cyrus.is/building

Things I'm working on.

• Scrutineer now audits MCP servers — tested against the 100 most popular
  My code-review toolkit (formerly vibecheck) is now Scrutineer — pip install scrutineer — and it has a new command, /scrutineer-mcp, that audits an MCP server before you ever run it. I ran it against the 100 most-installed servers to prove it works; none came through clean, mostly because nobody pins versions.
• A Budget
  I wanted to see where my money actually goes without handing my bank logins to a third party. So I built a Sankey diagram that runs entirely in your browser.
• I Tested AI Code Review Against Human-Written Review Skills. Neither Won.
  50+ reviews across 8 components. Generated skills found a P1 data loss bug the humans missed. Humans caught edge cases the AI never would. The interesting part is why.