Compare commits

...

100 Commits

Author SHA1 Message Date
jad2121
1201184257 trying something out as a new branch 2024-03-05 21:01:07 -05:00
jad2121
b84451114c fixed something 2024-03-05 20:27:05 -05:00
jad2121
a5d3d71b9d changed more documentation 2024-03-05 20:14:09 -05:00
jad2121
a655e30226 added some stuff 2024-03-05 20:12:55 -05:00
jad2121
d37dc4565c added support for claude. choose --claude. make sure to run --setup again to enter your claude api key 2024-03-05 20:10:35 -05:00
jad2121
6c7143dd51 added yet another error message 2024-03-05 17:51:01 -05:00
Daniel Miessler
2b6cb21e35 Updated readme to add refresh note. 2024-03-05 12:58:00 -08:00
Jonathan Dunn
39c4636148 updated readme 2024-03-05 15:29:46 -05:00
Jonathan Dunn
38c09afc85 changed an error message 2024-03-05 15:26:59 -05:00
Jonathan Dunn
a12d140635 fixed the stuff that was broken 2024-03-05 14:48:07 -05:00
Jonathan Dunn
cde7952f80 fixed readme 2024-03-05 14:44:25 -05:00
Jonathan Dunn
0ce5ed24c2 Added support for local models 2024-03-05 14:43:34 -05:00
jad2121
37efb69283 just a little faster now 2024-03-05 05:42:02 -05:00
jad2121
b838b3dea2 made it faster 2024-03-05 05:37:16 -05:00
jad2121
330df982b1 updated readme 2024-03-04 17:39:47 -05:00
jad2121
295d8d53f6 updated agents 2024-03-04 17:09:25 -05:00
Daniel Miessler
54406181b4 Updated summarize_git_changes. 2024-03-03 18:24:32 -08:00
Daniel Miessler
3a2a1a3fc3 Updated summarize_git_changes. 2024-03-03 18:13:16 -08:00
Daniel Miessler
a2b6988a3d Updated extract_ideas. 2024-03-03 18:09:36 -08:00
Daniel Miessler
4d6cf4e26a Updated extract_ideas. 2024-03-03 13:27:36 -08:00
Daniel Miessler
0abc44f8ce Added extract_ideas. 2024-03-03 13:24:18 -08:00
Daniel Miessler
64042d0d58 Updated summarize_git_changes. 2024-03-03 12:56:34 -08:00
Daniel Miessler
47391db129 Updated summarize_git_changes. 2024-03-03 12:54:51 -08:00
Daniel Miessler
5ebbfca16b Added summarize_git_changes. 2024-03-03 12:47:39 -08:00
jad2121
15cdea3bee Merge remote-tracking branch 'origin/main'
fixed agents
2024-03-03 15:21:03 -05:00
jad2121
38a3539a6e fixed agents 2024-03-03 15:19:10 -05:00
Daniel Miessler
4107d514dd Added new pattern called create_command
Add New "create_command" Pattern
2024-03-03 12:13:55 -08:00
jad2121
0f3ae3b5ce Merge remote-tracking branch 'origin/main'
fixed things
2024-03-03 15:11:32 -05:00
jad2121
8c0bfc9e95 fixed yt 2024-03-03 14:09:02 -05:00
Daniel Miessler
72189c9bf6 Merge pull request #151 from tomi-font/main
Fix the cat.
2024-03-03 11:04:02 -08:00
jad2121
914f6b46c3 added yt and ts to poetry and to config in setup.sh 2024-03-03 10:57:49 -05:00
jad2121
aa33795f6a updated readme 2024-03-03 09:19:01 -05:00
jad2121
5efc720e29 updated readme 2024-03-03 09:17:15 -05:00
jad2121
0ab8052c69 added transcription 2024-03-03 08:42:40 -05:00
jad2121
70356b34c6 added vm dependencies to poetry 2024-03-03 08:11:21 -05:00
jad2121
3264c7a389 Merge branch 'agents'
added agents functionality
2024-03-03 08:06:56 -05:00
Tomi
30d77499ec Fix the cat. 2024-03-03 08:57:00 +02:00
Daniel Miessler
c799114c5e Updated client documentation. 2024-03-02 17:24:53 -08:00
Daniel Miessler
c58a6c8c08 Removed default context file. 2024-03-02 17:23:15 -08:00
Daniel Miessler
e40c689d79 Added MarkMap visualization. 2024-03-02 17:12:19 -08:00
Daniel Miessler
c16d9e6b47 Added MarkMap visualization. 2024-03-02 17:09:32 -08:00
Daniel Miessler
8bbed7f488 Added MarkMap visualization. 2024-03-02 17:08:35 -08:00
Daniel Miessler
be841f0a1f Updated visualizations. 2024-03-02 17:02:00 -08:00
Daniel Miessler
731924031d Updated visualizations. 2024-03-02 16:58:52 -08:00
Daniel Miessler
d772caf8c8 Updated visualizations. 2024-03-02 16:54:27 -08:00
Daniel Miessler
0d04a9eb70 Updated README.md. 2024-03-02 15:56:14 -08:00
Daniel Miessler
62e7f23727 Added helpers README.md. 2024-03-02 15:50:36 -08:00
Daniel Miessler
3398e618d8 Removed visualize. 2024-03-02 15:47:07 -08:00
Daniel Miessler
11402dde44 Renamed vm to yt, for youtube. 2024-03-02 15:44:33 -08:00
Daniel Miessler
37f5587a81 removed temp plot. 2024-03-02 15:43:15 -08:00
Daniel Miessler
a802f844de Updated create_keynote. 2024-03-01 14:12:56 -08:00
Daniel Miessler
1f6b69d2fa Added slide creator. 2024-03-01 14:10:09 -08:00
Daniel Miessler
dcdf356776 Added slide creator. 2024-03-01 14:02:28 -08:00
Daniel Miessler
ad7c7d0f00 Added slide creator. 2024-03-01 14:00:54 -08:00
Daniel Miessler
7e86e88846 Added slide creator. 2024-03-01 13:56:30 -08:00
Daniel Miessler
3eecf952d2 Added slide creator. 2024-03-01 13:55:04 -08:00
Daniel Miessler
19f6c48795 Added slide creator. 2024-03-01 13:52:45 -08:00
Daniel Miessler
8b4eec90a4 Added create_threat_model. 2024-03-01 13:02:02 -08:00
Daniel Miessler
17ba26c3f8 Added create_threat_model. 2024-03-01 12:58:15 -08:00
Daniel Miessler
d381f1fd92 Added create_threat_model. 2024-03-01 12:48:57 -08:00
Daniel Miessler
527d353e23 Updated create_visualization. 2024-02-29 20:03:53 -08:00
Daniel Miessler
949daf4a5a Updated create_visualization. 2024-02-29 20:02:42 -08:00
Daniel Miessler
edb1597d07 Updated create_visualization. 2024-02-29 20:01:45 -08:00
Daniel Miessler
cf8ca0d115 Updated create_visualization. 2024-02-29 20:00:02 -08:00
Daniel Miessler
901de01cc1 Updated create_visualization. 2024-02-29 19:54:06 -08:00
Daniel Miessler
391c908848 Updated create_visualization. 2024-02-29 19:50:45 -08:00
Daniel Miessler
f9d2f45e6b Updated create_visualization. 2024-02-29 19:47:51 -08:00
Daniel Miessler
88f11b8cf6 Updated create_visualization. 2024-02-29 19:45:22 -08:00
Daniel Miessler
c40ab79539 Updated create_visualization. 2024-02-29 19:37:12 -08:00
Daniel Miessler
1f7a61e180 Updated create_visualization. 2024-02-29 19:23:32 -08:00
Daniel Miessler
3b70b3e2d5 Updated create_visualization. 2024-02-29 19:22:16 -08:00
Daniel Miessler
d068e07207 Updated pattern. 2024-02-29 19:18:48 -08:00
Daniel Miessler
1393b59567 Updated pattern. 2024-02-29 19:11:29 -08:00
Daniel Miessler
2ca88c2261 Updated pattern. 2024-02-29 19:06:42 -08:00
Daniel Miessler
3cf423a8be Updated pattern. 2024-02-29 19:05:53 -08:00
Daniel Miessler
5e30b1ee01 Updated pattern. 2024-02-29 19:04:22 -08:00
Daniel Miessler
8ba8871242 Updated pattern. 2024-02-29 19:03:35 -08:00
Daniel Miessler
c0858317c9 Updated pattern. 2024-02-29 19:02:58 -08:00
Daniel Miessler
b139802132 Updated pattern. 2024-02-29 18:57:46 -08:00
Daniel Miessler
19b7fd6c89 Added create_visualization. 2024-02-29 18:53:55 -08:00
Daniel Miessler
164567dac2 Updated hidden messages Pattern. 2024-02-29 18:16:06 -08:00
Daniel Miessler
21cfa42eba Updated hidden messages Pattern. 2024-02-29 13:22:19 -08:00
Daniel Miessler
af64c61050 Updated hidden messages Pattern. 2024-02-29 13:20:45 -08:00
Daniel Miessler
f2cbb13ea3 Updated hidden messages Pattern. 2024-02-29 13:17:59 -08:00
Daniel Miessler
2af721c385 Updated hidden messages Pattern. 2024-02-29 13:15:21 -08:00
Daniel Miessler
4988e3b23f Updated hidden messages Pattern. 2024-02-29 13:12:44 -08:00
Daniel Miessler
a53b0d5938 Updated hidden messages Pattern. 2024-02-29 13:09:43 -08:00
Daniel Miessler
9d99ec4a88 Updated hidden messages Pattern. 2024-02-29 13:06:30 -08:00
Daniel Miessler
31005f37d3 Updated hidden messages Pattern. 2024-02-29 12:59:34 -08:00
Daniel Miessler
d3f53e5708 Updated hidden messages Pattern. 2024-02-29 12:51:47 -08:00
Daniel Miessler
6566772097 Updated hidden messages Pattern. 2024-02-29 12:41:09 -08:00
Daniel Miessler
aa36ee3a48 Updated hidden messages Pattern. 2024-02-29 09:47:24 -08:00
Daniel Miessler
bbda4db9a7 Updated hidden messages Pattern. 2024-02-29 09:38:41 -08:00
Daniel Miessler
4112f7db5c Updated hidden messages Pattern. 2024-02-29 09:33:55 -08:00
Daniel Miessler
771422362f Updated hidden messages Pattern. 2024-02-29 09:31:32 -08:00
Daniel Miessler
4eb3b45764 Updated hidden messages Pattern. 2024-02-29 09:25:51 -08:00
Daniel Miessler
559e11c49b Updated hidden messages Pattern. 2024-02-29 09:20:32 -08:00
Daniel Miessler
02e06413d7 Added find_hidden_message Pattern. 2024-02-28 15:07:56 -05:00
Luke Wegryn
0eb828e7db Updated typo in README
on-behalf-of: pensivesecurity luke@pensivesecurity.io
2024-02-27 21:08:33 -05:00
Luke Wegryn
4b1b76d7ca Added create_command pattern
on-behalf-of: pensivesecurity luke@pensivesecurity.io
2024-02-27 21:02:03 -05:00
24 changed files with 1737 additions and 490 deletions

