Sharing a quick proof-of-concept project: Cursor-MCP-Trivy.

I put together an MCP server that leverages trivy to scan the active cursor project for security vulnerabilities whenever cursor's agent (composer) changes a dependency file, e.g adding a new dependency.

github.com/norbinsh/cur...

Cursor’s Privacy Mode starts OFF by default in the IDE, because clearly, they think sharing is caring. 😅

Check your settings and decide what works for you.

www.cursor.com/security#inf...

Good luck!

Using chatgpt new tasks feature as a website availability tool 😆

browser-use is pretty cool!
this demo's repo i setup is here github.com/norbinsh/kub...

gitcicd.com

Small platform i built you can use to analyze a github repo for actions workflow potential risks, give it a go! 🤘

The Model Context Protocol (MCP) is an open standard for giving large language models secure, controlled access to tools and data sources.

"Think of MCP like a USB-C port for AI applications."

modelcontextprotocol.io/introduction

gitdiagram.com

This tool will generate a mermaid diagram from a git(hub) repository.

DSPy from Stanford NLP: a Python library for building multi-step LLM pipelines and prompt optimization.

dspy.ai

See in my attached example how it takes a tiny one-liner prompt, convert it (using llm as well) into sub questions - answer them - summarize, and return a final answer.

Interesting take on how we often over-emphasizes llms while neglecting the important role of building complete AI systems:

www.youtube.com/watch?v=vRTc...

1. The complete system running it, and not just the llm itself, are the key to unlocking the true potential of AI.

Some decent AI related "freebies" @ www.aiengineerpack.com - I am not affiliated with that site, just sharing in case and it'll help some others as well, grabbed an annual Perplexity pro sub for no cost. Good luck! (Oh and... always best to remove requested access once you are "done" with it).

Running terraform plan on untrusted code isn’t as safe as it seems. Most ci setups I know would allow developers to do this on the PR phase, before even submitting the PR to a code review.
good read: snyk.io/blog/gitflop...

Google and Kaggle have launched a comprehensive, no-cost Generative AI course. Each day focuses on key topics:

• Day 1: Foundational Models & Prompt Engineering
• Day 2: Embeddings and Vector Databases
• Day 3: Generative AI Agents
• Day 4: Domain-Specific LLMs
• Day 5: MLOps for Generative AI

Been using Google's "notebooklm" almost daily to “listen” to whitepapers or get quick intros to new topics with its podcast feature. It’s my go-to for deep dives while on the move. free and super convenient!

Shoutout to AWS for the ‘Focus mode’ in their docs – a simple but game-changing feature for reading without distractions. More platforms should definitely follow this.