Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

I Got Tired of Re-explaining My Codebase to Claude Code Every Session. So I Built llmwiki.

The context-switch tax If you juggle multiple projects across different clients, stacks, and architectures, you know the tax. You switch from the billing API to the notification service and spend 20 minutes re-reading code just to…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




The context-switch tax



If you juggle multiple projects across different clients, stacks, and architectures, you know the tax.



You switch from the billing API to the notification service and spend 20 minutes re-reading code just to remember how it's wired together. You onboard onto a new client's codebase and the architecture lives in someone's head, or in a Confluence page last touched in 2022. You open a new Claude Code session and your AI pair programmer starts from zero, re-discovering the same project structure you explained yesterday.





I hit this wall every week. Eleven engineers on my team at Insly, consulting work on the side, open source projects in my evenings. Every context switch meant either paying the cognitive tax myself or paying it in tokens while the model re-read everything from the top.






Karpathy's "LLM Wiki" idea



A while back, Andrej Karpathy posted a short pattern: instead of letting project knowledge live only in a single session's context, have the LLM maintain a persistent wiki in plain markdown. Scan the project, generate docs, refine over time, feed it back as context when you need it.



Beautiful idea. I sat down, connected the dots with the tools I use every day, and built out a full implementation.



That's llmwiki.






What it does



One command:



​




llmwiki ingest ~/workspace/my-api
​```
{% endraw %}



The output is a structured markdown file with:

- **Domain and architecture** — what the project does, key design decisions
- **Service map** — every microservice with its purpose, stack, and responsibilities
- **Mermaid diagrams** — system architecture and ERDs, rendered natively in GitHub and Obsidian
- **API docs** — extracted from OpenAPI specs
- **Integration map** — databases, queues, external APIs with protocols and auth methods
- **Configuration reference** — env vars, feature flags, runtime modes
- **Auto-generated tags** in YAML front matter ({% raw %}`go, grpc, event-driven, kubernetes`{% endraw %})


![ ](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/wrxfrdwc90rgr8h0cf55.png)

For clients with multiple projects, a separate command generates executive summaries with C4 system landscape diagrams. Mention a service name in any wiki entry and it becomes a clickable cross-reference to that service's page.

Re-running {% raw %}`ingest` doesn'
t regenerate from scratch. The LLM sees the previous entry and refines it. Knowledge compounds with every pass.

## The integrations that make it actually useful

This is where I moved past the original sketch and built out what works in my daily flow.

### Claude Code plugin

After {% raw %}`llmwiki hook install`{% endraw %}, a Stop hook fires at the end of every qualifying session. It reads the transcript, extracts the model's analytical responses, and pipes them to `llmwiki absorb`, storing the insight in persistent memory with zero extra action from me.

Later, I run:

​

```bash
llmwiki materialize my-project
​```



This rebuilds the wiki from accumulated facts, costing ~5-15K tokens vs ~50-100K for a full ingest. Opus 4.7 is not cheap, and the difference shows up on the invoice fast.

### Graymatter memory layer

[Graymatter](https://github.com/angelnicolasc/graymatter) handles the persistent memory. Facts are stored per-project and per-customer, with semantic search using whatever embeddings you have available (Ollama → OpenAI → Anthropic → keyword-only fallback). A 30-day half-life means stale facts decay naturally. Cross-project patterns surface automatically on subsequent runs.

### NanoClaw Discord bot


![ ](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/3rv6m5b52lwxvrsvreez.png)

[NanoClaw](https://nanoclaw.com) is a Discord bot that queries your wiki and answers project questions directly in a channel. Useful when a teammate asks "how does the payment service talk to billing again" at 11pm and you don'
t want to dig through four repos to answer.

## Injecting context into AI sessions

The payoff is here:

​
{% raw %}
```bash
llmwiki context my-project --inject CLAUDE.md
​```
{% endraw %}


This replaces a marker block in your {% raw %}`CLAUDE.md`{% endraw %}:

​
{% raw %}
```markdown
<!-- llmwiki:start -->
... domain, architecture, services, flows ...
<!-- llmwiki:end -->
​```
{% endraw %}


Your AI assistant now starts every session with the full project map already in context. No more "can you look at the codebase and figure out what this does." No more paying the re-explanation tax.

## Who this is for

This is a tool for tech leads who keep 5-10 services in their head and onboard a new junior every other quarter. For consultants juggling clients where each one has a different stack and tribal knowledge living in Slack threads. For anyone working with AI coding assistants across multiple projects daily who wants to move their developer experience from "explaining the architecture again" to "the AI knows as much about this project as I do."

## Design choices worth calling out

- **Plain markdown with YAML front matter.** No proprietary format.
- **No database, no SaaS.** The wiki lives in {% raw %}`~/llmwiki/wiki/`{% endraw %} and syncs with git.
- **Obsidian vault out of the box.** Point Obsidian at the directory and get graph view plus clickable cross-links for free.
- **Ollama backend available** for NDA code and air-gapped environments. Client code doesn't have to leave the machine.
- **Baseline security audit before 1.0.** Path-traversal rejection, fenced LLM prompt pipeline, loopback-only Ollama default, symlink-TOCTOU handling. Full threat model in SECURITY.md.

## Install

​

```bash
curl -fsSL https://raw.githubusercontent.com/emgiezet/llmwiki/main/install.sh | sh
​```



Binaries for macOS (arm64, amd64) and Linux (amd64, arm64). `go install github.com/emgiezet/llmwiki@latest` works too.

## v1.0.0 just shipped

Written in Go, MIT licensed, 72 commits to get here.

**Repo:** https://github.com/emgiezet/llmwiki

If you try it, I'
d love to hear what worked and what didn't. Issues, feedback, PRs all welcome.


1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - I Got Tired of Re-explaining My Codebase to Claude Code Every Session. So I Built llmwiki.
id: c2530b16-c140-4c94-ae85-d90c0cc3c2e6
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "I Got Tired of Re-explaining M" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("I Got Tired of Re-explaining My Codebase")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*I Got Tired of Re-explaining My Codebase*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "I Got Tired of Re-explaining My Codebase"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
🛡️
Exploit PoC Security Sandbox & Payload Analyzer TEXT
Danger Index:25/100 SAFE_ANALYSIS_ONLY
✅ Keine offensichtlich destruktiven Befehle erkannt.
Standard-Analystenprüfung vor Ausführung empfohlen.
Erkannte Gefahrensignaturen (1):
HIGHPAYLOAD_DROPPER:Download-and-Execute Dropper-Muster (Piped Shell-Execution).
curl -fsSL https://raw.githubusercontent
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I Got Tired of Re-explaining My Codebase.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I Got Tired of Re-explaining My Codebase to Claude Code Every Session. So I Built llmwiki.

Thematisch verwandte Begriffe: Tired, Reexplaining, Codebase, Claude · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-88003 | InvoicePlane is a self-hosted open source application for managing invoi…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag