Omri Ben-Shoham

The one where Skim learns to smell a phishing email from across the room and does it all locally, offline, without phoning a single reputation service. Your inbox, now with a healthy sense of suspicion.

New

• Phishing detection, built right in. Skim now quietly vets every message for the classic tells and warns you before you click something you'll regret.

  • Sender checks reads SPF / DKIM / DMARC results, catches "reply goes to a totally different domain" tricks, spots when the friendly display name hides a stranger's address, and flags lookalike domains (paypa1.com, we see you).

  • Link checks a link that says one thing but opens another, user@evil.com sleight of hand, and raw-IP links get stopped cold. Shorteners, plain http, punycode, weird ports and endless subdomains get side-eye too but only when the sender already looks shady, so your newsletters full of tracking redirects don't set off alarms.

  • A link gate click a suspicious link and Skim tells you where it actually goes and lets you bail or proceed. No more mystery destinations.

  • "Check for phishing" with AI one tap to have Skim AI read the sender, the auth results, and the links, then explain the whole thing in plain language.

• All of it deterministic, all of it offline. No thresholds to tune, no data leaving your machine.

I ve been thinking about this a lot lately.

For Second Brain, the answer was clear: the setup. Terminal. Git. Cloudflare configuration. People wanted to try it but the friction was too high.

Hey everyone!

First update since the launch, and it's one a bunch of you asked about in the launch thread.

Scribble now tracks Claude alongside ChatGPT, Gemini, Perplexity, Copilot and Grok, so that's six engines, every tracked query, fetched every 24 hours.