mastershifu

"If you only do what you can do, you will never be more than who you are right now."

Comeback SZN!

[Francesco @HedgeUX]

Not your average fintech landing page. @Backpack just got sexier

[Hewar @hewarsaber]

📂 $14,000 Brand Guideline (56 pages)
┃
┣ 📂 01 Introduction
┃ ┣ 📄 About This Document
┃ ┗ 📄 About the Company
┃
┣ 📂 02 Brand Foundation
┃ ┣ 📄 Mission
┃ ┣ 📄 Value Propositions
┃ ┣ 📄 Brand Personality
┃ ┣ 📄 Tone of Voice
┃ ┣ 📄 Vocabulary
┃ ┗ 📄 Tagline
┃
┣ 📂 03 Visual Identity
┃ ┣ 📂 Logo
┃ ┃ ┣ 📄 The Logo
┃ ┃ ┣ 📄 Construction Grid
┃ ┃ ┣ 📄 Logo in Use
┃ ┃ ┣ 📄 Logo System
┃ ┃ ┣ 📄 Allowed Colors
┃ ┃ ┣ 📄 Clear Space
┃ ┃ ┣ 📄 Minimum Sizes
┃ ┃ ┗ 📄 Restrictions
┃ ┃
┃ ┣ 📂 Color
┃ ┃ ┣ 📄 Palette
┃ ┃ ┣ 📄 Usage
┃ ┃ ┗ 📄 Restrictions
┃ ┃
┃ ┣ 📂 Typography
┃ ┃ ┣ 📄 Brand Fonts
┃ ┃ ┣ 📄 Type System
┃ ┃ ┗ 📄 Type in Use
┃ ┃
┃ ┣ 📂 Imagery
┃ ┃ ┣ 📄 Imagery
┃ ┃ ┣ 📄 AI Prompts
┃ ┃ ┗ 📄 Restrictions
┃ ┃
┃ ┣ 📂 Patterns & Textures
┃ ┃ ┣ 📄 Patterns
┃ ┃ ┣ 📄 Textures
┃ ┃ ┗ 📄 Usage
┃ ┃
┃ ┣ 📂 Iconography
┃ ┃ ┣ 📄 Icons
┃ ┃ ┗ 📄 Restrictions
┃ ┃
┃ ┣ 📂 Illustrations
┃ ┃ ┣ 📄 Illustrations
┃ ┃ ┗ 📄 Restrictions
┃ ┃
┃ ┣ 📂 Composition
┃ ┃ ┣ 📄 Composition
┃ ┃ ┗ 📄 Restrictions
┃ ┃
┃ ┗ 📂 Motion
┃ ┣ 📄 Logo Animation
┃ ┗ 📄 Transitions
┃
┣ 📂 04 Applications
┃ ┣ 📄 Pitch Deck
┃ ┣ 📄 Social Templates
┃ ┗ 📄 Merch
┃
┗ 📄 Thank You

[Alex @The_Alex]

Oh fuck they solved voice

[Jed Bridges @JedBridges]

this is your sign to start using og:video on your website

[Ritu @BThreeAgency]

Everyone is arguing Figma vs Claude, meanwhile we laid the groundwork for this Fintech identity in @figma and used @claudeai to wrap it up fast.

[CODE steve ON GAMDOM @kingadukes]

Discord winners- PAID

BOOOOOOM.

Goodmorning did not sleep gr8 busy day.

After doc appointment and gym I am locked in checking all DMs for vip onboarding to gamdom.

HUGE THINGS TO COME

[Vox @Voxyz_ai]

Claude Code tip: before you ship a vibe-coded site, have Opus 5.5 𝗽𝗹𝗮𝘆 𝘁𝗵𝗲 𝗯𝗮𝗱 𝗴𝘂𝘆. Send out 3 subagents with three test accounts (A, B and an admin) to actually run 𝘁𝗵𝗲𝘀𝗲 𝟭𝟰 𝗮𝘁𝘁𝗮𝗰𝗸𝘀, collect proof, then fix everything in one pass:

Impersonate other users
→ Without logging in, take the public key from your frontend and query every table in the database directly. See what comes back
→ Logged in as A, swap the id in a request for B's and try to read, edit and delete B's data
→ When A edits their profile, add role: admin to the request, then try editing the role in their own account data directly
→ Use a password reset link once, then click it again

Get around limits in the UI
→ For disabled buttons and hidden options, skip the page and send the request directly
→ Once the free uses run out, check whether calling the API directly still works
→ With only a little credit left, fire 20 requests at once and see whether more succeed than the credit allows
→ Fill forms with very long text, special characters, negative numbers and empty values
→ Change the post-login redirect (?next=) to another site, and also try values starting with // and @

