← Back to context

Comment by TechSquidTV

5 hours ago

I have been developing an OpenClaw-like agent that automates exactly this type of attack.

Why? This is just regex search and there are plenty of tools that do this perfectly fine.

  • Have to agree with _pdp_ on this one. I just don't see the need for an LLM agent to do a recursive grep for API keys in public repos.

    Not saying people shouldn't build these tools, but the use case is lost on me.

    It feels like the industry is in this weird phase of trying to replace 30-year-old, perfectly optimized shell utilities with multi-shot agent workflows that literally cost money to run. A basic Python script with a regex matcher and the GitHub API will find these keys faster, cheaper, and more reliably.