ML.

All Posts

Analyzing Floci: What Does It Take to Fit 68 AWS Services Into One Container?

Floci is an always-free, open-source local AWS emulator with no account, no auth token, and no feature gates. A single Quarkus + GraalVM native container emulates 68 AWS services behind one port, 4566. We analyze its Smithy-spec protocol routing, descriptor-driven service catalog, four storage modes, and real Docker execution — against LocalStack.

Analyzing Firecrawl: How Do You Build an API That Turns the Web Into LLM-Ready Markdown?

Firecrawl is a data API that turns any website into clean, LLM-ready Markdown or structured JSON. It orchestrates in TypeScript, cleans in Rust, converts to Markdown in Go, races several scrape engines in a waterfall, and drives crawls with a hand-built Postgres queue. We analyze the scrape/crawl/map/search/extract pipelines and contrast them with Browser Use as "two ways to feed the web to LLMs."

Analyzing SkillSpector: How Do You Check Whether an Agent Skill Is Safe?

SkillSpector is NVIDIA's security scanner for AI agent skills. It vets a skill before install to find prompt injection, data exfiltration, and malicious code. We analyze its structure — a LangGraph map-reduce graph that fans out to 25 analyzers (static patterns, AST, taint, YARA, MCP, LLM semantics) and reduces them to a single risk score — against Superpowers and ponytail, which inject skills.

Analyzing ponytail: How Does a Skill That Makes Agents "Write Less Code" Ship to 16 Agents?

ponytail packs a single discipline — the "lazy senior dev" laziness ladder — into one SKILL.md and ships it to 16 agents via every mechanism (skill, hook, command, MCP, plugin), proving a ~54% code cut with a real agentic benchmark. We analyze it against Superpowers, and the idea that a skill is a bundle of discipline, distribution, and measurement rather than code.