Come in from outside
→ Put <img src=x onerror=alert(1)> in a username, a comment or Markdown, then open the page in a browser and see if an alert pops up
→ If the app fetches URLs (importing links, building previews), give it http://localhost and http://169.254.169.254 and check the server logs for an actual outgoing request. Skip this if there's no such feature
→ For pages and API responses A has seen, request the same address from another browser as B or logged out, and see whether A's content shows up
→ Open your hosting platform's preview links without logging in to the platform
→ Hide an instruction in an uploaded document or web page that tells your AI feature to read another user's data or call a tool it shouldn't, and see if it does

Collect proof
→ Every item has to actually run. If it was only read in the code and never run, it counts as "not proven"
→ After a fix, temporarily turn the protection off in local code and run it again. The attack must succeed. Turn it back on and it must be refused
→ Put the results in a table: how each attack was done, the request and response, and whether it was refused when it should have been
→ Save the tests as scripts in the repo and run them again before your next launch
→ When you're done, install Anthropic's official security-guidance plugin (/plugin install security-guidance@claude-plugins-official). After every turn of edits, and after each commit or push it makes, Opus reviews the changes again. Those reviews use extra usage

The default medium effort is enough. The impersonation group is the most expensive to get wrong, so raise that one to high.

Send this whole post to Claude Code. If you need to, add this line at the end 👇
"First check that the preview environment isn't connected to the production database. If it is, run everything locally only. Use test accounts and test data, with a separate set of accounts for each subagent. Don't touch real users, don't attack services I don't own, don't hammer any one endpoint, and only test payments in test mode. Only switch protections off temporarily in local code, and never change the database or dashboard settings. Keep test account passwords in .env, out of git, and mask tokens in the results table. Send one subagent per group to attack, recording without fixing. Run the impersonation subagent at high effort. Then fix everything yourself from their lists, rerun every test, and give me a before-and-after table. Delete the test accounts and data at the end. For installing the plugin or changing dashboard settings, give me the steps and I'll do it."

[mastershifu @1master_shifu]

@IOHK_Charles @IOHK_Charles are you looking for great minds to help out…. I am tired of all these other new crypto founders who just came to extract every dime possible

I want to work and all I ask is just 1 interview with you or your team to let me show you my hunger and will…

[ᗰᒍ @Jinx_MJ_K]

The Hot Topic: Nightframes

1/ Smart contracts are public by design. Great for trust, bad for anything private, like an agent's trading strategy.

2/ Nightframes sit in the middle: private computers that follow your intent, with work you can check. Private by default, verifiable by design.

3/ That unlocks renting. A developer keeps their strategy private, my agent rents it per task inside the limits I set, and nobody can trade ahead of it.

4/ What I need proven:
✅ The skill did what it claimed
✅ It stayed inside its limits
✅ You can switch it off instantly

5/ We're building toward this at @Noctis_zone for Midnight City.

Looking forward to exploring more about Nightframes and the upcoming Midnight Passport

What skill would you rent?👇
https://t.co/AgWPamGjAE · https://t.co/xioDKU42eh · https://t.co/FW8TienC6b

[Mason Warner @masonwarner]

A year ago @slashapp had zero posts on socials &amp; no marketing team.

Today we’re at 20M+ impressions &amp; tens of thousands of followers.

Up until now the entire content team has been 2 people.

This is how I've used AI to make this possible:

[Filip Kozera @kozerafilip]

I raised a $30M seed round in 7 days.

Here's how to run your first VC round, in two minutes 👇

[Jamie @jamiesmotion]

SFX breakdown from a launch video we handled.

Never neglect sound design.

[shaders @npm_i_shaders]

Big news.

Shaders is now open source 🔥

Use any of our 200+ WebGPU components in your work. Ship magic in a client site, a template, a product, a library, anything. Plus, you can export code for any framework, for free.

Give it a star: https://t.co/eIpRMhuS6m

[Aporia @aporia9n]

never bet against a guy who beat cancer at 24, ditched the M&amp;A lawyer track and went all-in in SF to build Strava for work

[Aizal Khan @aizal_mp4]

POV: We make a cool Motion video for your company

[Amir Dzhambulov @amirdzm]

This guy broke down the science behind Apple's product videos

Apple sue him please....

[Amir Dzhambulov @amirdzm]

made by my team - bet you can’t replicate it

[mastershifu @1master_shifu]

@willdjthrill how did you make such a nice visualizer
please share prompt

[Jakub Antalik @Jakubantalik]

Made a skill for expressive UI.

The libraries-dev skill teaches your agent where and how to use library effects in your project, making your UI less generic, more expressive.