Red
Underdogs Lab
underdogslab.com
Open site ↗ Underdogs LabPixel Rainbow: music, websites and AI agents.
This page plays soft music and moves slowly on purpose. Nothing flashes. Calm mode stops the motion. If sound or motion bothers you, or you have a seizure disorder, enter without sound and tick calm mode.
Act I · The AI vampire
Hi, I’m Pixel Rainbow. I make music, websites and AI agents, mostly after dark.
Grokbots are free, ready-made bots for Grok, the AI chat app on X.
The city sleeps. I don’t. Night is when I build.
Yes, the coffin is a server rack. The vampire thing started as a joke and stuck.
Act II · The music artist
Music came first. Code came later.
I tune my music to 432 Hz. It just sounds warmer to me.
Hover over the strings, drag across them or tap one.Tap a string, or drag your finger across them. The notes are picked so they always sound good together. Turn sound on (bottom right) to hear them.
In for five seconds, out for five. The page moves at the same slow pace.
This skyline is drawn from a sound wave.
Act III · The creative designer
I also design brands and websites, as Pixel Rainbow Studio.
“I make websites that look like nobody else’s.”
Each one gets its own colour of the rainbow. Hover over a site for a closer look.Tap a site for a closer look.
Red
underdogslab.com
Open site ↗ Underdogs Lab
Orange
lambowholesale.com
Open site ↗ Lambo Wholesale
Yellow
orvanipeptides.com
Open site ↗ Orvani Peptides
Green
orvani.group
Open site ↗ Orvani Group
Blue
nicksalazar.net
Open site ↗ Nick Salazar
Indigo
phlowerpharma.llc
Open site ↗ Phlower Pharma
Violet
squishy-finder.com
Open site ↗ Squishy FinderYour site could be next
See more work and get in touch on the studio site.
Visit the studioAct IV · The phreaker and the warrior
Phreaker. Cyber security warrior.
This all started with a payphone.
I started as a phreaker: someone who takes apart how the phone network works.
Phones taught me that anyone can listen in on a network, so you’d better protect yours.
That’s how I got into cyber security.
Today my AI agents talk to each other on a private network. None of them are open to the public internet.
And they all follow a few simple rules.
Grokbots handle the conversations. Hermes agents do the work on my Macs, using Hermes skills that each teach them one job. One “chief of staff” agent keeps them all pointed at the same goal.
The trick is one written goal that every agent reads. I call it Commander’s Intent.
There are two ways to set up the team. Switch between them to see who is in charge in each one.
Point at a layer or tap it to see what it does.Tap a layer to see what it does.
Every mission needs a task and a purpose. When the task goes stale, the purpose still guides the next move. Marine Corps commander’s intent, applied to agent fleets.
Hermes Agent owns the brains on each host. Grokbot owns conversation and the control plane. They meet over a private network, never the public internet.
Both look like silence until something downstream breaks: a pull request that never opened, a digest that never arrived, a host that answered yesterday and answers nothing today.
Fail loud is the cure. But loud without purpose is just noise. The purpose has to live somewhere every agent can read it.
“Plans will go awry, instructions and information will be unclear and misinterpreted, communications will fail.”
Six rungs, in order. None of them is “wait for orders.”
A Hermes host that hit the break Where it is now
1 of 6
Go back to COMMANDERS-INTENT.md before anything else. The task may be stale. The purpose usually isn’t.
2 of 6
Test the failure before calling it a blocker. A key expired, an endpoint moved: check it, don’t assume it.
3 of 6
Change the method, not the mission. Any path that still serves the purpose and stays inside the hard lines is fair game.
4 of 6
If it can be undone, do it. Initiative is wide on how. Silence from above is not permission to sit still.
5 of 6
When authority is needed (spending, publishing, DNS, secrets, anything destructive), send context, options, a recommendation and a confidence. One ask, ready to approve.
6 of 6
An escalation parks one thread, not the fleet. Every other task keeps going while the human decides.
Rung 1 of 6
Checksums and wake lines. Every version of the intent has a checksum, and every agent opens its session with a wake line naming the version it holds. Drift gets caught at the door, not in a postmortem.
Shared memory. The approved file becomes a Hindsight mental model named commanders-intent. If memory and the file disagree, the file wins.
The Hermes Macs and the Grokbot controller meet on a Tailscale tailnet, never the public internet. Ask and surgery stay inside it. Everything else is reached on purpose, not through a public bind.
If SSH becomes chat transport, the lanes invert, and you spend the week fighting timeouts instead of shipping.
| Service | Hermes | Controller |
|---|---|---|
| Cloud model providers | ||
| Bitwarden | ||
| Hindsight | ||
| GitHub | ||
| Cloudflare | ||
| Grokbot cloud |
Grok is the AI chat app from xAI, built into X. A Grokbot is a ready-made helper you add to it. These are the ones I built, and they’re free: open one on x.ai, sign in to Grok, and it’s yours to use.
VeilBreaker is an untrusted-content guard and activity watch for Grok Bot. It screens every web page, email, file, and tool output an agent reads, and flags disguised prompt injections before they reach the model.
It decides with fixed rules: no AI model in the loop, no dependencies and no API keys. Every technique it covers cites its paper or CVE (a public security bug ID).
On a sealed test set the builder never saw, it flagged 1,634 of 2,242 disguised injections (72.9%), up from 35.6% in v0.1.
It flagged 0 of 320 realistic everyday samples: emoji, emoji flags, Arabic/Hebrew, Persian/Hindi, Russian/Greek, embedded images, colour codes and hashes, normal HTML.
Limit: it spots hidden tricks, not attacks written in plain visible words, so pair it with an AI classifier.
VeilBreaker is not in the Grok Bot plugin directory. It installs as a local connector straight from the public repo: github.com/shagghiesuperstar/veilbreaker.
The bot template is VeilBreaker Guard & Watch. It routes untrusted reads through VeilBreaker, and it keeps a daily digest and a weekly dashboard.
Clean Room is a Grok Bot template for legitimate reverse engineering. It turns software you own, or are allowed to examine, into one finished rebuild prompt. It never builds, runs, or ships the software. The output is the prompt.
Only for software you own or have written permission to examine. Not for piracy, cloning a competitor, or bypassing a licence.
Built on REA (Reverse Engineer Anything) by morluto. Open the template on x.ai, sign in to Grok, and it is yours to use.
Hermes Agent is a free, open-source AI agent made by Nous Research. It runs on your own computer and gets real work done. I build add-ons and tools for it as shagghiesuperstar on GitHub.
Merged into the official Hermes plugin catalog Adds my Bento email plugin to the official Hermes plugin catalog. It has safety checks built in so nothing sends by accident. NousResearch/hermes-agent · pull request #133524A Hermes skill is a short instruction file that teaches a Hermes agent one job, such as checking a release or reading a log. My library has 181 of them in 12 categories, and every one is free to use under the MIT license.
Act V · People and AI
Where I think AI is going.
I don’t think AI replaces people. The good stuff happens when we work together.
I still make the calls. AI just helps me get more done.
This door is the future. Scroll to open it.
Take a slow breath while it does.
Here’s what I think is on the other side.
This door is the future. Here’s what I think is on the other side.
This is a fractal: the same shape repeats at every size.
That’s how I picture AI going well: lots of minds, people and machines, working toward one goal.
Every agent I build is one small piece of that bigger picture.
A fractal repeats one shape at every size. That’s how I picture AI going well: people and machines, lots of minds, one goal.
The music, colour and pace changed with each chapter, following an idea called the Joy Protocol. Here is your visit, in numbers.
It’s just for relaxing. It isn’t medical treatment.