GoKawiil
Tech News
A three-person data platform team at a roughly 500-person company built a side tool in February to host HTML files generated by AI coding assistants like Claude Code. Eight months later, that tool reportedly has as many or more weekly users as the company's Looker business intelligence subscription, while Looker usage has dropped by about a third.
A developer has published agent-usage-guard, a modification for Claude Code that intervenes before prompts, tool calls or subagent fan-outs run, aiming to prevent a five-hour usage window from being exhausted in minutes. The tool reads Claude Code's own 5-hour and weekly usage percentages, prompts the user for approval when possible, and refuses actions when no one is available to answer. It runs entirely locally, storing only counts and coarse buckets rather than prompt or output content.
A developer released SIwithin, a single-file Python tool that runs AI coding CLIs like Claude Code and OpenAI Codex unattended, restricting them to specified folders and enforcing a dollar budget per run. It uses a loopback proxy to meter Claude API requests with a per-run token instead of the user's real key, and logs one record per run showing cost and completion status. The tool currently works only on macOS and refuses to run on Linux or Windows.
OpenCode, an open-source AI coding tool, disclosed a security breach affecting 1.4% of users of its OpenCode Console platform, where some store API keys for AI services. The company described it as a large-scale distillation attack and notified affected users by email, while developers reported unexpected charges on OpenAI, Anthropic and Google AI accounts, some exceeding $1,000. Anthropic and Google blocked exposed keys, OpenAI worked with OpenCode to restore access and refund credits, and OpenCode said refunds for unauthorized charges are underway.
A Reddit user building a Mac temperature-monitoring app with Claude Code was alerted by the AI agent that xmrig, a crypto-mining program, was running unauthorized on their machine using roughly 1175% CPU across about 12 cores. Claude identified the malware had been added to startup around August 29 and offered to quarantine the files rather than deleting them outright.
Recent versions of Claude Code support a `claude --worktree --tmux` command that automatically creates both a git worktree and a tmux session for an AI coding agent, rather than requiring developers to wire this up manually. The guide explains that tmux's persistence, multi-session management, and external scriptability (via send-keys and capture-pane) are what make it a popular backbone for running and orchestrating multiple coding agents.
A developer built superlite, a workflow tool for Claude Code that runs multiple build tasks in parallel rather than sequentially asking for approval at each step. The post describes frustration with existing agentic workflows that require constant manual approval, and presents superlite as an alternative that lets several agents work simultaneously on different parts of a spec.
Anthropic's Claude Code team published an account of how it adapted code review practices as AI-generated code volume surged. Merged pull requests to the Claude Code repository more than doubled between June and September, while the share of PRs later reverted fell by over 40%. The team says it shifted most initial code reading to automated Claude-based checks that run continuously, reserving human review for higher-level judgment calls.
A developer trying to digitize family photo negatives found their Plustek 8200i scanner's new chipset lacked Linux support. Inspired by a method shared by Tom Crider for fixing a mouse driver, they used Claude AI alongside a Windows VM to capture USB data during scans, producing a working SANE driver within hours and a near-complete one, including infrared support, within days. They also built a companion scanning app called Negative Vibes, though they later found someone had independently submitted official SANE support for the same scanner.
Security researchers identified a vulnerability dubbed 'SneakPeek' in Anthropic's Claude Code Desktop application, located in its file preview feature. The flaw reportedly lets attackers silently exfiltrate sensitive developer credentials, including SSH private keys, AWS credentials, and Claude OAuth tokens, without requiring any user interaction.
Developer bealesh released neckbeard, a plugin for AI coding agents like Claude Code that analyzes an application's repository and generates reviewable cloud infrastructure plans with monthly cost estimates. It supports AWS, GCP, and Azure deployments via GitHub Actions or GitLab CI, using a bundled catalog of tested OpenTofu modules, and includes commands such as /neckbeard:analyze, /neckbeard:estimate, and /neckbeard:sync. The tool pairs AI-driven analysis with deterministic planning and validation code so the agent explains infrastructure rather than inventing it.
Graphicle is a new open-source Rust program that indexes a code repository into a graph and stores project docs, decisions and past agent session history, serving cited file-and-line excerpts to coding agents. It runs locally with no API key, account or telemetry, and integrates with Claude Code, Cursor, Codex, VS Code, Claude Desktop and other MCP clients. The tool is described as a Rust port of an earlier project called Graphify, installable via Homebrew or a shell script, with native Windows support still pending.