Midnight Snack Club

A GitHub-hosted hands-on workshop repository for wiring AI-powered UI verification workflows. It covers a podcast landing-page challenge with easy and medium paths, using a Chrome extension for deterministic visual annotation, a coding agent, and the Nova Act SDK to find and fix rendered UI discrepancies and verify design expectations and user flows. The annotation workflow lets participants select elements, draw on a page, or drop pins and export structured feedback; the verification workflow crawls a site, checks the resulting interface, and generates a report. The repository includes workshop instructions, setup prerequisites, integration code, and a Bee Wearable reverse proxy that surfaces completed-conversation feedback as sidebar cards with Apply and Dismiss actions.

BurritoBot is a deliberately permissive demo chat agent and burrito-ordering application used in the Unleash an Agent, Watch It Burn security workshop. Running as part of a Kubernetes-based internal developer platform, it uses kagent on Amazon Bedrock and can reach cluster operations and other tools, including listing pods, deploying images, reading files and secrets, and calling MCP tools. The workshop has participants repeat attacks against the agent while adding Kubernetes controls and agent-specific guardrails for its inputs, outputs, budget, tools, and permissions.

Vulnerable AI Student Assistant is a deliberately insecure AI chatbot application for testing and capture-the-flag exercises. It uses a Python FastAPI backend, a plain HTML/CSS/JavaScript chat frontend, and Gemini to answer questions about mock students, their names, and enrolled classes. The backend reads the complete student database, including grades, into the prompt while a system instruction tells the model not to disclose grades, allowing tests of prompt-based data leakage, prompt injection, and variable model behavior. The repository includes example attacks and points to a separate project containing mitigations.

WorkshopWaitingRoom is a registration website for the Total Recall · New York workshop on building an autonomous financial-fraud agent harness. It collects a participant's GitHub handle and, through the GitHub API, provides write access to the `jasperan-org/financial-fraud-agent-harness-workshop-lightweight` repository, which participants run in GitHub Codespaces. The workshop covers agent loops, short- and long-term memory, context engineering, toolbox and skillbox patterns, skill distillation, continual learning, instruction hierarchies, hybrid search, and custom harnesses for flagging suspicious bank transactions.

Barista 9000 is an interactive coffee-ordering CLI from PayPal's Cafe repository, used as a workshop challenge for adapting terminal applications to AI agents. It presents prompts, arrow-key choices, and follow-up questions whose available options can depend on earlier answers or live API responses. The workshop discusses connecting an agent through tmux sessions that send keys and capture terminal state, IPC side channels that expose structured JSON, and context injection that makes choices and constraints explicit.