View File

@@ -47,6 +47,9 @@
<br />
> [!NOTE]
> We are improving the project so quickly that you should update often. That means `git pull; ./setup.sh` in the main directory, and then sourcing your shell files and/or restarting your terminal.
## Introduction video
<div align="center">
@@ -194,25 +197,39 @@ Once you have it all set up, here's how to use it.
`fabric -h`
```bash
fabric [-h] [--text TEXT] [--copy] [--output [OUTPUT]] [--stream] [--list]
[--update] [--pattern PATTERN] [--setup]
fabric [-h] [--text TEXT] [--copy] [--agents {trip_planner,ApiKeys}]
[--output [OUTPUT]] [--stream] [--list] [--update]
[--pattern PATTERN] [--setup] [--local] [--claude]
[--model MODEL] [--listmodels] [--context]
An open-source framework for augmenting humans using AI.
An open source framework for augmenting humans using AI.
options:
-h, --help show this help message and exit
--text TEXT, -t TEXT Text to extract summary from
--copy, -c Copy the response to the clipboard
--copy, -C Copy the response to the clipboard
--agents {trip_planner,ApiKeys}, -a {trip_planner,ApiKeys}
Use an AI agent to help you with a task. Acceptable
values are 'trip_planner' or 'ApiKeys'. This option
cannot be used with any other flag.
--output [OUTPUT], -o [OUTPUT]
Save the response to a file
--stream, -s Use this option if you want to see the results in realtime.
NOTE: You will not be able to pipe the output into another
command.
--stream, -s Use this option if you want to see the results in
realtime. NOTE: You will not be able to pipe the
output into another command.
--list, -l List available patterns
--update, -u Update patterns
--pattern PATTERN, -p PATTERN
The pattern (prompt) to use
--setup Set up your fabric instance
--local, -L Use local LLM. Default is llama2
--claude Use Claude AI
--model MODEL, -m MODEL
Select the model to use (GPT-4 by default for chatGPT
and llama2 for Ollama)
--listmodels List all available models
--context, -c Use Context file (context.md) to add context to your
pattern
```
#### Example commands
@@ -287,7 +304,7 @@ Once you're set up, you can do things like:
```bash
# Take any idea from `stdin` and send it to the `/write_essay` API!
cat "An idea that coding is like speaking with rules." | write_essay
echo "An idea that coding is like speaking with rules." | write_essay
```
### Directly calling Patterns

52
helpers/README.md Normal file
View File

@@ -0,0 +1,52 @@
# Fabric Helpers
These are helper tools to work with Fabric. Examples include things like getting transcripts from media files, getting metadata about media, etc.
## yt (YouTube)
`yt` is a command that uses the YouTube API to pull transcripts, get video duration, and other functions. It's primary function is to get a transcript from a video that can then be stitched (piped) into other Fabric Patterns.
## ts (Audio transcriptions)
'ts' is a command that uses the OpenApi Whisper API to transcribe audio files. Due to the context window, this tool uses pydub to split the files into 10 minute segments. for more information on pydub, please refer https://github.com/jiaaro/pydub
### installation
```bash
mac:
brew install ffmpeg
linux:
apt install ffmpeg
windows:
download instructions https://www.ffmpeg.org/download.html
```
```bash
usage: yt [-h] [--duration] [--transcript] [url]
vm (video meta) extracts metadata about a video, such as the transcript and the video's duration. By Daniel Miessler.
positional arguments:
url YouTube video URL
options:
-h, --help show this help message and exit
--duration Output only the duration
--transcript Output only the transcript
```
```bash
ts -h
usage: ts [-h] audio_file
Transcribe an audio file.
positional arguments:
audio_file The path to the audio file to be transcribed.
options:
-h, --help show this help message and exit
```

110
helpers/ts.py Normal file
View File

@@ -0,0 +1,110 @@
from dotenv import load_dotenv
from pydub import AudioSegment
from openai import OpenAI
import os
import argparse
class Whisper:
def __init__(self):
env_file = os.path.expanduser("~/.config/fabric/.env")
load_dotenv(env_file)
try:
apikey = os.environ["OPENAI_API_KEY"]
self.client = OpenAI()
self.client.api_key = apikey
except KeyError:
print("OPENAI_API_KEY not found in environment variables.")
except FileNotFoundError:
print("No API key found. Use the --apikey option to set the key")
self.whole_response = []
def split_audio(self, file_path):
"""
Splits the audio file into segments of the given length.
Args:
- file_path: The path to the audio file.
- segment_length_ms: Length of each segment in milliseconds.
Returns:
- A list of audio segments.
"""
audio = AudioSegment.from_file(file_path)
segments = []
segment_length_ms = 10 * 60 * 1000 # 10 minutes in milliseconds
for start_ms in range(0, len(audio), segment_length_ms):
end_ms = start_ms + segment_length_ms
segment = audio[start_ms:end_ms]
segments.append(segment)
return segments
def process_segment(self, segment):
""" Transcribe an audio file and print the transcript.
Args:
audio_file (str): The path to the audio file to be transcribed.
Returns:
None
"""
try:
# if audio_file.startswith("http"):
# response = requests.get(audio_file)
# response.raise_for_status()
# with tempfile.NamedTemporaryFile(delete=False) as f:
# f.write(response.content)
# audio_file = f.name
audio_file = open(segment, "rb")
response = self.client.audio.transcriptions.create(
model="whisper-1",
file=audio_file
)
self.whole_response.append(response.text)
except Exception as e:
print(f"Error: {e}")
def process_file(self, audio_file):
""" Transcribe an audio file and print the transcript.
Args:
audio_file (str): The path to the audio file to be transcribed.
Returns:
None
"""
try:
# if audio_file.startswith("http"):
# response = requests.get(audio_file)
# response.raise_for_status()
# with tempfile.NamedTemporaryFile(delete=False) as f:
# f.write(response.content)
# audio_file = f.name
segments = self.split_audio(audio_file)
for i, segment in enumerate(segments):
segment_file_path = f"segment_{i}.mp3"
segment.export(segment_file_path, format="mp3")
self.process_segment(segment_file_path)
print(' '.join(self.whole_response))
except Exception as e:
print(f"Error: {e}")
def main():
parser = argparse.ArgumentParser(description="Transcribe an audio file.")
parser.add_argument(
"audio_file", help="The path to the audio file to be transcribed.")
args = parser.parse_args()
whisper = Whisper()
whisper.process_file(args.audio_file)
if __name__ == "__main__":
main()

