I'm Cole. I build open-source tools and fix bugs in other people's projects where correctness matters.

The tools: skillxray scans an AI agent skill for prompt injection and leaked secrets before you install it. noslop catches the AI tells in your writing, deterministically, in 16 languages. framewall finds prompt injection hiding in screenshots before a vision agent acts on them. hopandhaul finds you a cheaper way to fly. There are fifteen in all, almost every one pure standard library with zero dependencies, most with a live demo you can run in your browser before you decide to care.

The upstream work: forty-six fixes merged so far across YARA, osquery, proxmark3, rtl_433, Symfony, Monero GUI, and a few dozen others. A heap out-of-bounds read parsing RFID dumps, digest buffers that were never null-terminated, an OAuth open-redirect in a medical-records system. The kind of bug that sits quietly until it matters.

All of it is free and stays free. Sponsorship buys the time that keeps it that way: triaging issues, fixing what breaks, adding the rules and formats people ask for. Every sponsor gets a permanent line in the SUPPORTERS file, higher tiers get their issues looked at first or their name in a README, and the one-time Sponsor a Fix tier points me at whatever bug you want dead.

If one of these tools caught something for you, this is the way to say so.