Projects
Things I've built — infrastructure, tooling, and the startup that came before.
authsome.ai
Credential broker for AI agents. Open-source, local-first.
Agents inherit credentials through environment variables. Every subprocess inherits them. Every piece of code running in that process can read them. Prompt injection doesn't need to be sophisticated to steal them — it just needs to run.
Authsome is the missing layer. Agents request credentials through an HTTP proxy; authsome injects the right authentication header at runtime. The credential never reaches the agent process. Never printed in a log. Never visible to injected content.
- Local-first encrypted vault — credentials never leave your machine
- Proxy-based injection — agents ask for access, never receive secrets directly
- 45 bundled providers — 14 OAuth2 services, 31 API-key services, works out of the box
- Audit logging — every credential access is recorded with agent ID, timestamp, and scope
- Headless environments — works in CI, SSH sessions, cron jobs, background workers
Status: Alpha, open-source (MIT license)
claude-gtm-plugin
54-skill open-source GTM plugin for Claude Code.
The go-to-market layer for solo founders and small teams who use Claude Code. Covers the full GTM surface — content strategy, SEO/AEO, outbound email, social media, LinkedIn, keyword research, competitor analysis, conversion rate optimization, and more.
Each skill is a focused, composable unit — not a monolithic agent. You invoke the skill you need; it reads your brand context, executes the task, and writes output to the right folder.
- 54 skills across marketing, content, SEO, outbound, analytics, and growth
- Works with any project that has a
strategy/brand.mdcontext file - Outputs routed automatically to the correct folder in the workspace
- MIT license — fork it, extend it, use it in your own Claude setup
Status: Live, actively maintained
Ruzo.ai (2022–2024)
Enterprise automated task execution. Now defunct.
Ruzo automated repetitive work across enterprise software — defining tasks that executed across multiple platforms without human intervention. Aimed at the operations layer of B2B teams: the workflows that are too complex for no-code tools but too repetitive to staff a human on.
We shut it down in 2024. Not because the problem wasn't real — it was — but because the market timing was wrong and the go-to-market motion was too long-cycle for the runway we had.
What Ruzo taught me: agents inherit credentials through environment variables and have no identity. Every workflow we built hit the same wall — the agent could execute tasks but there was no way to scope what it could access, audit what it did, or revoke its authority without rotating every secret in the system. That gap is the direct reason authsome exists.