HW–01 · FIELD MANUAL

The Vibecoder's
Keyboard for Security

Six keys. Fully reprogrammable. Each key stores a DuckyScript payload. Press it, and the keyboard types for you. Marble philosopher included.

Marble philosopher reclining on the Prime six-key macro pad

01 · The Layout

What the keys do out of the box

Four 1u keys up top, two 2u keys below. The factory map is the entire modern development workflow, honestly assessed:

01The Manualopens this page. congratulations, it worked.

02Summon Claudeboots claude code. it does the typing.

03Copythe whole file. we know.

04Pasteno judgment.

2u LYolo Modeclaude, permissions off. godspeed.

2u RShip Itcommit. push. pray.

02 · The Language

Every key is a DuckyScript

DuckyScript is the world's simplest automation language: it just types. Each key on the pad holds one script; pressing the key replays it as keystrokes into whatever has focus. If you can type it, a key can do it.

REM <comment>

a comment. the keyboard ignores it, your teammates won't.

STRING <text>

types the text, exactly as written.

ENTER

presses enter. commitment.

DELAY <ms>

waits. use it after opening apps, e.g. DELAY 500.

GUI / CTRL / ALT / SHIFT

modifier combos: GUI c is ⌘C, CTRL GUI q locks a mac.

REPEAT <n>

repeats the previous line n times. use responsibly.

03 · Payloads

Scripts worth stealing

Copy these onto your keys. Written for macOS + a terminal in focus unless noted.

Launch a security review

the key your future incident retro wishes you had pressed.

REM run claude's security review on the current repo
STRING claude /security-review
ENTER

Plan before code

the single highest-leverage claude habit, now physical.

REM make claude think before it types
STRING claude "make a plan before writing any code. wait for my approval."
ENTER

Review the diff before it ships

pairs well with the SHIP IT key. ideally before it.

REM self-review, then hand me the verdict
STRING claude "review your own diff for authz gaps and injection risks before I commit"
ENTER

Yolo mode (the factory 2u)

permissions off. vibes only. godspeed.

REM you chose this
STRING claude --dangerously-skip-permissions
ENTER

Ship it (the other factory 2u)

commit. push. pray.

REM the whole ceremony, one keypress
STRING git add -A && git commit -m "vibes" && git push
ENTER

Second Claude, fresh worktree

parallelize yourself. zero merge conflicts.

REM spin up a parallel claude in its own worktree
STRING git worktree add ../review-lane && cd ../review-lane && claude
ENTER

Compact a long session

keep the decisions, drop the noise.

REM claude code: summarize context, keep going
STRING /compact
ENTER

Walk-away key

an actual security key. lock the screen every time you stand up.

REM macOS lock screen. zero-cost habit.
CTRL GUI q

04 · Make It Yours

Reprogramming the pad

No app, no driver, no account. Your whole keymap lives in one text file.

Plug it in

hold key 01 while plugging the pad in. it mounts as a keyboard.

Edit the DuckyScript

all six keys live in a single .txt file. paste from above, or write your own. you'll also see an led.txt file; leave that one be.

Eject & go

unmount and replug. the keys now type your scripts. that's the whole firmware update.

A note from the security company

This pad types whatever you tell it to. Instantly, confidently, without reading it first. So does your AI. That symmetry is the entire point of this object: speed is a feature, review is the seatbelt. If your team is shipping AI-written code, come talk to us about design-stage risk reviews, or press the security review key and see what falls out.