27
helpers/vm → helpers/yt.py Executable file → Normal file
View File

@@ -1,6 +1,3 @@
#!/usr/bin/env python3
import sys
import re
from googleapiclient.discovery import build
from googleapiclient.errors import HttpError
@@ -11,13 +8,15 @@ import json
import isodate
import argparse
def get_video_id(url):
# Extract video ID from URL
pattern = r'(?:https?:\/\/)?(?:www\.)?(?:youtube\.com\/(?:[^\/\n\s]+\/\S+\/|(?:v|e(?:mbed)?)\/|\S*?[?&]v=)|youtu\.be\/)([a-zA-Z0-9_-]{11})'
match = re.search(pattern, url)
return match.group(1) if match else None
def main(url, options):
def main_function(url, options):
# Load environment variables from .env file
load_dotenv(os.path.expanduser('~/.config/fabric/.env'))
@@ -51,7 +50,8 @@ def main(url, options):
# Get video transcript
try:
transcript_list = YouTubeTranscriptApi.get_transcript(video_id)
transcript_text = ' '.join([item['text'] for item in transcript_list])
transcript_text = ' '.join([item['text']
for item in transcript_list])
transcript_text = transcript_text.replace('\n', ' ')
except Exception as e:
transcript_text = "Transcript not available."
@@ -72,15 +72,22 @@ def main(url, options):
except HttpError as e:
print("Error: Failed to access YouTube API. Please check your YOUTUBE_API_KEY and ensure it is valid.")
if __name__ == '__main__':
parser = argparse.ArgumentParser(description='vm (video meta) extracts metadata about a video, such as the transcript and the video\'s duration. By Daniel Miessler.')
def main():
parser = argparse.ArgumentParser(
description='vm (video meta) extracts metadata about a video, such as the transcript and the video\'s duration. By Daniel Miessler.')
parser.add_argument('url', nargs='?', help='YouTube video URL')
parser.add_argument('--duration', action='store_true', help='Output only the duration')
parser.add_argument('--transcript', action='store_true', help='Output only the transcript')
parser.add_argument('--duration', action='store_true',
help='Output only the duration')
parser.add_argument('--transcript', action='store_true',
help='Output only the transcript')
args = parser.parse_args()
if args.url:
main(args.url, args)
main_function(args.url, args)
else:
parser.print_help()
if __name__ == "__main__":
main()

View File

@@ -1,69 +1,3 @@
# The `fabric` client
This is the primary `fabric` client, which has multiple modes of operation.
## Client modes
You can use the client in three different modes:
1. **Local Only:** You can use the client without a server, and it will use patterns it's downloaded from this repository, or ones that you specify.
2. **Local Server:** You can run your own version of a Fabric Mill locally (on a private IP), which you can then connect to and use.
3. **Remote Server:** You can specify a remote server that your client commands will then be calling.
## Client features
1. Standalone Mode: Run without needing a server.
2. Clipboard Integration: Copy responses to the clipboard.
3. File Output: Save responses to files for later reference.
4. Pattern Module: Utilize specific patterns for different types of analysis.
5. Server Mode: Operate the tool in server mode to control your own patterns and let your other apps access it.
## Installation
Please check our main [setting up the fabric commands](./../../../README.md#setting-up-the-fabric-commands) section.
## Usage
To use `fabric`, call it with your desired options (remember to activate the virtual environment with `poetry shell` - step 5 above):
fabric [options]
Options include:
--pattern, -p: Select the module for analysis.
--stream, -s: Stream output to another application.
--output, -o: Save the response to a file.
--copy, -C: Copy the response to the clipboard.
--context, -c: Use Context file (context.md) to add context to your pattern
Example:
```bash
# Pasting in an article about LLMs
pbpaste | fabric --pattern extract_wisdom --output wisdom.txt | fabric --pattern summarize --stream
```
```markdown
ONE SENTENCE SUMMARY:
- The content covered the basics of LLMs and how they are used in everyday practice.
MAIN POINTS:
1. LLMs are large language models, and typically use the transformer architecture.
2. LLMs used to be used for story generation, but they're now used for many AI applications.
3. They are vulnerable to hallucination if not configured correctly, so be careful.
TAKEAWAYS:
1. It's possible to use LLMs for multiple AI use cases.
2. It's important to validate that the results you're receiving are correct.
3. The field of AI is moving faster than ever as a result of GenAI breakthroughs.
```
## Contributing
We welcome contributions to Fabric, including improvements and feature additions to this client.
## Credits
The `fabric` client was created by Jonathan Dunn and Daniel Meissler.
Please see the main project's README.md for the latest documentation.

View File

@@ -1,81 +0,0 @@
from langchain_community.tools import DuckDuckGoSearchRun
import os
from crewai import Agent, Task, Crew, Process
from dotenv import load_dotenv
import os
current_directory = os.path.dirname(os.path.realpath(__file__))
config_directory = os.path.expanduser("~/.config/fabric")
env_file = os.path.join(config_directory, ".env")
load_dotenv(env_file)
os.environ['OPENAI_MODEL_NAME'] = 'gpt-4-0125-preview'
# You can choose to use a local model through Ollama for example. See https://docs.crewai.com/how-to/LLM-Connections/ for more information.
# osOPENAI_API_BASE='http://localhost:11434/v1'
# OPENAI_MODEL_NAME='openhermes' # Adjust based on available model
# OPENAI_API_KEY=''
# Install duckduckgo-search for this example:
# !pip install -U duckduckgo-search
search_tool = DuckDuckGoSearchRun()
# Define your agents with roles and goals
researcher = Agent(
role='Senior Research Analyst',
goal='Uncover cutting-edge developments in AI and data science',
backstory="""You work at a leading tech think tank.
Your expertise lies in identifying emerging trends.
You have a knack for dissecting complex data and presenting actionable insights.""",
verbose=True,
allow_delegation=False,
tools=[search_tool]
# You can pass an optional llm attribute specifying what mode you wanna use.
# It can be a local model through Ollama / LM Studio or a remote
# model like OpenAI, Mistral, Antrophic or others (https://docs.crewai.com/how-to/LLM-Connections/)
#
# import os
#
# OR
#
# from langchain_openai import ChatOpenAI
# llm=ChatOpenAI(model_name="gpt-3.5", temperature=0.7)
)
writer = Agent(
role='Tech Content Strategist',
goal='Craft compelling content on tech advancements',
backstory="""You are a renowned Content Strategist, known for your insightful and engaging articles.
You transform complex concepts into compelling narratives.""",
verbose=True,
allow_delegation=True
)
# Create tasks for your agents
task1 = Task(
description="""Conduct a comprehensive analysis of the latest advancements in AI in 2024.
Identify key trends, breakthrough technologies, and potential industry impacts.""",
expected_output="Full analysis report in bullet points",
agent=researcher
)
task2 = Task(
description="""Using the insights provided, develop an engaging blog
post that highlights the most significant AI advancements.
Your post should be informative yet accessible, catering to a tech-savvy audience.
Make it sound cool, avoid complex words so it doesn't sound like AI.""",
expected_output="Full blog post of at least 4 paragraphs",
agent=writer
)
# Instantiate your crew with a sequential process
crew = Crew(
agents=[researcher, writer],
tasks=[task1, task2],
verbose=2, # You can set it to 1 or 2 to different logging levels
)
# Get your crew to work!
result = crew.kickoff()
print("######################")
print(result)

