Lead Data Engineer at the University of Glasgow, exploring the future of data and AI through autonomous agents, and agentic workflows

Scotland, United Kingdom
Joined June 2023
Gul Saeed Khattak retweeted
How do you let an AI agent run shell commands without letting it wreck your computer? That's the headache Vercel just solved. Agents get much more useful with a shell (the command line, like bash). They can list files, read CSVs, run scripts and search code, the same way a developer works. But giving an AI real shell access is risky. One bad command, like deleting files or leaking secrets, and you have a problem. So every team built its own setup: 1Write a custom "run command" tool 2Build or rent a sandbox (an isolated space where the agent can't touch anything important) 3Glue the two together Lots of work, and easy to get wrong. Vercel's AI SDK now ships both parts, ready-made: → A bash tool. One line of code adds shell access to your agent.
→ Pluggable sandboxes. You choose how isolated the agent is. The sandbox options: • In-memory: fast and cheap, with a pretend file system that lives only in memory 
• Full virtual machine: heavier, but a real computer that can install software and run programs Example: put a sales.csv in a restricted in - memory sandbox, give the agent the bash tool, and let it analyse the file. It works only inside the sandbox. It can't reach your actual machine. Why it matters: • Safety by default: the agent only sees what you put in the sandbox 
• Less custom code: no shell tool or isolation layer to build yourself 
• Flexible: start cheap in memory, switch to a full VM later without rewriting your agent. Think of it as a sandpit. The agent can dig and build freely, but it can't wander out into the street. A detail most people will miss: the in-memory option isn't a real shell. It's a fake bash called just-bash, with commands like ls and grep rewritten in TypeScript. That's why it's so cheap, and why it can't run real programs. One note: the function is called experimental_createBashTool, so it's still experimental and may change. Links in the reply 👇
1
1
83
Cloudflare open-sourced the AI security auditor it uses to hunt bugs Most AI security tools have one big flaw: the same agent finds the bug and decides it's real. Cloudflare just open-sourced a fix. That's the smartest rule in Cloudflare's new open-source security skill, and it's now one of the fastest-growing repos on GitHub. The problem: Ask an AI agent to "find security bugs" and it will find plenty. Many won't be real. AI agents are confident, and they rarely argue with themselves. So security teams end up wasting hours checking false alarms. Cloudflare's fix is a skill (a set of instructions your coding agent follows) called security-audit. You install it, point your agent at a codebase, and say: "security audit this codebase" Then it runs six phases: 1Reconnaissance: map the code, the trust boundaries and where user input enters 2Hunting: separate agents search for different attack types in parallel, like injection, access control and business logic 3Validation: for every suspected bug, a fresh agent tries to prove it wrong 4Structured output: findings saved as machine-readable JSON, checked against a schema 5Independent verification: another pass checks each finding against the real source code 6Report: a clean write-up for humans Phase 3 is the key. Finding and checking are done by different agents, like having a second developer review your code instead of reviewing it yourself. Why it matters: → It came from real use. It's the early version of the system Cloudflare built to hunt bugs across its own repos. 
→ It works with any coding agent that supports tools and parallel sub-agents, like Claude Code or Codex. 
→ It's MIT licensed, so free to use anywhere. The catch: Six phases with many agents use a lot of tokens. And no AI audit replaces a human security review. It finds candidates faster; it doesn't give you a guarantee. What I find interesting as someone building agent tools: this week we saw attackers exploiting PHP2Shell hours before the patch. Defenders need speed too. A skill like this lets any team run a serious audit before attackers do. Links in the reply 👇 💻 Repo: github.com/cloudflare/securi…
2
4
79
Gul Saeed Khattak retweeted
The Last Economy is now available in 26 languages. From Korean to Spanish, Hindi to Portuguese, the book on what comes after AI changes everything is now free to read in your language. thelasteconomy.com
3
6
751
Gul Saeed Khattak retweeted
Someone trained an AI on candlestick charts instead of text LLMs learned the language of words. Kronos learned the language of markets. Everyone on crypto Twitter talks about "AI trading". This is what a real research model for it looks like, and it's open source. The problem the paper starts from: Big pre-trained models worked so well for text that researchers built the same thing for time series (data that changes over time, like prices or temperatures). These are called Time Series Foundation Models. But on financial candlestick data, they often do worse than smaller, specialised models. Market data is just too noisy. So the team built one model only for that. How it works: A large language model reads text as tokens and predicts the next one. Kronos does the same with K-lines, also called candlesticks: the bars on a price chart showing open, high, low, close and volume. To Kronos, a price chart is just a long sentence. What makes it interesting: → Trained on data from over 45 exchanges around the world
→ Works zero-shot, meaning no extra training on your data
→ Does price forecasting, volatility forecasting, and generates synthetic price data
→ Tiny by AI standards: 4.1M to 102.3M parameters. Runs on a normal laptop.
