CS student · compilers & database internals · building agent-security tooling
- CS student, currently deep in compilers and database internals.
计算机专业学生,目前专注于编译器和数据库内核。 - Builds agent-security tooling, starting with the skills and MCP servers agents load.
构建 Agent 安全工具,从 Agent 加载的技能与 MCP 服务开始。 - Prefers hand-written parsers, golden tests, and code that stays readable a year later.
偏好手写解析器、golden 测试,以及一年后仍然可读的代码。 - Learns by reproducing real-world agent skills, then writing down where they fail.
通过复现真实 Agent 技能来学习,并记录它们失效的地方。 - Currently building SkillGuard, a zero-dependency scanner for agent skills and MCP servers.
正在构建 SkillGuard:零依赖的 Agent 技能与 MCP 配置安全扫描器。
| SECURITY | COMPILERS | RESEARCH |
|---|---|---|
| skillguard | c-subset-lexer | security-audit-skill-repro |
| Security scanner for AI agent skills & MCP servers. | Hand-written C-subset lexer with a Flex reference implementation and golden tests. | Independent reproduction & teardown of a trending agent security audit skill. |
python mcp security |
c flex testing |
agents security teardown |
- Agent skill security — treating skill manifests and MCP configs as attack surface.
Agent 技能安全:将技能清单与 MCP 配置视为攻击面。 - Compiler course labs — lexer, parser, and semantic analysis, written by hand.
编译原理课程实验:手写词法、语法与语义分析。 - Database systems — storage, indexing, and query execution from first principles.
数据库系统:从存储、索引与查询执行的基本原理入手。
GitHub only — @buait.
仅限 GitHub:@buait。
Build agents. Break agents. Then secure them.
Open to collaboration on agent tooling.