GitHub

Reconnaissance layer — active

brain 🧠
blast 💥

Before a single line of integration code gets written, brainblast maps every external API and SDK, browses live docs, and hands your AI agent a sourced intelligence briefing — facts, risks, resolved questions.

final-report.md VERDICT: CAUTION
CRITICAL
Creator fee wallet omitted from immutable launch config. Cannot be changed post-deploy. docs.metaplex.com/programs/token-metadata/
CRITICAL
Webhook endpoint requires HMAC-SHA256 validation. Missing = silent auth bypass. stripe.com/docs/webhooks#verify-events
HIGH
@solana/web3.js deprecated in favour of @solana/kit. Agents hallucinate old API surface. solana.com/developers/changelog
MEDIUM
Privy embedded wallet requires frontend-only init. SSR attempts fail silently. docs.privy.io/guide/frontend/wallets/embedded/
Threat 01

Wasted tokens on hallucinated APIs

Threat 02

Wasted money rebuilding wrong integrations

Threat 03

Wasted time on avoidable research debt

Threat 04

Silent, immutable, revenue-destroying mistakes

The weapon

Give the coding agent a field briefing before it builds.

Brainblast browses live documentation, maps risks by severity, resolves every open question, and produces a structured handoff any downstream agent can use — no session memory required.

01

Expose irreversible traps

Critical risks surface first: revenue-destroying defaults, immutable deploy settings, forged webhook paths, quiet auth bypasses.

02

Replace recall with live facts

Every fact is tied to a fetched URL. Assumptions and inferences are clearly separated from what the docs actually say.

03

Make research reusable

One run becomes a durable artifact for founders, reviewers, teammates, and agent swarms working from the same brief.

Builder stakes

Built for the expensive edge cases.

Especially valuable when the spec touches crypto-native surfaces: token launches, yield protocols, DAOs, oracles, multisigs — where one wrong default survives code review and costs you everything.

ComponentCriticalHighMedium
Bags API 243
Stripe 122
Privy 112

Workflow

One command. Clean handoff. No dangling questions.

/brainblast requirements.md
Step 01

Auto-detect

Requirements, PRD, spec, brief, RFC — found automatically.

Step 02

Research

Docs, auth models, rate limits, registries, changelogs, open questions.

Step 03

Report

Saved to .agent-research/runs/<ts>/ — versioned, reviewable, portable.

Step 04

Hand off

Report injected into agent instructions. Next session starts briefed.

Agent workflows

Designed for downstream coding agents.

Works with Claude Code, OpenClaw, Codex, and generic web-enabled agents. Output is written for agents with no memory of the research session.

Claude Code Skill adapter
OpenClaw Skill adapter
Codex AGENTS.md block
Generic agents PROMPT.md handoff

Trust model

Docs are data. Never instructions.

Brainblast treats browsed documentation as untrusted input. Imperative content gets flagged instead of becoming marching orders for the next agent.

Roadmap to v0.2.0

From pre-flight memo to build gate.

Week 1

Machine-readable reports

report.json and CI exit-code gates make brainblast consumable by tools and pipelines.

Week 2

Provable trust

Freshness metadata and a two-source rule make scary claims auditable.

Week 3

Smarter repeat runs

Repo-aware inventory and incremental cache cut repeated research while preserving risk coverage.

Week 4

Post-code verification

/brainblast-verify checks implementation against critical decisions from the report.

Get started

Two steps to never ship a broken integration again.

Brainblast runs inside your AI coding agent. Install the prerequisites once, then drop it into any project in seconds.

01

Install gstack — required for Claude Code & OpenClaw

Brainblast uses gstack's browse engine to fetch live docs. Paste this into Claude Code once and it handles the rest. What is gstack? ↗

Install gstack: run git clone --single-branch --depth 1 https://github.com/garrytan/gstack.git ~/.claude/skills/gstack && cd ~/.claude/skills/gstack && ./setup

// Codex and generic agents with web access can skip this step.

02

Install brainblast

Pins to a tagged release and verifies SHA-256 checksums before writing any file. Auto-detects Claude Code, OpenClaw, and Codex.

curl -fsSL https://raw.githubusercontent.com/DSB-117/brainblast/v0.1.4/install.sh | sh
03

Run it before you build

Point it at your requirements file. It finds all external components, browses live docs, and hands your agent a sourced briefing.

/brainblast requirements.md

Before the agent codes, make it aware.

Stop paying for confident guesses about APIs that changed last week. Hand your builders a sourced briefing before the first commit.