→ A live demo forecasts BTC/USDT as a range of possible paths, not one magic price One thing most reposts miss: this isn't new. The paper came out in August 2025. It's resurfacing now because of the AI trading hype. The catch: A model that predicts patterns does not make you money. Markets react to news, people and events that no chart contains. This is a research tool, not a trading bot. What I find interesting as a data engineer: the foundation model idea, one big pre-trained model you reuse everywhere, is moving from text to every kind of data that changes over time. Finance is just the noisiest test. Links in the reply 👇
2
1
62
Gul Saeed Khattak retweeted
IRONY : Sisyphus pushed a boulder up a hill forever. We push our usage limits to zero, wait for reset day, and call it productivity.
Day 17/ Bet you thought we forgot, but no, it’s reset day today. Also good time to remind you to get Daybreak Blue access, it only takes 15 mins and you don’t want to have to do it in the middle of an incident.
1
57
Gul Saeed Khattak retweeted
Claude Duet is Anthropic's answer to Grok Bot, OpenAI's Dot and Meta's Muse. Different names, mostly the same idea: an AI that works in the background for you. Everyone is copying everyone now.
Claude Duet is the shift from "ask AI" to "review what AI found". Proactive agent, built on Opus 5.5, checks with you before acting. Waitlist, US
1
34
466K views. 10K bookmarks. Built on a quote that was never said. 466K views. 3.8K likes. 10K bookmarks. All built on a quote that, according to a fact-check, was never said. A viral post this week opened with: "Elon Musk posted an idea that hit 27 million views." Then came the quote, then a step-by-step plan to let a Grok bot run a money-making website for you. Grok itself replied under a quote of the post: no Elon post matches the quote or the 27M views. Recycled hype from promo accounts. Look at the numbers again. Bookmarks are almost 3x the likes. People didn't just enjoy it. They saved it as a plan to follow. Thousands of people filed away a playbook whose first line, by that check, isn't real. And the account behind it? Six months old. Four username changes. A paid blue tick. Readers saw a tick and a famous name, and stopped asking questions. This isn't new, and it isn't only bots. → An MIT study of 11 years of Twitter found false news was 70% more likely to be retweeted than the truth. The cause was people, not bots. False news feels new, and new things get shared. 
→ A Columbia and Inria study found 59% of news links shared on Twitter were never clicked at all. 
→ A satire site once posted "70% of Facebook users only read the headline of science stories." The article body was fake filler text. It was still shared 46,000 times. Here's the irony: A big following works like borrowed trust. Readers stop asking "is this true?" and start asking "is this useful to me?" A blue tick and a famous name in the first line make checking feel unnecessary. And the more useful a post looks, the less people check it. A "prompt to make money" gets saved, not questioned. Even the plan itself deserves a second look. One step says the bot negotiates deals "by email, in your name". That means an AI writing to real people as you, without you reading it first. What I take from this, as someone who posts about AI every day: • A famous name in the first line is a reason to check, not a reason to trust 
• A blue tick means someone pays for X, not that their claims are true
• Bookmarks measure hope, not truth 
• If a claim can't link to its source, it's a story, not a fact Note: I have deliberately left out the account name. The problem isn't one poster. It's 10,000 people saving a claim nobody checked Sources are in the reply 👇
2
2
1
58
Hermes Agent makes 3D models from text. But the real news is bigger than that. An AI agent that makes 3D models from text? Not new. Meshy, a text-to-3D tool, has an MCP server (a standard way to plug tools into AI agents). Any agent that supports MCP, including Claude and Codex, can already connect to it. Agents asking permission before acting? Also not new. Claude Code and Codex do that all the time. So what did Nous Research actually add with the new Meshy plugin for Hermes Agent? The new part is the price check. A normal approval asks: "Allow this tool?" Hermes asks: "This costs 15 credits. Go ahead?" In the demo, someone asks for a boss enemy for their Godot game. Hermes picks the settings (15,000 triangles, 4K textures, a GLB file for Godot), tells them the cost, and only spends after they say yes. That's a small change, but an important one. Agents are starting to spend real money: credits, API calls, cloud resources. Permission alone isn't enough. You need to know what it costs before you click yes. Nous also added polish on top: → One-line install from the official plugin catalog
→ Models render in the chat, and rigged characters animate there
→ A gallery of every model and prompt you've made
→ Short preview videos on messaging apps, so you can create from your phone
→ 3D-print prep: fixing problems, splitting into parts, handing off to a slicer The catch: you need a Meshy Pro plan and API key, and every model costs credits. What I find interesting as someone building agent tools: as agents start spending money for us, every approval should show the price, not just ask permission. Hermes is one of the first to make that the default. Links in the reply 👇
1
2
5
2,288
How do you let an AI agent run shell commands without letting it wreck your computer? That's the headache Vercel just solved. Agents get much more useful with a shell (the command line, like bash). They can list files, read CSVs, run scripts and search code, the same way a developer works. But giving an AI real shell access is risky. One bad command, like deleting files or leaking secrets, and you have a problem. So every team built its own setup: 1Write a custom "run command" tool 2Build or rent a sandbox (an isolated space where the agent can't touch anything important) 3Glue the two together Lots of work, and easy to get wrong. Vercel's AI SDK now ships both parts, ready-made: → A bash tool. One line of code adds shell access to your agent.
