Skip to content
View holistis's full-sized avatar
☺️
☺️

Highlights

  • Pro

Block or report holistis

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
holistis/README.md

Hey, I'm Abdellah 👋

I build tools that make AI agents more reliable and more secure. Bug bounty analysis, DeFi bot signals, QA automation, browser automation reliability. On the side, I also run an AI health platform.


Security and reliability tooling

MCP server that scans a public Solidity repo through a 7-gate verification framework (Al-Mizaan) to cut LLM false positives. Free pattern search from 1,032 reconciled Sherlock findings, paid full scan via x402. Benchmarked against Slither, including a fix that went upstream.

A CLI that judges a smart contract bug finding against real platform rules before you spend a submission on Sherlock, Immunefi, or Cantina. Runs deterministic gates plus a Defender vs Attacker vs Judge debate. Built from real audit work, not a generic prompt, and honest about where its own calibration is still unproven.

MCP server that returns Sherlock acceptance rates for 12 vulnerability patterns, built from 1,032 reconciled real audit findings across 10 contests. Every number traces back to an actual contest outcome, not an estimate.

Two small guardrails for Playwright and Puppeteer: verify you are still on the right page before acting, and fill contenteditable rich text editors without the silent double write bug. Fixes two failure modes I hit in production, backed by real issue reports.

Keeps Claude Code's session memory lean by rotating logs between a hot recent file and a cold archive. Cuts token cost at session start by roughly 60 to 80 percent. 99 lines of vanilla Node.js, no dependencies.

I also write up the failures, not just the wins: postmortems.


Longevity AI

Longevity AI is an AI-driven health platform for the Dutch market. You answer 28 questions, the system cross-references 10+ organ systems, and generates a personal 6-month nutrition and lifestyle plan. No diagnoses, no medication advice, just direction and something concrete to act on.

Built for people with chronic symptoms but no clear diagnosis, HR teams running wellness checks at scale, and holistic practitioners who want their own client portal. Currently live, roughly 149,000 lines of code, built solo.

It runs with a fair amount of automation behind it: nightly QA that writes and merges its own fixes when tests break, a content pipeline that turns new health research into trilingual blog posts every few hours, and a weekly self-improvement loop where synthetic patient runs get scored and gaps get converted into research queries that make the next report smarter. All of it costs a few cents a week to run.

The stack is TypeScript end to end, CI/CD on Railway, GDPR compliant. Most of the platform repos are private while it is in early access.


Tech stack

TypeScript React Node.js tRPC Vite TailwindCSS MySQL Drizzle Claude API Stripe Railway Clerk


Links

🌐 Platform: longevityai.nl 📬 Contact: info@holistischadviseur.nl

Pinned Loading

  1. al-mizaan-judge al-mizaan-judge Public

    Strict 7-gate validity judge for a smart-contract bug bounty finding — a second opinion before you spend a Sherlock/Immunefi/Cantina submission.

    TypeScript

  2. claude-memory-trim claude-memory-trim Public

    Keeps Claude Code session memory lean by rotating session logs between hot and cold storage. Cuts token cost at session start by 60-80%.

    JavaScript

  3. bug-bounty-intelligence-mcp bug-bounty-intelligence-mcp Public

    MCP server that scans Solidity repos through a 7-gate verification framework (Al-Mizaan) to cut LLM false positives, benchmarked against Slither; free pattern-search from 1,032 reconciled Sherlock …

    JavaScript 5 2

  4. 3ilm-mcp 3ilm-mcp Public

    MCP server: 1,032 verified smart contract vulnerability findings from 10 Sherlock audit contests

    JavaScript 1

  5. automation-guardrails automation-guardrails Public

    Two small guardrails for Playwright/Puppeteer: verify you're on the right page, and fill contenteditable/rich-text editors without the silent double-write bug

    JavaScript