Launch prep: README hook + demo GIF#16
Merged
Merged
Conversation
~13s screencast of `websec run /tmp/VAmPI` mapping VAmPI's attack surface, resting on the AGENT-BRIEFING.md payoff (the product). Rendered with charmbracelet/vhs from assets/demo.tape, committed so the GIF is regenerable. 580K — under the 5MB launch budget. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- One-line hook above the intro blockquote: framing the tool as a senior pentester's "here's what to test and how" handoff for your AI agent. - Embeds assets/demo.gif after the intro, before the "not an autonomous scanner" paragraph. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Launch-prep polish for the Show HN — exactly two changes, no code/functional edits.
README hook line — a one-liner directly above the intro blockquote:
Demo GIF —
assets/demo.gif(a ~13s vhs screencast) embedded right after the intro, with the regenerable tape committed atassets/demo.tape.The GIF
websec run /tmp/VAmPI→ deterministic recon maps the full attack surface in ~1s (stack, auth, 19 routes, IDOR=5/writes=6, 21 findings), thenhead -48 websec-out/latest/AGENT-BRIEFING.md— the resting frames land on §3 "Attack surface & targeting (point the probes HERE)" with the concrete IDOR/BOLA endpoint list. That payoff is the product.git clone --depth 1 https://github.com/erev0s/VAmPI /tmp/VAmPI, thenvhs assets/demo.tapefrom the repo root.Verification
python -m unittest discover -s tests→ 285 passed.npx docguard-cli guard→ 89/90, no new drift: the single warning is the pre-existingSPK001spec-kit advisory (identical on the pre-edit README — verified by stashing the change and re-running).websecresolves, run summary + briefing payoff both render cleanly; README markdown well-formed.One adaptation from the starter tape
v0.10.0 writes immutable timestamped runs plus a
latestsymlink, so the briefing lives atwebsec-out/latest/AGENT-BRIEFING.md— the originalhead -25 websec-out/AGENT-BRIEFING.mdwould have errored. Fixed the path and pointed it at the marching-orders section so the last frames land on the payoff rather than the scope preamble.Do not merge — opened for your review. Reminder: the social-preview PNG upload (Settings → General → Social preview) remains a manual step.
🤖 Generated with Claude Code