→ Pluggable sandboxes. You choose how isolated the agent is. The sandbox options: • In-memory: fast and cheap, with a pretend file system that lives only in memory 
• Full virtual machine: heavier, but a real computer that can install software and run programs Example: put a sales.csv in a restricted in - memory sandbox, give the agent the bash tool, and let it analyse the file. It works only inside the sandbox. It can't reach your actual machine. Why it matters: • Safety by default: the agent only sees what you put in the sandbox 
• Less custom code: no shell tool or isolation layer to build yourself 
• Flexible: start cheap in memory, switch to a full VM later without rewriting your agent. Think of it as a sandpit. The agent can dig and build freely, but it can't wander out into the street. A detail most people will miss: the in-memory option isn't a real shell. It's a fake bash called just-bash, with commands like ls and grep rewritten in TypeScript. That's why it's so cheap, and why it can't run real programs. One note: the function is called experimental_createBashTool, so it's still experimental and may change. Links in the reply 👇
1
1
83
Someone trained an AI on candlestick charts instead of text LLMs learned the language of words. Kronos learned the language of markets. Everyone on crypto Twitter talks about "AI trading". This is what a real research model for it looks like, and it's open source. The problem the paper starts from: Big pre-trained models worked so well for text that researchers built the same thing for time series (data that changes over time, like prices or temperatures). These are called Time Series Foundation Models. But on financial candlestick data, they often do worse than smaller, specialised models. Market data is just too noisy. So the team built one model only for that. How it works: A large language model reads text as tokens and predicts the next one. Kronos does the same with K-lines, also called candlesticks: the bars on a price chart showing open, high, low, close and volume. To Kronos, a price chart is just a long sentence. What makes it interesting: → Trained on data from over 45 exchanges around the world
→ Works zero-shot, meaning no extra training on your data
→ Does price forecasting, volatility forecasting, and generates synthetic price data
→ Tiny by AI standards: 4.1M to 102.3M parameters. Runs on a normal laptop.
→ A live demo forecasts BTC/USDT as a range of possible paths, not one magic price One thing most reposts miss: this isn't new. The paper came out in August 2025. It's resurfacing now because of the AI trading hype. The catch: A model that predicts patterns does not make you money. Markets react to news, people and events that no chart contains. This is a research tool, not a trading bot. What I find interesting as a data engineer: the foundation model idea, one big pre-trained model you reuse everywhere, is moving from text to every kind of data that changes over time. Finance is just the noisiest test. Links in the reply 👇
2
1
62
Gul Saeed Khattak retweeted
More Details: VoxCPM2 and Drama 3 are models. But most people don't want a model. They want an app. That's why VoiceStudio gained 3,000+ stars on GitHub today. It's an open-source, fully local alternative to ElevenLabs. Instead of one model, it bundles many into one picker: → 16 text-to-speech engines, including CosyVoice 3, IndexTTS 2.5, MOSS-TTS and dots.tts
→ 11 speech-to-text engines for dictation and subtitles
→ Voice cloning, voice design, video dubbing and audiobooks
→ Runs on your own machine. No account, no API key, no cloud. And here's the interesting part. I checked the engine list: ✅ VoxCPM2 is in.
❌ Drama 3 is not. Remember the licence difference from my last post? VoxCPM2 is Apache 2.0, free for anyone to build on. That's exactly the kind of model apps like this can pick up and ship. One more catch: VoiceStudio itself is AGPL-3.0. Free to use, but if you change it and offer it as a service, you must share your code. So the open voice stack now looks like this: Models (VoxCPM2) → Apps (VoiceStudio) → You 👇 github.com/debpalash/VoiceSt…
1
44
IRONY : Sisyphus pushed a boulder up a hill forever. We push our usage limits to zero, wait for reset day, and call it productivity.
Day 17/ Bet you thought we forgot, but no, it’s reset day today. Also good time to remind you to get Daybreak Blue access, it only takes 15 mins and you don’t want to have to do it in the middle of an incident.
1
57
VoxCPM2 → VoiceStudio From model to desktop app: the open voice journey.