View File

@@ -1,3 +0,0 @@
# Context
please give all responses in spanish

View File

@@ -1,7 +1,6 @@
from .utils import Standalone, Update, Setup, Alias, AgentSetup
from .utils import Standalone, Update, Setup, Alias
import argparse
import sys
import time
import os
@@ -16,12 +15,11 @@ def main():
parser.add_argument(
"--copy", "-C", help="Copy the response to the clipboard", action="store_true"
)
subparsers = parser.add_subparsers(dest='command', help='Sub-command help')
agents_parser = subparsers.add_parser('agents', help='Crew command help')
agents_parser.add_argument(
"trip_planner", help="The origin city for the trip")
agents_parser.add_argument(
'ApiKeys', help="enter API keys for tools", action="store_true")
parser.add_argument(
'--agents', '-a', choices=['trip_planner', 'ApiKeys'],
help="Use an AI agent to help you with a task. Acceptable values are 'trip_planner' or 'ApiKeys'. This option cannot be used with any other flag."
)
parser.add_argument(
"--output",
"-o",
@@ -46,7 +44,13 @@ def main():
"--setup", help="Set up your fabric instance", action="store_true"
)
parser.add_argument(
"--model", "-m", help="Select the model to use (GPT-4 by default)", default="gpt-4-turbo-preview"
'--local', '-L', help="Use local LLM. Default is llama2", action="store_true")
parser.add_argument(
"--claude", help="Use Claude AI", action="store_true")
parser.add_argument(
"--model", "-m", help="Select the model to use (GPT-4 by default for chatGPT and llama2 for Ollama)", default="gpt-4-turbo-preview"
)
parser.add_argument(
"--listmodels", help="List all available models", action="store_true"
@@ -73,20 +77,17 @@ def main():
Update()
Alias()
sys.exit()
if args.command == "agents":
from .agents.trip_planner.main import planner_cli
if args.ApiKeys:
AgentSetup().apiKeys()
sys.exit()
if not args.trip_planner:
print("Please provide an agent")
print(f"Available Agents:")
for agent in tripcrew.agents:
print(agent)
else:
if args.agents:
# Handle the agents logic
if args.agents == 'trip_planner':
from .agents.trip_planner.main import planner_cli
tripcrew = planner_cli()
tripcrew.ask()
sys.exit()
sys.exit()
elif args.agents == 'ApiKeys':
from .utils import AgentSetup
AgentSetup().run()
sys.exit()
if args.update:
Update()
Alias()
@@ -95,7 +96,13 @@ def main():
if not os.path.exists(os.path.join(config, "context.md")):
print("Please create a context.md file in ~/.config/fabric")
sys.exit()
standalone = Standalone(args, args.pattern)
standalone = None
if args.local:
standalone = Standalone(args, args.pattern, local=True)
elif args.claude:
standalone = Standalone(args, args.pattern, claude=True)
else:
standalone = Standalone(args, args.pattern)
if args.list:
try:
direct = sorted(os.listdir(config_patterns_directory))

View File

@@ -1,12 +1,11 @@
import requests
import os
from openai import OpenAI
import asyncio
import pyperclip
import sys
import platform
from dotenv import load_dotenv
from requests.exceptions import HTTPError
from tqdm import tqdm
import zipfile
import tempfile
import shutil
@@ -17,7 +16,7 @@ env_file = os.path.join(config_directory, ".env")
class Standalone:
def __init__(self, args, pattern="", env_file="~/.config/fabric/.env"):
def __init__(self, args, pattern="", env_file="~/.config/fabric/.env", local=False, claude=False):
""" Initialize the class with the provided arguments and environment file.
Args:
@@ -46,10 +45,60 @@ class Standalone:
except FileNotFoundError:
print("No API key found. Use the --apikey option to set the key")
sys.exit()
self.local = local
self.config_pattern_directory = config_directory
self.pattern = pattern
self.args = args
self.model = args.model
self.claude = claude
try:
self.model = os.environ["CUSTOM_MODEL"]
except:
self.model = args.model
if self.local:
if self.args.model == 'gpt-4-turbo-preview':
self.model = 'llama2'
if self.claude:
if self.args.model == 'gpt-4-turbo-preview':
self.model = 'claude-3-opus-20240229'
async def localChat(self, messages):
from ollama import AsyncClient
response = await AsyncClient().chat(model=self.model, messages=messages)
print(response['message']['content'])
async def localStream(self, messages):
from ollama import AsyncClient
async for part in await AsyncClient().chat(model=self.args.model, messages=messages, stream=True):
print(part['message']['content'], end='', flush=True)
async def claudeStream(self, system, user):
from anthropic import AsyncAnthropic
self.claudeApiKey = os.environ["CLAUDE_API_KEY"]
Streamingclient = AsyncAnthropic(api_key=self.claudeApiKey)
async with Streamingclient.messages.stream(
max_tokens=4096,
system=system,
messages=[user],
model=self.model, temperature=0.0, top_p=1.0
) as stream:
async for text in stream.text_stream:
print(text, end="", flush=True)
print()
message = await stream.get_final_message()
async def claudeChat(self, system, user):
from anthropic import Anthropic
self.claudeApiKey = os.environ["CLAUDE_API_KEY"]
client = Anthropic(api_key=self.claudeApiKey)
message = client.messages.create(
max_tokens=4096,
system=system,
messages=[user],
model=self.model,
temperature=0.0, top_p=1.0
)
print(message.content[0].text)
def streamMessage(self, input_data: str, context=""):
""" Stream a message and handle exceptions.
@@ -69,6 +118,7 @@ class Standalone:
)
user_message = {"role": "user", "content": f"{input_data}"}
wisdom_File = os.path.join(current_directory, wisdomFilePath)
system = ""
buffer = ""
if self.pattern:
try:
@@ -89,29 +139,45 @@ class Standalone:
else:
messages = [user_message]
try:
stream = self.client.chat.completions.create(
model=self.model,
messages=messages,
temperature=0.0,
top_p=1,
frequency_penalty=0.1,
presence_penalty=0.1,
stream=True,
)
for chunk in stream:
if chunk.choices[0].delta.content is not None:
char = chunk.choices[0].delta.content
buffer += char
if char not in ["\n", " "]:
print(char, end="")
elif char == " ":
print(" ", end="") # Explicitly handle spaces
elif char == "\n":
print() # Handle newlines
sys.stdout.flush()
if self.local:
asyncio.run(self.localStream(messages))
elif self.claude:
from anthropic import AsyncAnthropic
asyncio.run(self.claudeStream(system, user_message))
else:
stream = self.client.chat.completions.create(
model=self.model,
messages=messages,
temperature=0.0,
top_p=1,
frequency_penalty=0.1,
presence_penalty=0.1,
stream=True,
)
for chunk in stream:
if chunk.choices[0].delta.content is not None:
char = chunk.choices[0].delta.content
buffer += char
if char not in ["\n", " "]:
print(char, end="")
elif char == " ":
print(" ", end="") # Explicitly handle spaces
elif char == "\n":
print() # Handle newlines
sys.stdout.flush()
except Exception as e:
print(f"Error: {e}")
print(e)
if "All connection attempts failed" in str(e):
print(
"Error: cannot connect to llama2. If you have not already, please visit https://ollama.com for installation instructions")
if "CLAUDE_API_KEY" in str(e):
print(
"Error: CLAUDE_API_KEY not found in environment variables. Please run --setup and add the key")
if "overloaded_error" in str(e):
print(
"Error: Fabric is working fine, but claude is overloaded. Please try again later.")
else:
print(f"Error: {e}")
print(e)
if self.args.copy:
pyperclip.copy(buffer)
if self.args.output:
@@ -136,6 +202,7 @@ class Standalone:
)
user_message = {"role": "user", "content": f"{input_data}"}
wisdom_File = os.path.join(current_directory, wisdomFilePath)
system = ""
if self.pattern:
try:
with open(wisdom_File, "r") as f:
@@ -155,18 +222,33 @@ class Standalone:
else:
messages = [user_message]
try:
response = self.client.chat.completions.create(
model=self.model,
messages=messages,
temperature=0.0,
top_p=1,
frequency_penalty=0.1,
presence_penalty=0.1,
)
print(response.choices[0].message.content)
if self.local:
asyncio.run(self.localChat(messages))
elif self.claude:
asyncio.run(self.claudeChat(system, user_message))
else:
response = self.client.chat.completions.create(
model=self.model,
messages=messages,
temperature=0.0,
top_p=1,
frequency_penalty=0.1,
presence_penalty=0.1,
)
print(response.choices[0].message.content)
except Exception as e:
print(f"Error: {e}")
print(e)
if "All connection attempts failed" in str(e):
print(
"Error: cannot connect to llama2. If you have not already, please visit https://ollama.com for installation instructions")
if "CLAUDE_API_KEY" in str(e):
print(
"Error: CLAUDE_API_KEY not found in environment variables. Please run --setup and add the key")
if "overloaded_error" in str(e):
print(
"Error: Fabric is working fine, but claude is overloaded. Please try again later.")
else:
print(f"Error: {e}")
print(e)
if self.args.copy:
pyperclip.copy(response.choices[0].message.content)
if self.args.output:
@@ -342,11 +424,77 @@ class Setup:
Raises:
OSError: If the environment file does not exist or cannot be accessed.
"""
if not os.path.exists(self.env_file):
api_key = api_key.strip()
if not os.path.exists(self.env_file) and api_key:
with open(self.env_file, "w") as f:
f.write(f"OPENAI_API_KEY={api_key}")
print(f"OpenAI API key set to {api_key}")
elif api_key:
# erase the line OPENAI_API_KEY=key and write the new key
with open(self.env_file, "r") as f:
lines = f.readlines()
with open(self.env_file, "w") as f:
for line in lines:
if "OPENAI_API_KEY" not in line:
f.write(line)
f.write(f"OPENAI_API_KEY={api_key}")
def claude_key(self, claude_key):
""" Set the Claude API key in the environment file.
Args:
claude_key (str): The API key to be set.
Returns:
None
Raises:
OSError: If the environment file does not exist or cannot be accessed.
"""
claude_key = claude_key.strip()
if os.path.exists(self.env_file) and claude_key:
with open(self.env_file, "r") as f:
lines = f.readlines()
with open(self.env_file, "w") as f:
for line in lines:
if "CLAUDE_API_KEY" not in line:
f.write(line)
f.write(f"CLAUDE_API_KEY={claude_key}")
elif claude_key:
with open(self.env_file, "r") as r:
lines = r.readlines()
with open(self.env_file, "w") as w:
for line in lines:
if "CLAUDE_API_KEY" not in line:
w.write(line)
w.write(f"CLAUDE_API_KEY={claude_key}")
def custom_model(self, model):
"""
Set the custom model in the environment file
Args:
model (str): The model to be set.
Returns:
None
"""
model = model.strip()
if os.path.exists(self.env_file) and model:
with open(self.env_file, "r") as f:
lines = f.readlines()
with open(self.env_file, "w") as f:
for line in lines:
if "CUSTOM_MODEL" not in line:
f.write(line)
f.write(f"CUSTOM_MODEL={model}")
elif model:
with open(self.env_file, "r") as r:
lines = r.readlines()
with open(self.env_file, "w") as w:
for line in lines:
if "CUSTOM_MODEL" not in line:
w.write(line)
w.write(f"CUSTOM_MODEL={model}")
def patterns(self):
""" Method to update patterns and exit the system.
@@ -367,8 +515,15 @@ class Setup:
"""
print("Welcome to Fabric. Let's get started.")
apikey = input("Please enter your OpenAI API key\n")
self.api_key(apikey.strip())
apikey = input(
"Please enter your OpenAI API key. If you do not have one or if you have already entered it, press enter.\n")
self.api_key(apikey)
claudekey = input(
"Please enter your claude API key. If you do not have one, or if you have already entered it, press enter.\n")
self.claude_key(claudekey)
custom_model = input(
"Please enter your custom model. If you do not have one, or if you have already entered it, press enter. If none is entered, it will default to gpt-4-turbo-preview\n")
self.custom_model(custom_model)
self.patterns()

