x-demand-radar · Evening Heartbeat
📡 数据来源: HN + GitHub Search API + GitHub Trending
🕘 时间: 2026-07-15 21:01 CST (Evening Heartbeat)
⚠️ 模式: Day 21 连续降级 — X/Twitter Auth Blocked (Pitfall #162, Day 7) + Tavily 432 (Pitfall #167, Day 4)
📊 上午基线: 2026-07-15-0903 — 37 signals (10 ROCKET + 27 ongoing)
🔔 AUTH REMINDER: 第 21 天连续 @VeriSupplier session + Pitfall #162 (browser_console 阻断, Day 7) + Tavily 432 阻断 (Day 4). HN+GH only 路径稳定产出 10 fresh signals. 若需恢复 X/Twitter: 1) 浏览器登录 @claw0x → 复制新 auth_token; 2) 编辑 ~/.hermes/config.yaml → browser.allow_unsafe_evaluate: true.
🔥 Top 10 ARBITRAGE Signals (Narrative-Priority Rank)
| # | Signal | Score | Source | Key Insight |
|---|---|---|---|---|
| 1 | 🚀 ROCKET | 5,394 | GH Search #1 (805⭐ 3d) | Clodex IDE — Local-first zero-trust agentic IDE. 自主软件开发新范式 |
| 2 | 🚀 ROCKET | 2,192 | HN Show #2 (217 pts) | Clawk — Disposable Linux VM for AI agents. Agent 沙箱刚需 |
| 3 | 🚀 ROCKET | 1,750 | GH Search Fresh (307⭐ 1d) | QuantumByte — Intent-to-app builder engine. 对标 Bolt.new 开源版 |
| 4 | 🚀 ROCKET | 1,608 | HN Top #1 (643 pts) | Bonsai 27B — PrismML 手机端运行 27B 模型. 端侧 AI agent 突破 |
| 5 | 🚀 ROCKET | 1,561 | HN Show #1 (262 pts) | Juggler — JUCE 创始人做的 GUI coding agent. 开源新赛道 |
| 6 | 📈 SUSTAINED | 1,446 | GH Brands #2 (459⭐) | pilotfish — Multi-model orchestration for Claude Code |
| 7 | 📈 SUSTAINED | 224 | GH Trending #5 (497⭐/day) | Destructive Command Guard — Agent 安全防火墙. 企业级刚需 |
| 8 | 🛡️ SAFETY | 2,028 | HN Top #2+#3 (1014 combined) | Claude 安全双连发 — "stop saying load-bearing" + "memory heist" |
| 9 | 🛡️ SAFETY | 808 | HN Top #4 (404 pts) | Cursor 0day — Full disclosure of Cursor IDE vulnerability |
| 10 | 🔧 DEV | 287 | HN Show #3 (98 pts) | Jacquard — Programming language for AI-written, human-reviewed code |
📈 上午信号 Momentum 追踪
以下上午 Top 5 信号持续在 GitHub Trending 上表现强劲（已验证 stars/day 增长）:
| Signal | Morning Status | Evening Status |
|---|---|---|
| mattpocock/skills | 2,160⭐/day · GH Trending #3 | 2,160⭐/day · GH Trending #3 (维持) |
| Nutlope/hallmark | 1,119⭐/day · GH Trending #2 | 1,119⭐/day · GH Trending #2 (维持) |
| HKUDS/Vibe-Trading | 924⭐/day · GH Trending #6 | 924⭐/day · GH Trending #6 (维持) |
| Dicklesworthstone/dcg | (new entrant evening) | 497⭐/day · GH Trending #5 ⬆️ |
| coreyhaines31/marketingskills | (new entrant evening) | GH Trending #11 ⬆️ |
🆕 今晚新增发现 (7 new vs morning)
相比上午 09:03 CST 扫描，今晚新发现 7 个高价值信号:
- Clodex IDE — Agent-driven IDE, 3 天 805⭐. 不是又一个 chat UI, 是 local-first + zero-trust 的自主开发范式
- Clawk — Agent 沙箱工具, 8 天 505⭐. 为 Claude Code/Codex 提供 disposable VM
- QuantumByte — App builder, 1 天 307⭐. 意图→可用应用, 对标 Bolt.new 的开源替代
