Skip to content
View buait's full-sized avatar

Block or report buait

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
buait/README.md
buait — Build agents. Break agents. Then secure them. 构建 Agent · 攻破 Agent · 加固 Agent

CS student · compilers & database internals · building agent-security tooling

About

  • CS student, currently deep in compilers and database internals.
    计算机专业学生,目前专注于编译器和数据库内核。
  • Builds agent-security tooling, starting with the skills and MCP servers agents load.
    构建 Agent 安全工具,从 Agent 加载的技能与 MCP 服务开始。
  • Prefers hand-written parsers, golden tests, and code that stays readable a year later.
    偏好手写解析器、golden 测试,以及一年后仍然可读的代码。
  • Learns by reproducing real-world agent skills, then writing down where they fail.
    通过复现真实 Agent 技能来学习,并记录它们失效的地方。
  • Currently building SkillGuard, a zero-dependency scanner for agent skills and MCP servers.
    正在构建 SkillGuard:零依赖的 Agent 技能与 MCP 配置安全扫描器。

Featured

SECURITY COMPILERS RESEARCH
skillguard c-subset-lexer security-audit-skill-repro
Security scanner for AI agent skills & MCP servers. Hand-written C-subset lexer with a Flex reference implementation and golden tests. Independent reproduction & teardown of a trending agent security audit skill.
python mcp security c flex testing agents security teardown

Toolbox

Python C TypeScript Git Linux SQL

Activity

buait's GitHub contribution streak

Now

  • Agent skill security — treating skill manifests and MCP configs as attack surface.
    Agent 技能安全:将技能清单与 MCP 配置视为攻击面。
  • Compiler course labs — lexer, parser, and semantic analysis, written by hand.
    编译原理课程实验:手写词法、语法与语义分析。
  • Database systems — storage, indexing, and query execution from first principles.
    数据库系统:从存储、索引与查询执行的基本原理入手。

Reach me

GitHub only — @buait.
仅限 GitHub:@buait。

Build agents. Break agents. Then secure them.

Open to collaboration on agent tooling.

Popular repositories Loading

  1. security-audit-skill-repro security-audit-skill-repro Public

    Cloudflare security-audit skill 的复刻与拆解(上游 cloudflare/security-audit-skill,MIT;非原项目)

    JavaScript 1

  2. security-audit-skill-repro-20261023 security-audit-skill-repro-20261023 Public archive

    Archived snapshot superseded by buait/security-audit-skill-repro

    JavaScript

  3. security-audit-skill-repro-20261025 security-audit-skill-repro-20261025 Public archive

    Archived snapshot superseded by buait/security-audit-skill-repro

    JavaScript

  4. DeepInfer-repro DeepInfer-repro Public

    DeepSeek 离线推理框架复现(上游 deepseek-ai/DeepInfer,Apache-2.0),新增请求级遥测与运维 CLI | Reproduction with telemetry and an ops CLI

    Python

  5. ai-job-search-repro ai-job-search-repro Public

    本地 AI 求职助手复刻(上游 ai-job-search-dev/ai-job-search,MIT;非原项目)| Study reproduction, not affiliated with upstream

    Python

  6. tv-fresh-repro tv-fresh-repro Public

    小米电视去广告 + 开源桌面攻略(复刻自 wangrongding/tv-fresh,MIT;非原项目)| Reproduction of a MiTV de-bloat guide

    Shell