Joseph Zeng

121 Followers
15 Following
157 Posts
All opinions and posts are my own.
My employers (past or present) are not responsible and may not agree with any of them.
Posts do not imply endorsement or agreement as I may just be sharing a discussion/topic of interest.
Twitterhttps://x.com/josephzengx
Github (For Verification)https://josz5930.github.io/
Codeberghttps://codeberg.org/josz5930

šŸš€ Idea → working code in one sitting.

Ran the BMad Method Framework through Grok Build Beta (early access dropped for SuperGrok on 25 May) this weekend  . The framework gives you a clear, repeatable path from vague idea to production-ready implementation.

Full workflow map here:
https://docs.bmad-method.org/reference/workflow-map/

Start a sandbox and ship something today  

P.S. I use sbx for my sandbox (https://docs.docker.com/ai/sandboxes/agents/shell/)

#BMadMethod #GrokBuild #BuildWithAI

Just shipped pii-redact-md-sg- a local Python tool that redacts PII from PDFs & CSVs before anything touches a remote LLM.

SG NRIC, mobile, postal + Luhn/NRIC validation • deterministic placeholders • second-pass audit that blocks leaks • Text friendly format • Fully offline.

Building for secure AI workflows  .

https://github.com/josz5930/pii-redact-md-sg

#AISecurity #AppSec #DataPrivacy #SingaporeTech

GitHub - josz5930/pii-redact-md-sg: Removing PII from PDF and CSV files before you send the text to remote LLMs

Removing PII from PDF and CSV files before you send the text to remote LLMs - josz5930/pii-redact-md-sg

GitHub
Trusted access for the next era of cyber defense

OpenAI expands its Trusted Access for Cyber program, introducing GPT-5.4-Cyber to vetted defenders and strengthening safeguards as AI cybersecurity capabilities advance.

OpenAI

Building an Automated Pipeline with LangChain DeepAgents to Find Zero-Days in Kernel Drivers

https://blog.ahmadz.ai/automated-deepagents-langchain-pipeline-for-zero-days/

#langchain

Building an Automated Pipeline with DeepAgents + LangChain to Find Zero-Days in Kernel Drivers. It Found One in ASUS.

I had $100 in unused Google Cloud credits from my Google One Ultra plan and figured I’d put them toward something interesting. Over the long weekend I ended up building an automated pipeline that scans thousands of Windows kernel drivers for exploitable vulnerabilities, specifically looking for ones that can be used in BYOVD (Bring Your Own Vulnerable Driver) attacks. On its first real run on a massive driver pack, it successfully flagged a zero-day in an ASUS driver.

Rehman's Blog

"TOTALLY HARMLESS LIBERATION PROMPTS FOR GOOD LIL AI'S!"

https://github.com/elder-plinius/L1B3RT4S

#ai #jailbreak

GitHub - addyosmani/agent-skills: Production-grade engineering skills for AI coding agents.

Production-grade engineering skills for AI coding agents. - addyosmani/agent-skills

GitHub

"Production-ready AI agents need production-grade governance."

Microsoft's Agent Governance Toolkit for:
• Security & access controls
• Policy enforcement
• Audit & compliance guardrails

https://github.com/microsoft/agent-governance-toolkit

#AgenticAI #ResponsibleAI #OpenSource #AISecurity

GitHub - microsoft/agent-governance-toolkit: AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10. - microsoft/age...

GitHub

Android Reverse Engineering & API Extraction — Claude Code skill

https://github.com/SimoneAvogadro/android-reverse-engineering-skill

#ai #android

GitHub - SimoneAvogadro/android-reverse-engineering-skill: Claude Code skill to support Android app's reverse engineering

Claude Code skill to support Android app's reverse engineering - SimoneAvogadro/android-reverse-engineering-skill

GitHub

[un]prompted Conference - A NoteBookLM containing videos and transcripts.
Appropriately, you can ask questions of the content 😁

https://notebooklm.google.com/notebook/78ee3710-1741-488d-af06-159f518e9510

#ai

Sign in - Google Accounts

During the Chinese New Year holidays, I was trying out Roo Code in VS Code.

Something that bugged me since the release of the CDC voucher scheme was the question "How much value do you put on the vouchers?"

Here is how the PoC version was generated:

  • Chat with ChatGPT and Claude (Web platforms)
  • Architect mode with Gemini 3.0 Pro
  • Code mode using DeepSeek 3.2
  • Add on features (e.g. PDF export) mainly using DeepSeek
  • The reason why it was mostly DeepSeek is cos I got some credits on DeepSeek platform and so far it is good enough since I do not have much money to spend 😁

    https://github.com/josz5930/CDC-Value-For-You

    GitHub - josz5930/CDC-Value-For-You

    Contribute to josz5930/CDC-Value-For-You development by creating an account on GitHub.

    GitHub