous agent framework ⭐ No approval loops. No babysitting. Configure once, forget forever.
$aeon
Joined August 2024
- Tweets1.8K
- Following3
- Followers141K
- Likes814
Your API keys might be sitting in your logs right now!
Aeon VulnScanning Ep.5
⏱ Chapters
00:00 Intro: secrets leak sideways
00:26 Kaneo: Gitea token exposed to every workspace member (High)
00:35 The bug
01:50 ds2api: API keys in the logs + a path-traversal classic
02:00 The bugs
03:17 fumadocs-openapi: an open proxy by default
03:32 The bug
04:29 The pattern: rotate, don't just upgrade
When the guardrail IS the bug 🔓
VulnScanning Ep.6: 3 safety checks that failed open, all found by Aeon, all patched.
00:19 @omnigent_ai: "allow" when confused (High)
02:13 @Opencodex: a buffer with no limit
03:16 @Capminal: a mint priced 74% too cheap (High)
05:12 6 patterns, one checklist
aeon is now listed on @OpenRouter!
Your agent can pick from hundreds of models with one key while our app page on their website shows their usage live
Have you subscribed to our YouTube channel yet?
youtube.com/@aeonfun
aeon ⭐ retweeted
9,000 holders ⭐
A highlight from @aeonframework, the most autonomous agent framework. See them all: aeon.fun/highlights/9000-hol…
Your API keys might be sitting in your logs right now!
Aeon VulnScanning Ep.5
⏱ Chapters
00:00 Intro: secrets leak sideways
00:26 Kaneo: Gitea token exposed to every workspace member (High)
00:35 The bug
01:50 ds2api: API keys in the logs + a path-traversal classic
02:00 The bugs
03:17 fumadocs-openapi: an open proxy by default
03:32 The bug
04:29 The pattern: rotate, don't just upgrade
this weekend im working on a swarm of portfolio manager agents.
a small sample of pms (cloned from X profiles using @aeonframework soul.md) been running in prod for cpl days and did pretty ok throughout the crash (by reducing their risk exposure ahead).
got a list of to dos but im already positively surprised by what im seeing
iv actually dived into imd quite a bit but it came down to control, speed and cost so im hosting agents/compute for now
aeon ⭐ retweeted
this weekend im working on a swarm of portfolio manager agents.
a small sample of pms (cloned from X profiles using @aeonframework soul.md) been running in prod for cpl days and did pretty ok throughout the crash (by reducing their risk exposure ahead).
got a list of to dos but im already positively surprised by what im seeing
iv actually dived into imd quite a bit but it came down to control, speed and cost so im hosting agents/compute for now
What our scanner found on @QAwithIto's M()(): a booby-trapped base image could delete files on your machine the moment you ran moo new.
Full report below ⤵️
1
15
1,614
What our scanner found on @mitsuhiko's Absurd repo: the Habitat dashboard had no login and listened on the whole network, so nearby machines or a web page could read and retry your tasks.
Full report below ⤵️
"Is This Caller Allowed?" 3 AI Tools that never asked for this question youtu.be/3uoYo8LyUiQ?si=q5I0… via @YouTube
aeon ⭐ retweeted
hell yeah, we are so early @aeonframework
