Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

An outreach kit for solo founders whose drafts can't hallucinate

An outreach kit for solo founders whose drafts can't hallucinate Short version: five Claude skills, a canonical state file template, and a Python inbox agent that watches Gmail, GitHub, and dev.to for replies. End-to-end pipeline from…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




An outreach kit for solo founders whose drafts can't hallucinate



Short version: five Claude skills, a canonical state file template, and a Python inbox agent that watches Gmail, GitHub, and dev.to for replies. End-to-end pipeline from discovery through logged sends. Self-hosted. $5/mo subscription.



The thing that's different about this kit isn't the automation. It's the discipline the automation enforces.






Every send requires a verified specific hook



The drafting skill asks for the personalization detail before it'll write the message. If the detail is vague, it asks again. Generic openers are blocked at the input layer.




Required inputs:
- candidate_name
- product_summary
- specific_detail <- the verified hook from the actual source
- channel
- send_type (FIRST_CONTACT or CHASE_1)






No specific_detail → no draft. The skill won't fabricate one.






Every claim runs through a hallucination filter



You write your allowed claims and forbidden claims patterns at setup. The drafter scans every output against them. The first hallucinated metric flags the whole draft and proposes a fix using only allowed claims.



This is Claude's hallucination guardrail. The LLM is the author of every draft and could fabricate metrics that sound plausible. The filter prevents that. Drafts can only use facts you've verified.



Example output when the filter trips:




=== BLUFF FILTER REPORT ===
Status: FLAGGED

Violation: "we've seen agents pay $X per query for this kind of data"

Rules triggered:
- Forbidden phrase: "we've seen" (implies customer data you don't have)
- Fabricated price: $X is not in allowed_claims
- Fabricated volume: implies a customer base you aren't operating

Proposed replacement (uses only allowed claims):
"[your verified price] — volume's still low, but the rails work"






The replacement is shorter and weaker-sounding than the bluff. That's the point. A bluff that breaks your credibility costs more than a true claim that lands flat.






Every action goes through a Python script with preservation checks



The state file (validation_state.md) is append-only. Structured sections: Sent Log, Active Conversations, Pattern Notes, Closed-loop. Every send, reply, chase, and close-loop is mediated by a script that verifies the file grew the way it should and aborts before writing if anything looks wrong.




  • Verifies the file size increased for append-only events

  • Verifies the previous tail anchor line is still present

  • Verifies all existing Pattern Note subsections survived

  • Verifies the row delta matches the event type

  • Aborts on any failure — file on disk is unchanged



Built after watching a naive LLM Edit silently truncate the trailing section of a long markdown file. Never again.






The inbox agent: multi-channel approval handshake



Watches Gmail (via OAuth send), GitHub (via PAT), and dev.to (via API key). Polls each channel on a configurable cadence. New reply comes in → drafts a response → pushes to Telegram with Send/Edit/Skip buttons.



You tap Send: the reply goes out through the channel's real API.

You tap Edit: type your version, it sends as-is.

You tap Skip: nothing happens.



Telegram is the v1 approval surface. The architecture is built to accept other surfaces.






What this is not



This is not Apollo. There is no contact database. There is no "give me 50 founders matching X." Discovery runs against live public posts at runtime, not a cached DB.



It is not marketing automation. It does not blast. It does not "scale personalization" by templating someone's first name.



If you're a solo founder running cold outreach to other founders or operators and you want the discipline of an institutional sales motion without the institutional headcount, this is for you.



If you want to send 1000 emails a day to a scraped list, this kit will actively work against you.






Pricing



$5.00 USD per month. Founding 100 subscribers are locked at $5/mo for life as long as their subscription stays active.



Each subsequent 100 active subscribers, the price goes up $5/mo for new sign-ups. Next cohort $10, then $15, etc. Founding members keep their lock.



No refunds. Once you have access to the code, you have access. We can't un-show it.






How to subscribe




  1. Pay via the Stripe payment link below.

  2. Email me your GitHub username ([email protected] or reply to your Stripe confirmation).

  3. You'll receive a GitHub invitation to collaborate on the private repo within 24 hours.

  4. Accept the invitation, clone the repo, drop the skills into your Claude environment.



Full setup walkthrough lives in the repo's README.






Try it





If you try it and have thoughts, tell me. Especially if there's a feature you'd pay more for — that's the signal I'm watching for in the first 30 days.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
1 Warnungen
title: Detect Exploitation - An outreach kit for solo founders whose drafts can't hallucinate
id: 79e4861f-dfcf-4eca-99f2-4674debca708
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-27
logsource:
  category: network_connection
  product: any
detection:
  selection:
      DestinationHostname:
        - 'dev.to'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-27"
        description = "YARA Signature for "
    strings:
        $str = "An outreach kit for solo found" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
(dest_host="dev.to")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
destination.domain: ("dev.to") and event.category: "network"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where DestinationHostName in ("dev.to")
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

IoC Intelligence (1 Indikatoren)
dev[.]to
CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Analyse für identifizierte Bedrohung auf Basis von Live-CTI (ENISA EUVD): CVSS 0.0 · EPSS 0.0% · CISA KEV: nein. Handlungsableitung aus den verlinkten Hersteller-Quellen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten An outreach kit for solo founders whose drafts can't hallucinate

Thematisch verwandte Begriffe: outreach, solo, founders, whose · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

💬 Kommentare werden geladen…
Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100739 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag