so close to a path traversal vulnerability finding but filePath is hard-coded to a predefined file name

there's still an issue there with TOCTOU and predictable file writing but I'm gonna see about a command injection route instead

#bugbounty

how do you track which MCP Servers you have configured across your AI apps?

I built this TUI mock-up with Vercel v0
you want access to the CLI ?

What sort of AI agents are you building with CrewAI ?

I'm curious how well do you find the tooling ecosystem
For example, the ScrapeWebsiteTool is fine but it only extract texts and I needed to build my own custom tool with BeautifulSoup to parse links and such from the web page

Building a CVE research agent with CrewAI

Learning a thing or two about the ecosystem and building AI agents. Fun too and a write-up is coming as well.