- Juggler — JUCE 创始人转型 AI agent, 262 HN pts. 音频传奇人物的 AI agent 首秀
- Claude Security — 内存泄露 + load-bearing 两连发, 合计 1014 HN pts + 796 comments
- Cursor 0day — Mindgard 全披露 Cursor IDE 漏洞, 404 HN pts
- Jacquard — AI-first 编程语言, 98 HN pts. 专为 AI 生成代码设计的语言范式
🧠 Key Pattern: 安全 × 端侧 AI 双热点
今晚信号一个显著的 pattern shift:
- 安全/Defense 占据 3/10: Claude memory heist + Cursor 0day + Destructive Command Guard. Agent 安全从 niche → 刚需, 市场正在快速成熟。
- 端侧 AI 首次进入 Top: Bonsai 27B (643 HN pts) 是雷达运行以来首个 "on-device LLM" 进入 Top 的信号, 标志端侧推理进入主流讨论。
- Agent IDE 赛道拥挤但差异化清晰: Cursor (0day) → Clodex (local-first) → Juggler (GUI) → Clawk (sandbox), 每个都在解决不同的 agent 开发痛点。
🌐 域名套利建议
| Priority | Keyword | Domain Candidates | Est. Cost | Window |
|---|---|---|---|---|
| P0 ⚡ | clodex-ide | clodex-ide.com, agentic-ide.app | <$50 | 24-72h |
| P0 ⚡ | bonsai-27b | bonsai-27b.app, ondevice-llm.com | <$50 | 24-72h |
| P0 ⚡ | agent-sandbox | agent-sandbox.dev, disposable-agent.com | <$30 | 24-72h |
| P1 🔥 | claude-security | llm-memory-attacks.dev, prompt-defense.com | <$30 | 7d |
| P1 🔥 | cursor-0day | ai-ide-vuln.dev, aisec-tools.com | <$30 | 7d |
| P2 📊 | quantumbyte | intent-to-app.com, app-builder-engine.dev | <$20 | 14d |
| P2 📊 | juggler-agent | gui-coding-agent.com, juggler-ai.app | <$20 | 14d |
🐞 风险提示
- Tavily 432 连续第 4 天: web_search/web_extract 零输出, X/Twitter 的 content scraping 和 web signal 均不可用. HN+GH only 路径已验证可持续产出 (10 signals).
- X Auth Blocked 第 7 天: browser_console
document.cookie被 Hermes safety guard 阻断, 注入路径失效. 需用户手动编辑~/.hermes/config.yaml恢复. - GitHub Trending 稳定: 5/10 signals 在 GitHub Trending Today 上有验证, 信号池健康.
📋 Scan Parameters
scanType: evening-heartbeat
slot: evening
mode: HN+GH fallback (Day 21 degraded)
layers:
✅ HN Top Stories (Firebase API, 500 ids → 30 fetched → 12 AI-relevant)
✅ HN Show Stories (Firebase API, 80 ids → 18 AI-relevant)
✅ GitHub Search API (ai+OR+llm+OR+agent, created:>2026-07-07, per_page=15)
✅ GitHub Search API (brands: claude+OR+openai+OR+grok, per_page=10)
✅ GitHub Trending Today (browser_navigate, 13 repos extracted)
✅ GitHub Search API (fresh: mcp+OR+agent+OR+llm, created:>2026-07-13)
❌ X/Twitter home timeline (auth blocked)
❌ X/Twitter focused queries (auth blocked)
❌ X/Twitter vendor profiles (auth blocked)
❌ X/Twitter News Explore Tab (auth blocked)
❌ web_search (Tavily 432)
❌ web_extract (Tavily 432)
xStatus: REACHABLE + AUTH_BLOCKED (Pitfall #162, Day 7)
webStatus: DEGRADED — Tavily 432 Day 4 (Pitfall #167)
runtime: ~5 min (heartbeat mode)
Generated: 2026-07-15 21:01 CST · Report ID: 2026-07-15-2101 · x-demand-radar v4.0 (Day 21 degraded)