Become a sponsor to Cole Munz

I'm Cole. I build open-source tools and fix bugs in other people's projects where correctness matters.

The tools: skillxray scans an AI agent skill for prompt injection and leaked secrets before you install it. framewall finds prompt injection hiding in screenshots before a vision agent acts on them. hopandhaul finds you a cheaper way to fly. There are fifteen in all, almost every one pure standard library with zero dependencies, most with a live demo you can run in your browser before you decide to care.

The upstream work: forty-six fixes merged so far across YARA, osquery, proxmark3, rtl_433, Symfony, Monero GUI, and a few dozen others. A heap out-of-bounds read parsing RFID dumps, digest buffers that were never null-terminated, an OAuth open-redirect in a medical-records system. The kind of bug that sits quietly until it matters.

All of it is free and stays free. Sponsorship buys the time that keeps it that way: triaging issues, fixing what breaks, adding the rules and formats people ask for. Every sponsor gets a permanent line in the SUPPORTERS file, higher tiers get their issues looked at first or their name in a README, and the one-time Sponsor a Fix tier points me at whatever bug you want dead.

If one of these tools caught something for you, this is the way to say so.