免费开源路线优化代理，客户端运行无需API密钥，可集成Claude Cowork/WebMCP。
I've been building https://routing24.com for a while, a free route optimization and planning app for businesses. One of the things that bothered me fo…
揭秘AI编码应用中最常见的6个安全漏洞，从硬编码API密钥到前端授权逻辑，开发者必读的避坑指南。
Across dozens of audits at Inithouse , the same six security issues show up in AI-generated codebases. Not occasionally. Repeatedly. Different teams, …
无需API key，有ChatGPT订阅即可在命令行直接生成图像，超实用的小工具。
Article URL: https://github.com/leeguooooo/chatgpt-imagegen Comments URL: https://news.ycombinator.com/item?id=48626459 Points: 1 # Comments: 0
用自己构建的npm预检工具防密钥泄露，却被GitHub反杀，一个开发者的实战故事与开源方案。
We've all seen the horror stories: someone leaks an API key and wakes up to a $30k cloud bill, or accidentally publishes private code that's now publi…
Cloak 帮你安全地把 API 密钥交给 AI 代理，模型和日志永远看不到密钥，防止提示注入泄露。
Article URL: https://github.com/cloakward/cloak Comments URL: https://news.ycombinator.com/item?id=48618904 Points: 2 # Comments: 0
在运行Claude Code时实时拦截API调用，防止token过度消耗与密钥意外泄露，守护你的钱包与安全。
Article URL: https://github.com/ashp15205/guardian-runtime Comments URL: https://news.ycombinator.com/item?id=48464199 Points: 2 # Comments: 0
API密钥被盗后Google封停全账户，百万美金年营收SaaS一夜崩塌的惨痛警示。
Two days ago I had a working company. $1M ARR, 100k users, a product people actually pay for and depend on. Right now it's dead in the water and I'm l…
无需 API 密钥即可统计 Claude Code 输入 tokens 并估算费用，精准控制开发预算。
Article URL: https://github.com/samjoch/tok Comments URL: https://news.ycombinator.com/item?id=48358986 Points: 3 # Comments: 0
探究LLM API密钥为何统一以"sk-"开头，引发技术社区对命名惯例的热议。
Genuinely curious, as a builder for so long, API keys took all shapes and sizes, but what's with the sk prefix these days? Comments URL: https://news.…
本地部署 LLM 并实现 API 密钥与速率限制，保护你的私有模型不被滥用
Article URL: https://github.com/skorotkiewicz/llm-rt Comments URL: https://news.ycombinator.com/item?id=48298553 Points: 1 # Comments: 1
GitHub Actions日志正暴露LLM密钥，SIEM却毫无察觉，安全盲区需警惕。
You've locked down your AWS credentials. You've got secret scanning on your repos. You rotate your database passwords. But LLM API keys? Those are sit…