Skip to content
View nanzhipro's full-sized avatar
  • nanzhi
  • HangZhou
  • 11:48 (UTC -12:00)

Block or report nanzhipro

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
nanzhipro/README.md

南师傅 · nanzhi

macOS AI Agent 安全 · Making AI coding agents safe to run.


关于我 / About

我是南师傅。20 年 macOS 系统编程经验,一直在一线写代码。

企业数据安全、终端安全、DLP/EDR 是我的日常工作,但我的公共身份是:

让 AI 编程助手安全地工作。 —— 专注 AI Agent 安全,从资产扫描到系统级行为监控,做有技术深度、有实际价值的事。

这里公开的知识和数据,本质上是我的 OPC 创业过程的实时记录。

关注方向 / Focus

  • macOS AI Agent 安全:AI 编程工具的资产扫描、配置审计、行为监控。基于 EndpointSecurity 系统原语。
  • Vibe Coding 安全:Agent 权限控制、密钥泄露检测、MCP 服务器安全评估、敏感文件暴露面分析。
  • macOS 安全工具开发:EndpointSecurity Framework · System Extension · XPC · 代码签名与分发。

代表项目 / Featured Projects

Project What it is
AppScope 代表作 — macOS Quick Look 安全审查扩展:空格键查看任意 App 的 7 维风险评分、签名、权限、网络、文件系统。Apple 原生实现,零依赖
Aegis macOS Endpoint Security Agent — 目录级访问控制与系统原生安全边界
SnapSort AI-powered screenshot organization app for macOS
TextWeaver 基于文本与 AI 生成精美 HTML / PNG 的内容工作流

现在在做 / Currently Building

  • AgentGuard:macOS AI Agent 实时行为监控工具(基于 ES es_new_descendants_client
  • AI Agent 安全评估服务:为企业提供 AI 编程工具的安全审计和合规报告
  • 内容输出:公众号「四分地」写 AI Agent 安全系列文章

Tech Stack

Swift · Rust · Python · Objective-C · C · Markdown


如果你也在做 AI Agent 安全、macOS 系统编程、安全工具开发,欢迎交流。

Pinned Loading

  1. Karpathy-llm-wiki-bootstrap-skill Karpathy-llm-wiki-bootstrap-skill Public

    Installable skill + working example for building persistent, LLM-maintained Markdown wikis, based on Karpathy’s original LLM Wiki idea.

    Python 106 20

  2. karpathy-wiki karpathy-wiki Public

    its original source materials come from Karpathy's X posts and important talks.

    4 1

  3. vibe-coding-breath vibe-coding-breath Public

    AI is thinking, you are breathing

    1

  4. phase-contract-workflow-skill phase-contract-workflow-skill Public

    把 AI 长任务的稳定性从模型记忆迁到仓库文件,让大型项目分阶段执行、可恢复、可审计

    Ruby 3

  5. Aegis Aegis Public

    Aegis macOS Endpoint Security Agent

    Swift 1

  6. AppScope AppScope Public

    Press Space on any macOS app to see its security — 7-dimension risk score, signing, permissions, network, filesystem.

    Swift 1