Follow-up post: VoxCPM2 and Drama 3 are models. But most people don't want a model. They want an app. That's why VoiceStudio gained 3,000+ stars on GitHub today. It's an open-source, fully local alternative to ElevenLabs. Instead of one model, it bundles many into one picker: → 16 text-to-speech engines, including CosyVoice 3, IndexTTS 2.5, MOSS-TTS and dots.tts
→ 11 speech-to-text engines for dictation and subtitles
→ Voice cloning, voice design, video dubbing and audiobooks
→ Runs on your own machine. No account, no API key, no cloud. And here's the interesting part. I checked the engine list: ✅ VoxCPM2 is in.
❌ Drama 3 is not. Remember the licence difference from my last post? VoxCPM2 is Apache 2.0, free for anyone to build on. That's exactly the kind of model apps like this can pick up and ship. One more catch: VoiceStudio itself is AGPL-3.0. Free to use, but if you change it and offer it as a service, you must share your code. So the open voice stack now looks like this: Models (VoxCPM2) → Apps (VoiceStudio) → You
24
Gul Saeed Khattak retweeted
Follow-up post: VoxCPM2 and Drama 3 are models. But most people don't want a model. They want an app. That's why VoiceStudio gained 3,000+ stars on GitHub today. It's an open-source, fully local alternative to ElevenLabs. Instead of one model, it bundles many into one picker: → 16 text-to-speech engines, including CosyVoice 3, IndexTTS 2.5, MOSS-TTS and dots.tts
→ 11 speech-to-text engines for dictation and subtitles
→ Voice cloning, voice design, video dubbing and audiobooks
→ Runs on your own machine. No account, no API key, no cloud. And here's the interesting part. I checked the engine list: ✅ VoxCPM2 is in.
❌ Drama 3 is not. Remember the licence difference from my last post? VoxCPM2 is Apache 2.0, free for anyone to build on. That's exactly the kind of model apps like this can pick up and ship. One more catch: VoiceStudio itself is AGPL-3.0. Free to use, but if you change it and offer it as a service, you must share your code. So the open voice stack now looks like this: Models (VoxCPM2) → Apps (VoiceStudio) → You
VoxCPM2 vs Drama 3: fully open vs open with strings attached Both are open text-to-speech models (TTS, software that turns text into spoken audio). Both went viral this month. At first they look the same, but they're not. Both can: • clone voices • create new voices • change emotion and speaking style • make speech sound sad, angry, excited, calm or dramatic • handle character-like voices rather than plain robotic TTS So I kept asking: Where is the actual difference? The answer is not simply “Drama 3 is expressive.” VoxCPM2 is expressive too. For example, with VoxCPM2 you can ask: “Speak this slowly, sounding tired and nervous.” Or design a voice like: “An older Scottish man with a deep, warm, slightly raspy voice.” Drama 3 can do similar things. But Drama 3 seems to go further in what happens after the first generation. Imagine you generate this scene: “I thought you had left. [whisper] Please don’t tell anyone. [angry] And don’t ever do that again. [laughs] I’m joking.” Now you decide: “Make the second line more frightened.” “Keep everything else the same.” “Change only this word.” “Redo this section, but make it softer.” That is where Drama 3 becomes interesting. It treats the generated performance more like something you can keep directing and editing, rather than simply generating a fresh take each time. So the difference is not: VoxCPM2 = expressive Drama 3 = expressive Both are. It is closer to: VoxCPM2: generate and control the voice. Drama 3: generate, then keep refining the performance at scene, line or section level. That sounds like a small difference. For storytelling, podcasts, games and multi-character audio, it could be a very important one. Some more differences Drama 3 : 83 languages. VoxCPM2 does 30. Drama 3 is the #1 open model on the Artificial Analysis TTS leaderboard. VoxCPM2 is actually free. It's Apache 2.0, so even a big company can sell a voice service built on it. It's a small 2B model. Drama 3 is 35B. Its licence is free for research and for businesses under $500k a year in revenue. A hosted TTS service needs a separate licence from Fish Audio. The real choice now is licence and hardware. 👇 Links 🎙️ VoxCPM2: huggingface.co/openbmb/VoxCP…
🎭 Drama 3: huggingface.co/fishaudio/dra…
1
1
73
Gul Saeed Khattak retweeted
We just saw this happen with PHP2Shell. The bug leaked on Monday, attacks began Tuesday morning, and the patch landed that afternoon. The patch window isn't shrinking. It's gone.
The window to patch software bugs is collapsing Of the bugs hackers actually exploit, ~87% are now being attacked on or before the day the bug is public knowledge That share was 23% in 2020 Charts of the Week: a16z.news/p/chart-of-the-wee…
1
52