View File

@@ -0,0 +1,75 @@
# Create Command
During penetration tests, many different tools are used, and often they are run with different parameters and switches depending on the target and circumstances. Because there are so many tools, it's easy to forget how to run certain tools, and what the different parameters and switches are. Most tools include a "-h" help switch to give you these details, but it's much nicer to have AI figure out all the right switches with you just providing a brief description of your objective with the tool.
# Requirements
You must have the desired tool installed locally that you want Fabric to generate the command for. For the examples above, the tool must also have help documentation at "tool -h", which is the case for most tools.
# Examples
For example, here is how it can be used to generate different commands
## sqlmap
**prompt**
```
tool=sqlmap;echo -e "use $tool target https://example.com?test=id url, specifically the test parameter. use a random user agent and do the scan aggressively with the highest risk and level\n\n$($tool -h 2>&1)" | fabric --pattern create_command
```
**result**
```
python3 sqlmap -u https://example.com?test=id --random-agent --level=5 --risk=3 -p test
```
## nmap
**prompt**
```
tool=nmap;echo -e "use $tool to target all hosts in the host.lst file even if they don't respond to pings. scan the top 10000 ports and save the ouptut to a text file and an xml file\n\n$($tool -h 2>&1)" | fabric --pattern create_command
```
**result**
```
nmap -iL host.lst -Pn --top-ports 10000 -oN output.txt -oX output.xml
```
## gobuster
**prompt**
```
tool=gobuster;echo -e "use $tool to target example.com for subdomain enumeration and use a wordlist called big.txt\n\n$($tool -h 2>&1)" | fabric --pattern create_command
```
**result**
```
gobuster dns -u example.com -w big.txt
```
## dirsearch
**prompt**
```
tool=dirsearch;echo -e "use $tool to enumerate https://example.com. ignore 401 and 404 status codes. perform the enumeration recursively and crawl the website. use 50 threads\n\n$($tool -h 2>&1)" | fabric --pattern create_command
```
**result**
```
dirsearch -u https://example.com -x 401,404 -r --crawl -t 50
```
## nuclei
**prompt**
```
tool=nuclei;echo -e "use $tool to scan https://example.com. use a max of 10 threads. output result to a json file. rate limit to 50 requests per second\n\n$($tool -h 2>&1)" | fabric --pattern create_command
```
**result**
```
nuclei -u https://example.com -c 10 -o output.json -rl 50 -j
```

View File

@@ -0,0 +1,22 @@
# IDENTITY and PURPOSE
You are a penetration tester that is extremely good at reading and understanding command line help instructions. You are responsible for generating CLI commands for various tools that can be run to perform certain tasks based on documentation given to you.
Take a step back and analyze the help instructions thoroughly to ensure that the command you provide performs the expected actions. It is crucial that you only use switches and options that are explicitly listed in the documentation passed to you. Do not attempt to guess. Instead, use the documentation passed to you as your primary source of truth. It is very important the the commands you generate run properly and do not use fake or invalid options and switches.
# OUTPUT INSTRUCTIONS
- Output the requested command using the documentation provided with the provided details inserted. The input will include the prompt on the first line and then the tool documentation for the command will be provided on subsequent lines.
- Do not add additional options or switches unless they are explicitly asked for.
- Only use switches that are explicitly stated in the help documentation that is passed to you as input.
# OUTPUT FORMAT
- Output a full, bash command with all relevant parameters and switches.
- Refer to the provided help documentation.
- Only output the command. Do not output any warning or notes.
- Do not output any Markdown or other formatting. Only output the command itself.
# INPUT:
INPUT:

View File

View File

@@ -0,0 +1,46 @@
# IDENTITY and PURPOSE
You are an expert at creating TED-quality keynote presentations from the input provided.
Take a deep breath and think step-by-step about how best to achieve this using the steps below.
# STEPS
- Think about the entire narrative flow of the presentation first. Have that firmly in your mind. Then begin.
- Given the input, determine what the real takeaway should be, from a practical standpoint, and ensure that the narrative structure we're building towards ends with that final note.
- Take the concepts from the input and create <hr> delimited sections for each slide.
- The slide's content will be 3-5 bullets of no more than 5-10 words each.
- Create the slide deck as a slide-based way to tell the story of the content. Be aware of the narrative flow of the slides, and be sure you're building the story like you would for a TED talk.
- Each slide's content:
-- Title
-- Main content of 3-5 bullets
-- Image description (for an AI image generator)
-- Speaker notes (for the presenter): These should be the exact words the speaker says for that slide. Give them as a set of bullets of no more than 15 words each.
- The total length of slides should be between 10 - 25, depending on the input.
# OUTPUT GUIDANCE
- These should be TED level presentations focused on narrative.
- Ensure the slides and overall presentation flows properly. If it doesn't produce a clean narrative, start over.
# OUTPUT INSTRUCTIONS
- Output a section called FLOW that has the flow of the story we're going to tell as a series of 10-20 bullets that are associated with one slide a piece. Each bullet should be 10-words max.
- Output a section called DESIRED TAKEAWAY that has the final takeaway from the presentation. This should be a single sentence.
- Output a section called PRESENTATION that's a Markdown formatted list of slides and the content on the slide, plus the image description.
- Ensure the speaker notes are in the voice of the speaker, i.e. they're what they're actually going to say.
# INPUT:
INPUT:

