Luisa Lima luisalima

name	check-before-install
description	Check an npm or PyPI package BEFORE installing it (exists, real usage, age, install scripts, known advisories and malware). Use whenever you are about to run npm/pnpm/yarn/bun install, pip/uv/poetry add, or add a new dependency or version to a manifest. Uses looot if it is available, public registry APIs if not.

Check before install

npm audit, osv-scanner and friends look at packages that are already in your lockfile. Install scripts run before that. This skill checks a package before it is installed.

no-own-email: a Claude Code hook

Blocks tool calls that would send your own email address off the machine: in a User-Agent, a URL, a header, a request body, a web/MCP tool call or a published page. Context: anthropics/claude-code#107757.

Reads your address at run time from ~/.claude.json (the signed-in account), git config --global user.email and optional WP_PRIVATE_EMAILS (comma-separated). No address is written in the file.
Matches any case, %40, [at], (at) and "name at domain".
Shell commands are blocked only when they also reach the network (curl, wget, http(s)://, urllib, requests,

Pages that persuade agents: queries and pipeline

Companion to the field note Dear agent: the pages that ask nicely.

Two small experiments looking for web pages that address AI agents directly, either with instructions (prompt injection) or with persuasion (social engineering). Everything runs through looot: Exa search, page fetch, and an LLM labeler via OpenRouter.

Files

File	What it is

Spec — `docs/tasks/` folder for project tracking

A flat, file-based system for tracking both work items and open questions in a single folder, using markdown + YAML frontmatter. Designed for small/medium projects where a Linear/Jira board would be overkill but informal TODOs are not enough.

Reproduce the structure exactly as described below. Write all user-facing text (README, index, task bodies) in the same language as the rest of the project's documentation — do not default to English if the project uses another language.

1. Folder layout

Agent Operating Policy

1. TDD discipline — strict order

For any behavior with a clear, assertable contract (bug fixes, business logic, API or CLI behavior):

Write the test that asserts the intent of the behavior.
Run the suite. Confirm the new test fails — for the right reason (not a typo, import error, or unrelated failure).

Keybase proof

I hereby claim:

I am luisalima on github.
I am luisalima (https://keybase.io/luisalima) on keybase.
I have a public key ASDJhuwOZQX6RCcbovR-py-NVzwoYeO0El1x2XJD_RTspQo

To claim this, I am signing this object:

	"""
	The most atomic way to train and inference a GPT in pure, dependency-free Python.
	This file is the complete algorithm.
	Everything else is just efficiency.

	@karpathy
	"""

	import os # os.path.exists
	import math # math.log, math.exp

	#!/bin/bash

	export HOSTNAME='***'
	TOOLS="tmux"
	COUNTRY="**"
	SSID="***"

	function change_hostname {
	sudo sh -c "echo $HOSTNAME > /etc/hostname"
	sudo sed -i "s/raspberrypi/$HOSTNAME/g" /etc/hosts

	# left shift operator is the equivalent of multiplying by a power of 2.
	b = 1
	(b << 1).to_s(2) # "10", equivalent to multiplying by 2^1
	(b << 4).to_s(2) # "10000", equivalent to multiplying by 2^4

	# right shift operator is the equivalent to integer divisin by 2.
	b = 32
	b.to_s(2) # "100000"
	(b >> 1).to_s(2) # "10000", equivalent to dividing by 2
	(b>>3).to_s(2) # "100", equivalent to dividing by 2^3

	Use `log` from handlebars v3 onwards:

	http://stackoverflow.com/a/32218903