Ask Fable First
While reading my morning newsletters, I came across a GitHub repository called Token Monitor. The repository, which has more than 2,000 stars, hosts an application that tracks tokens and cost from dozens of AI subscriptions and tools. It also has a nice menu bar icon on macOS. Given all the issues with today's vibe-coding app landscape and recent security headlines, I was a little wary of blindly installing the application from its repository.
Enter Fable. As I'm sure many are aware, Fable is the public version of Anthropic's Mythos model which has extra guardrails that prevent it from becoming an overpowered hacking tool. Further, Fable 5.1 can discover software vulnerabilities, though not to develop exploits for them. I have a Claude subscription with access to the Fable model.
Because Token Monitor’s source code was in a public repository, asking Fable to scan the code for any vulnerabilities or malware was trivial. Fable gave the source for the most recent release a clean bill of health and I felt much better about installing the application on my system.
For those who may be in a similar situation, this is a straightforward path for some peace of mind.