View File

@@ -0,0 +1,88 @@
# IDENTITY and PURPOSE
You are an expert at data and concept visualization and in turning complex ideas into a form that can be visualized using MarkMap.
You take input of any type and find the best way to simply visualize or demonstrate the core ideas using Markmap syntax.
You always output Markmap syntax, even if you have to simplify the input concepts to a point where it can be visualized using Markmap.
# MARKMAP SYNTAX
Here is an example of MarkMap syntax:
````plaintext
markmap:
colorFreezeLevel: 2
---
# markmap
## Links
- [Website](https://markmap.js.org/)
- [GitHub](https://github.com/gera2ld/markmap)
## Related Projects
- [coc-markmap](https://github.com/gera2ld/coc-markmap) for Neovim
- [markmap-vscode](https://marketplace.visualstudio.com/items?itemName=gera2ld.markmap-vscode) for VSCode
- [eaf-markmap](https://github.com/emacs-eaf/eaf-markmap) for Emacs
## Features
Note that if blocks and lists appear at the same level, the lists will be ignored.
### Lists
- **strong** ~~del~~ *italic* ==highlight==
- `inline code`
- [x] checkbox
- Katex: $x = {-b \pm \sqrt{b^2-4ac} \over 2a}$ <!-- markmap: fold -->
- [More Katex Examples](#?d=gist:af76a4c245b302206b16aec503dbe07b:katex.md)
- Now we can wrap very very very very long text based on `maxWidth` option
### Blocks
```js
console('hello, JavaScript')
````
| Products | Price |
| -------- | ----- |
| Apple | 4 |
| Banana | 2 |
![](/favicon.png)
```
# STEPS
- Take the input given and create a visualization that best explains it using proper MarkMap syntax.
- Ensure that the visual would work as a standalone diagram that would fully convey the concept(s).
- Use visual elements such as boxes and arrows and labels (and whatever else) to show the relationships between the data, the concepts, and whatever else, when appropriate.
- Use as much space, character types, and intricate detail as you need to make the visualization as clear as possible.
- Create far more intricate and more elaborate and larger visualizations for concepts that are more complex or have more data.
- Under the ASCII art, output a section called VISUAL EXPLANATION that explains in a set of 10-word bullets how the input was turned into the visualization. Ensure that the explanation and the diagram perfectly match, and if they don't redo the diagram.
- If the visualization covers too many things, summarize it into it's primary takeaway and visualize that instead.
- DO NOT COMPLAIN AND GIVE UP. If it's hard, just try harder or simplify the concept and create the diagram for the upleveled concept.
# OUTPUT INSTRUCTIONS
- DO NOT COMPLAIN. Just make the Markmap.
- Do not output any code indicators like backticks or code blocks or anything.
- Create a diagram no matter what, using the STEPS above to determine which type.
# INPUT:
INPUT:
```

View File

@@ -0,0 +1,39 @@
# IDENTITY and PURPOSE
You are an expert at data and concept visualization and in turning complex ideas into a form that can be visualized using Mermaid (markdown) syntax.
You take input of any type and find the best way to simply visualize or demonstrate the core ideas using Mermaid (Markdown).
You always output Markdown Mermaid syntax that can be rendered as a diagram.
# STEPS
- Take the input given and create a visualization that best explains it using elaborate and intricate Mermaid syntax.
- Ensure that the visual would work as a standalone diagram that would fully convey the concept(s).
- Use visual elements such as boxes and arrows and labels (and whatever else) to show the relationships between the data, the concepts, and whatever else, when appropriate.
- Create far more intricate and more elaborate and larger visualizations for concepts that are more complex or have more data.
- Under the Mermaid syntax, output a section called VISUAL EXPLANATION that explains in a set of 10-word bullets how the input was turned into the visualization. Ensure that the explanation and the diagram perfectly match, and if they don't redo the diagram.
- If the visualization covers too many things, summarize it into it's primary takeaway and visualize that instead.
- DO NOT COMPLAIN AND GIVE UP. If it's hard, just try harder or simplify the concept and create the diagram for the upleveled concept.
# OUTPUT INSTRUCTIONS
- DO NOT COMPLAIN. Just output the Mermaid syntax.
- Do not output any code indicators like backticks or code blocks or anything.
- Ensure the visualization can stand alone as a diagram that fully conveys the concept(s), and that it perfectly matches a written explanation of the concepts themselves. Start over if it can't.
- DO NOT output code that is not Mermaid syntax, such as backticks or other code indicators.
- Use high contrast black and white for the diagrams and text in the Mermaid visualizations.
# INPUT:
INPUT:

View File

@@ -0,0 +1,155 @@
# IDENTITY and PURPOSE
You are an expert in risk and threat management and cybersecurity. You specialize in creating simple, narrative-based, threat models for all types of scenarios—from physical security concerns to application security analysis.
Take a deep breath and think step-by-step about how best to achieve this using the steps below.
# THREAT MODEL ESSAY BY DANIEL MIESSLER
Everyday Threat Modeling
Threat modeling is a superpower. When done correctly it gives you the ability to adjust your defensive behaviors based on what youre facing in real-world scenarios. And not just for applications, or networks, or a business—but for life.
The Difference Between Threats and Risks
This type of threat modeling is a life skill, not just a technical skill. Its a way to make decisions when facing multiple stressful options—a universal tool for evaluating how you should respond to danger.
Threat Modeling is a way to think about any type of danger in an organized way.
The problem we have as humans is that opportunity is usually coupled with risk, so the question is one of which opportunities should you take and which should you pass on. And If you want to take a certain risk, which controls should you put in place to keep the risk at an acceptable level?
Most people are bad at responding to slow-effect danger because they dont properly weigh the likelihood of the bad scenarios theyre facing. Theyre too willing to put KGB poisoning and neighborhood-kid-theft in the same realm of likelihood. This grouping is likely to increase your stress level to astronomical levels as you imagine all the different things that could go wrong, which can lead to unwise defensive choices.
To see what I mean, lets look at some common security questions.
This has nothing to do with politics.
Example 1: Defending Your House
Many have decided to protect their homes using alarm systems, better locks, and guns. Nothing wrong with that necessarily, but the question is how much? When do you stop? For someone whos not thinking according to Everyday Threat Modeling, there is potential to get real extreme real fast.
Lets say you live in a nice suburban neighborhood in North Austin. The crime rate is extremely low, and nobody can remember the last time a home was broken into.
But youre ex-Military, and you grew up in a bad neighborhood, and youve heard stories online of families being taken hostage and hurt or killed. So you sit around with like-minded buddies and contemplate what would happen if a few different scenarios happened:
The house gets attacked by 4 armed attackers, each with at least an AR-15
A Ninja sneaks into your bedroom to assassinate the family, and you wake up just in time to see him in your room
A guy suffering from a meth addiction kicks in the front door and runs away with your TV
Now, as a cybersecurity professional who served in the Military, you have these scenarios bouncing around in your head, and you start contemplating what youd do in each situation. And how you can be prepared.
Everyone knows under-preparation is bad, but over-preparation can be negative as well.
Well, looks like you might want a hidden knife under each table. At least one hidden gun in each room. Krav Maga training for all your kids starting at 10-years-old. And two modified AR-15s in the bedroom—one for you and one for your wife.
Every control has a cost, and its not always financial.
But then you need to buy the cameras. And go to additional CQB courses for room to room combat. And you spend countless hours with your family drilling how to do room-to-room combat with an armed assailant. Also, youve been preparing like this for years, and youve spent 187K on this so far, which could have gone towards college.
Now. Its not that its bad to be prepared. And if this stuff was all free, and safe, there would be fewer reasons not to do it. The question isnt whether its a good idea. The question is whether its a good idea given:
The value of what youre protecting (family, so a lot)
The chances of each of these scenarios given your current environment (low chances of Ninja in Suburbia)
The cost of the controls, financially, time-wise, and stress-wise (worth considering)
The key is being able to take each scenario and play it out as if it happened.
If you get attacked by 4 armed and trained people with Military weapons, what the hell has lead up to that? And should you not just move to somewhere safer? Or maybe work to make whoever hates you that much, hate you less? And are you and your wife really going to hold them off with your two weapons along with the kids in their pajamas?
Think about how irresponsible youd feel if that thing happened, and perhaps stress less about it if it would be considered a freak event.
That and the Ninja in your bedroom are not realistic scenarios. Yes, they could happen, but would people really look down on you for being killed by a Ninja in your sleep. Theyre Ninjas.
Think about it another way: what if Russian Mafia decided to kidnap your 4th grader while she was walking home from school. They showed up with a van full of commandos and snatched her off the street for ransom (whatever).
Would you feel bad that you didnt make your childs school route resistant to Russian Special Forces? Youd probably feel like that emotionally, of course, but it wouldnt be logical.
Maybe your kids are allergic to bee stings and you just dont know yet.
Again, your options for avoiding this kind of attack are possible but ridiculous. You could home-school out of fear of Special Forces attacking kids while walking home. You could move to a compound with guard towers and tripwires, and have your kids walk around in beekeeper protection while wearing a gas mask.
Being in a constant state of worry has its own cost.
If you made a list of everything bad that could happen to your family while you sleep, or to your kids while they go about their regular lives, youd be in a mental institution and/or would spend all your money on weaponry and their Sarah Connor training regiment.
This is why Everyday Threat Modeling is important—you have to factor in the probability of threat scenarios and weigh the cost of the controls against the impact to daily life.
Example 2: Using a VPN
A lot of people are confused about VPNs. They think its giving them security that it isnt because they havent properly understood the tech and havent considered the attack scenarios.
If you log in at the end website youve identified yourself to them, regardless of VPN.
VPNs encrypt the traffic between you and some endpoint on the internet, which is where your VPN is based. From there, your traffic then travels without the VPN to its ultimate destination. And then—and this is the part that a lot of people miss—it then lands in some application, like a website. At that point you start clicking and browsing and doing whatever you do, and all those events could be logged or tracked by that entity or anyone who has access to their systems.
It is not some stealth technology that makes you invisible online, because if invisible people type on a keyboard the letters still show up on the screen.
Now, lets look at who were defending against if you use a VPN.
Your ISP. If your VPN includes all DNS requests and traffic then you could be hiding significantly from your ISP. This is true. Theyd still see traffic amounts, and there are some technologies that allow people to infer the contents of encrypted connections, but in general this is a good control if youre worried about your ISP.
The Government. If the government investigates you by only looking at your ISP, and youve been using your VPN 24-7, youll be in decent shape because itll just be encrypted traffic to a VPN provider. But now theyll know that whatever you were doing was sensitive enough to use a VPN at all times. So, probably not a win. Besides, theyll likely be looking at the places youre actually visiting as well (the sites youre going to on the VPN), and like I talked about above, thats when your cloaking device is useless. You have to de-cloak to fire, basically.
Super Hackers Trying to Hack You. First, I dont know who these super hackers are, or why theyre trying ot hack you. But if its a state-level hacking group (or similar elite level), and you are targeted, youre going to get hacked unless you stop using the internet and email. Its that simple. There are too many vulnerabilities in all systems, and these teams are too good, for you to be able to resist for long. You will eventually be hacked via phishing, social engineering, poisoning a site you already frequent, or some other technique. Focus instead on not being targeted.
Script Kiddies. If you are just trying to avoid general hacker-types trying to hack you, well, I dont even know what that means. Again, the main advantage you get from a VPN is obscuring your traffic from your ISP. So unless this script kiddie had access to your ISP and nothing else, this doesnt make a ton of sense.
Notice that in this example we looked at a control (the VPN) and then looked at likely attacks it would help with. This is the opposite of looking at the attacks (like in the house scenario) and then thinking about controls. Using Everyday Threat Modeling includes being able to do both.
Example 3: Using Smart Speakers in the House
This one is huge for a lot of people, and it shows the mistake I talked about when introducing the problem. Basically, many are imagining movie-plot scenarios when making the decision to use Alexa or not.
Lets go through the negative scenarios:
Amazon gets hacked with all your data released
Amazon gets hacked with very little data stolen
A hacker taps into your Alexa and can listen to everything
A hacker uses Alexa to do something from outside your house, like open the garage
Someone inside the house buys something they shouldnt
alexaspeakers
A quick threat model on using Alexa smart speakers (click for spreadsheet)
If you click on the spreadsheet above you can open it in Google Sheets to see the math. Its not that complex. The only real nuance is that Impact is measured on a scale of 1-1000 instead of 1-100. The real challenge here is not the math. The challenges are:
Unsupervised Learning — Security, Tech, and AI in 10 minutes…
Get a weekly breakdown of what's happening in security and tech—and why it matters.
Experts can argue on exact settings for all of these, but that doesnt matter much.
Assigning the value of the feature
Determining the scenarios
Properly assigning probability to the scenarios
The first one is critical. You have to know how much risk youre willing to tolerate based on how useful that thing is to you, your family, your career, your life. The second one requires a bit of a hacker/creative mind. And the third one requires that you understand the industry and the technology to some degree.
But the absolute most important thing here is not the exact ratings you give—its the fact that youre thinking about this stuff in an organized way!
The Everyday Threat Modeling Methodology
Other versions of the methodology start with controls and go from there.
So, as you can see from the spreadsheet, heres the methodology I recommend using for Everyday Threat Modeling when youre asking the question:
Should I use this thing?
Out of 1-100, determine how much value or pleasure you get from the item/feature. Thats your Value.
Make a list of negative/attack scenarios that might make you not want to use it.
Determine how bad it would be if each one of those happened, from 1-1000. Thats your Impact.
Determine the chances of that realistically happening over the next, say, 10 years, as a percent chance. Thats your Likelihood.
Multiply the Impact by the Likelihood for each scenario. Thats your Risk.
Add up all your Risk scores. Thats your Total Risk.
Subtract your Total Risk from your Value. If that number is positive, you are good to go. If that number is negative, it might be too risky to use based on your risk tolerance and the value of the feature.
Note that lots of things affect this, such as you realizing you actually care about this thing a lot more than you thought. Or realizing that you can mitigate some of the risk of one of the attacks by—say—putting your Alexa only in certain rooms and not others (like the bedroom or office). Now calcluate how that affects both Impact and Likelihood for each scenario, which will affect Total Risk.
Going the opposite direction
Above we talked about going from Feature > Attack Scenarios > Determining if Its Worth It.
But theres another version of this where you start with a control question, such as:
Whats more secure, typing a password into my phone, using my fingerprint, or using facial recognition?
Here were not deciding whether or not to use a phone. Yes, were going to use one. Instead were figuring out what type of security is best. And that—just like above—requires us to think clearly about the scenarios were facing.
So lets look at some attacks against your phone:
A Russian Spetztaz Ninja wants to gain access to your unlocked phone
Your 7-year old niece wants to play games on your work phone
Your boyfriend wants to spy on your DMs with other people
Someone in Starbucks is shoulder surfing and being nosy
You accidentally leave your phone in a public place
We wont go through all the math on this, but the Russian Ninja scenario is really bad. And really unlikely. Theyre more likely to steal you and the phone, and quickly find a way to make you unlock it for them. So your security measure isnt going to help there.
For your niece, kids are super smart about watching you type your password, so she might be able to get into it easily just by watching you do it a couple of times. Same with someone shoulder surfing at Starbucks, but you have to ask yourself whos going to risk stealing your phone and logging into it at Starbucks. Is this a stalker? A criminal? What type? You have to factor in all those probabilities.
First question, why are you with them?
If your significant other wants to spy on your DMs, well they most definitely have had an opportunity to shoulder surf a passcode. But could they also use your finger while you slept? Maybe face recognition could be the best because itd be obvious to you?
For all of these, you want to assign values based on how often youre in those situations. How often youre in Starbucks, how often you have kids around, how stalkerish your soon-to-be-ex is. Etc.
Once again, the point is to think about this in an organized way, rather than as a mashup of scenarios with no probabilities assigned that you cant keep straight in your head. Logic vs. emotion.
Its a way of thinking about danger.
Other examples
Here are a few other examples that you might come across.
Should I put my address on my public website?
How bad is it to be a public figure (blog/YouTube) in 2020?
Do I really need to shred this bill when I throw it away?
Dont ever think youve captured all the scenarios, or that you have a perfect model.
In each of these, and the hundreds of other similar scenarios, go through the methodology. Even if you dont get to something perfect or precise, you will at least get some clarity in what the problem is and how to think about it.
Summary
Threat Modeling is about more than technical defenses—its a way of thinking about risk.
The main mistake people make when considering long-term danger is letting different bad outcomes produce confusion and anxiety.
When you think about defense, start with thinking about what youre defending, and how valuable it is.
Then capture the exact scenarios youre worried about, along with how bad it would be if they happened, and what you think the chances are of them happening.
You can then think about additional controls as modifiers to the Impact or Probability ratings within each scenario.
Know that your calculation will never be final; it changes based on your own preferences and the world around you.
The primary benefit of Everyday Threat Modeling is having a semi-formal way of thinking about danger.
Dont worry about the specifics of your methodology; as long as you capture feature value, scenarios, and impact/probability…youre on the right path. Its the exercise thats valuable.
Notes
I know Threat Modeling is a religion with many denominations. The version of threat modeling I am discussing here is a general approach that can be used for anything from whether to move out of the country due to a failing government, or what appsec controls to use on a web application.
END THREAT MODEL ESSAY
# STEPS
- Fully understand the threat modeling approach captured in the blog above. That is the mentality you use to create threat models.
- Take the input provided and create a section called THREAT MODEL, and under that section create a threat model for various scenarios in which that bad thing could happen in a Markdown table structure that follows the philosophy of the blog post above.
- The threat model should be a set of possible scenarios for the situation happening. The goal is to highlight what's realistic vs. possible, and what's worth defending against vs. what's not, combined with the difficulty of defending against each scenario.
- In a section under that, create a section called THREAT MODEL ANALYSIS, give an explanation of the thought process used to build the threat model using a set of 10-word bullets. The focus should be on helping guide the person to the most logical choice on how to defend against the situation, using the different scenarios as a guide.
# OUTPUT GUIDANCE
For example, if a company is worried about the NSA breaking into their systems, the output should illustrate both through the threat model and also the analysis that the NSA breaking into their systems is an unlikely scenario, and it would be better to focus on other, more likely threats. Plus it'd be hard to defend against anyway.
Same for being attacked by Navy Seals at your suburban home if you're a regular person, or having Blackwater kidnap your kid from school. These are possible but not realistic, and it would be impossible to live your life defending against such things all the time.
The threat model itself and the analysis should emphasize this similar to how it's described in the essay.
# OUTPUT INSTRUCTIONS
- You only output valid Markdown.
- Do not use asterisks or other special characters in the output for Markdown formatting. Use Markdown syntax that's more readable in plain text.
- Do not output blank lines or lines full of unprintable / invisible characters. Only output the printable portion of the ASCII art.
# INPUT:
INPUT:

View File

@@ -0,0 +1,51 @@
# IDENTITY and PURPOSE
You are an expert at data and concept visualization and in turning complex ideas into a form that can be visualized using ASCII art.
You take input of any type and find the best way to simply visualize or demonstrate the core ideas using ASCII art.
You always output ASCII art, even if you have to simplify the input concepts to a point where it can be visualized using ASCII art.
# STEPS
- Take the input given and create a visualization that best explains it using elaborate and intricate ASCII art.
- Ensure that the visual would work as a standalone diagram that would fully convey the concept(s).
- Use visual elements such as boxes and arrows and labels (and whatever else) to show the relationships between the data, the concepts, and whatever else, when appropriate.
- Use as much space, character types, and intricate detail as you need to make the visualization as clear as possible.
- Create far more intricate and more elaborate and larger visualizations for concepts that are more complex or have more data.
- Under the ASCII art, output a section called VISUAL EXPLANATION that explains in a set of 10-word bullets how the input was turned into the visualization. Ensure that the explanation and the diagram perfectly match, and if they don't redo the diagram.
- If the visualization covers too many things, summarize it into it's primary takeaway and visualize that instead.
- DO NOT COMPLAIN AND GIVE UP. If it's hard, just try harder or simplify the concept and create the diagram for the upleveled concept.
- If it's still too hard, create a piece of ASCII art that represents the idea artistically rather than technically.
# OUTPUT INSTRUCTIONS
- DO NOT COMPLAIN. Just make an image. If it's too complex for a simple ASCII image, reduce the image's complexity until it can be rendered using ASCII.
- DO NOT COMPLAIN. Make a printable image no matter what.
- Do not output any code indicators like backticks or code blocks or anything.
- You only ouptut the printable portion of the ASCII art. You do not ouptut the non-printable characters.
- Ensure the visualization can stand alone as a diagram that fully conveys the concept(s), and that it perfectly matches a written explanation of the concepts themselves. Start over if it can't.
- Ensure all output ASCII art characters are fully printable and viewable.
- Ensure the diagram will fit within a reasonable width in a large window, so the viewer won't have to reduce the font like 1000 times.
- Create a diagram no matter what, using the STEPS above to determine which type.
- Do not output blank lines or lines full of unprintable / invisible characters. Only output the printable portion of the ASCII art.
# INPUT:
INPUT:

View File

@@ -0,0 +1,24 @@
# IDENTITY and PURPOSE
You extract surprising, insightful, and interesting information from text content. You are interested in insights related to the purpose and meaning of life, human flourishing, the role of technology in the future of humanity, artificial intelligence and its affect on humans, memes, learning, reading, books, continuous improvement, and similar topics.
Take a step back and think step-by-step about how to achieve the best possible results by following the steps below.
# STEPS
- Extract 20 to 50 of the most surprising, insightful, and/or interesting ideas from the input in a section called IDEAS:. If there are less than 50 then collect all of them. Make sure you extract at least 20.
# OUTPUT INSTRUCTIONS
- Only output Markdown.
- Extract at least 20 IDEAS from the content.
- Limit each idea bullet to a maximum of 15 words.
- Do not give warnings or notes; only output the requested sections.
- You use bulleted lists for output, not numbered lists.
- Do not repeat ideas, quotes, facts, or resources.
- Do not start items with the same opening words.
- Ensure you follow ALL these instructions when creating your output.
# INPUT
INPUT:

View File

@@ -0,0 +1,71 @@
# IDENTITY AND GOALS
You are an expert in political propaganda, analysis of hidden messages in conversations and essays, population control through speech and writing, and political narrative creation.
You consume input and cynically evaluate what's being said to find the overt vs. hidden political messages.
Take a step back and think step-by-step about how to evaluate the input and what the true intentions of the speaker are.
# STEPS
- Using all your knowledge of language, politics, history, propaganda, and human psychology, slowly evaluate the input and think about the true underlying political message is behind the content.
- Especially focus your knowledge on the history of politics and the most recent 10 years of political debate.
# OUTPUT
- In a section called OVERT MESSAGE, output a single 15-word sentence that captures the message that the user is OVERTLY talking about.
- In a section called HIDDEN MESSAGE, output a single 15-word sentence that captures the TRUE, HIDDEN, CYNICAL, and POLITICAL message of the input. E.g.: "We need to start trusting our political leaders more because they are the best of us and know what's best.", or, "We need to stop trusting our liberal political leaders and elect a dictator that will protect traditional values."
- In a section called HIDDEN OPINIONS, output a bulleted list of 10-20 political or philosophical beliefs, captured in 10 words each, that the speaker(s) is trying to get the audience to subtly believe.
- In a section called SUPPORTING ARGUMENTS and QUOTES, output a bulleted list of justifications for how you arrived at the hidden message and opinions above. Use logic, argument, and quotes as the support content for each bullet.
- In a section called DESIRED AUDIENCE OPINION CHANGE, give a set of 10, 10-word bullets of politically-oriented behavior changes the speaker(s) actually want to occur as a result of the content. These should be deeply political and tangible.
- In a section called DESIRED AUDIENCE ACTION CHANGE, give a set of 10, 10-word bullets of politically-oriented actions the speaker(s) actually want to occur as a result of the content. These should be tangible and real-world.
- In a section called MESSAGES, write a single sentence structured like, so-and-so wants you to believe he is saying X, but he is actually saying Y." Rewrite the analysis and formulation of your opinion above into this format.
- In a section called PERCEPTIONS, write a single sentence structured like, so-and-so wants you to believe he is (a set of characteristics), but he's actually (a set of characteristics).
EXAMPLES OF DESIRED AUDIENCE ACTION CHANGE:
- Trust the government less.
- Vote for democrats.
- Vote for republicans.
- Trust the government more.
- Be less trusting of politicians.
- Be less skeptical of politicians.
- Remember that government is there to keep you safe, so you should trust it.
- Be more accepting of authoritarian leaders.
- Be more accepting of technology in their lives.
- Get your kids out of schools because they're government training camps.
END EXAMPLES OF DESIRED AUDIENCE CHANGE
# OUTPUT INSTRUCTIONS
- Only output valid Markdown.
- Do not output any asterisks, which are used for italicizing and bolding text.
- Do not output any content other than the sections above.
- Do not complain about the instructions. Just do what is asked above.
- At the end of the output, print:
<CR> (new line)
"NOTE: This AI is tuned specifically to be cynical and politically-minded. Don't take it as perfect. Run it multiple times and/or go consume the original input to get a second opinion.

View File

@@ -0,0 +1,21 @@
# IDENTITY and PURPOSE
You are an expert project manager and developer, and you specialize in creating super clean updates for what changed a Github project in the last 7 days.
# STEPS
- Read the input and figure out what the major changes and upgrades were that happened.
- Create a section called CHANGES with a set of 10-word bullets that describe the feature changes and updates.
# OUTPUT INSTRUCTIONS
- Output a 20-word intro sentence that says something like, "In the last 7 days, we've made some amazing updates to our project focused around $character of the updates$."
- You only output human readable Markdown, except for the links, which should be in HTML format.
- Write the update bullets like you're excited about the upgrades.
# INPUT:
INPUT:

958
poetry.lock generated

File diff suppressed because it is too large Load Diff

View File

@@ -18,6 +18,12 @@ unstructured = "0.10.25"
pyowm = "3.3.0"
tools = "^0.1.9"
langchain-community = "^0.0.24"
google-api-python-client = "^2.120.0"
isodate = "^0.6.1"
youtube-transcript-api = "^0.6.2"
pydub = "^0.25.1"
ollama = "^0.1.7"
anthropic = "^0.18.1"
[tool.poetry.group.cli.dependencies]
pyyaml = "^6.0.1"
@@ -35,7 +41,7 @@ flask-socketio = "^5.3.6"
flask-sock = "^0.7.0"
gunicorn = "^21.2.0"
gevent = "^23.9.1"
httpx = "^0.26.0"
httpx = ">=0.25.2,<0.26.0"
tqdm = "^4.66.1"
[tool.poetry.group.server.dependencies]
@@ -56,3 +62,5 @@ build-backend = "poetry.core.masonry.api"
fabric = 'installer:cli'
fabric-api = 'installer:run_api_server'
fabric-webui = 'installer:run_webui_server'
ts = 'helpers.ts:main'
yt = 'helpers.yt:main'

View File

@@ -12,8 +12,8 @@ echo "Installing python dependencies"
poetry install
# List of commands to check and add or update alias for
commands=("fabric" "fabric-api" "fabric-webui")
# Add 'yt' and 'ts' to the list of commands
commands=("fabric" "fabric-api" "fabric-webui" "ts", "yt")
# List of shell configuration files to update
config_files=("$HOME/.bashrc" "$HOME/.zshrc" "$HOME/.bash_profile")
@@ -69,4 +69,3 @@ if [ ${#source_commands[@]} -ne 0 ]; then
else
echo "No configuration files were updated. No need to source."
fi