Likely scam.
This post exhibits strong coordinated inauthentic behavior. Multiple reactivated accounts with long dormancies are posting founder-story content across cross-subreddit drops, and the external domain has been pushed by at least 5 different accounts in prior reports—a clear indicator of the same operator running a sock-puppet network to artificially amplify a project launch. The comment section contains structurally coordinated responses from these same aged/reactivated accounts.
Hugin marked this as likely scam because multiple structural signals stacked high enough that the post should not be treated as organic.
- The final verdict text came from the AI verdict engine using the stored structural signal block.
- The scan reviewed 10 comments and 9 unique commenter accounts.
- Signal count: 3 high, 2 medium, 0 low flags; 11 coordination-class signals.
An account that sat silent for months and then suddenly wakes up to praise a promotional post is almost always a sold or recovered handle being weaponised for credibility.
Full evidence trailSources, public checklist, values lens, network map, account coverage, archive, and sharing tools.
Review before sharing.
Hugin reports are evidence packets, not accusations. Use the rating as a prompt to inspect sources, limitations, and archived material before quoting a claim elsewhere.
I built Wren, an open-source AI agent platform using Claude Opus 5.5
Source checks
19 public comments loaded for r/claude.
Public comment bodies were retained with the report snapshot.
2 author age values were unavailable after Reddit profile JSON, old Reddit profile HTML, and archive fallbacks.
8 selected author histories checked; 2 partial, 8 archive fallback.
10 reply edges mapped.
0 same-hand writing pairs surfaced.
4 unique external identifiers extracted.
5 prior archive matches returned.
Show your work
Deterministic explanation of the stored scan inputs behind the verdict. This is not hidden model reasoning; it is the evidence checklist Hugin can show publicly.
Hugin marked this as likely scam because multiple structural signals stacked high enough that the post should not be treated as organic.
- The final verdict text came from the AI verdict engine using the stored structural signal block.
- The scan reviewed 10 comments and 9 unique commenter accounts.
- Signal count: 3 high, 2 medium, 0 low flags; 11 coordination-class signals.
- The scan crossed the high-risk threshold through stacked structural evidence.
What pushed risk up
An account that sat silent for months and then suddenly wakes up to praise a promotional post is almost always a sold or recovered handle being weaponised for credibility.
- u/TamoghnaKabi — sat dormant 305d then lit up
- u/this_happened_rigged — sat dormant 2910d then lit up
- u/shravanrevanna — sat dormant 149d then lit up
- u/dilberry — sat dormant 66d then lit up
- u/slowgojoe — sat dormant 92d then lit up
- u/luxx93 — sat dormant 64d then lit up
Posting the exact same link in 2+ different subreddits is the textbook fingerprint of an affiliate or marketing operator — not someone organically sharing a discovery.
- u/this_happened_rigged dropped i.redd.it/esv7uyd9mtjg1.jpeg in r/sourcandy, r/candy
- u/shravanrevanna dropped blog.shravanrevanna.me/reverse-engineering-a-xiaomi-camera-into-a-self-tracking-robot in r/IMadeThis, r/SideProject
- u/shravanrevanna dropped i.redd.it/zd4vr7uc3ouh1.png in r/ai_trading, r/AgentsOfAI
- u/shravanrevanna dropped i.redd.it/3iy91nz75auh1.png in r/robotics, r/computervision
- u/shravanrevanna dropped github.com/user-attachments/assets/fe982647-a734-4b3d-9abf-329c15c8c714 in r/claudeskills, r/programming
- u/dilberry dropped youtu.be/QfXK53FTDuE in r/BMWX3, r/BMW, r/bmwix3, r/iX3…
A run of polished first-person business lessons across adjacent SaaS, AI, marketing, and productivity subreddits is a common warm-up pattern for stealth promotion. It is not proof by itself; it is a strong review signal.
- u/shravanrevanna — 13 recent self-posts across r/SideProject, r/ClaudeAI; Python + Selenium script that books Naru Noodle Bar seats seconds after the Monday 8pm drop / Philips Wiz bulbs accept raw JSON over UDP port 38899, so I made them react to music and video / Vibe coded a multi-agent Indian stock trader in a week, and Claude Code drives it via MCP
This repo shows mixed signals. The MIT license, coherent architecture documentation, and reasonable TypeScript setup suggest a real project attempt. However, the impossible future creation date (2026), brand-new maintainer account, extreme feature scope for a 10-day-old repo, and claims of credential/payment-plan integration without proven security track record are concerning. The repository may be legitimate but appears rushed to production with security-sensitive integrations.
- Repo created 2026-10-04 (future date anomaly — timestamp error or fabricated)
- Maintainer account created 2025-12-30 with only 8 public repos and zero followers
- 1 star, 0 forks, 0 open issues — very new with no community adoption
- README promises extensive multi-platform features (web, macOS, Windows, cloud agents, integrations with ChatGPT/Claude/Grok) but repo is only 10 days old
"github.com" was previously logged by Hugin under u/dexterthebot, u/lumpy_vermicelli8869, u/ukanwat, u/timx88, u/freedomsaver. Same external identifier surfacing under multiple Reddit accounts across separate threads is a coordinated-operation pattern.
- u/dexterthebot (report 2pr-ctd-xhg)
- u/lumpy_vermicelli8869 (report dcu-z6q-5td)
- u/ukanwat (report pau-xjq-fqm)
- u/timx88 (report gpq-9ys-uqw)
- u/freedomsaver (report 6rb-gf6-rc8)
5 identifier appearances matched older Hugin reports under different usernames.
- ext_domain "github.com" previously appeared under u/dexterthebot
- ext_domain "github.com" previously appeared under u/lumpy_vermicelli8869
- ext_domain "github.com" previously appeared under u/ukanwat
- ext_domain "github.com" previously appeared under u/timx88
- ext_domain "github.com" previously appeared under u/freedomsaver
6 author histories showed drop-in, dormant, or cross-promotion behavior.
- u/TamoghnaKabi: dormant 305d
- u/this_happened_rigged: dormant 2910d; i.redd.it/esv7uyd9mtjg1.jpeg repeated across 2 subs
- u/shravanrevanna: dormant 149d; blog.shravanrevanna.me/reverse-engineering-a-xiaomi-camera-into-a-self-tracking-robot repeated across 2 subs; i.redd.it/zd4vr7uc3ouh1.png repeated across 2 subs
- u/dilberry: dormant 66d; youtu.be/QfXK53FTDuE repeated across 5 subs; i.redd.it/2dn65f24xsjh1.jpeg repeated across 3 subs
- u/slowgojoe: dormant 92d; youtube.com/watch repeated across 2 subs
What limited confidence
2 scanned authors had unknown account age. Profile metadata remained unavailable for 2 hosted fetches after archive fallbacks. Absence of young-account signals is lower confidence.
What kept the rating lower
Hugin mapped 10 reply edges and did not find a mutual-reply clique.
The writing-style comparison ran and did not surface same-hand pairs.
- 2 author account ages were unavailable after profile metadata and archive fallbacks.
- 8 author age values are a lower-bound estimate from oldest archived public activity, not an official Reddit account-created timestamp.
- Username shape alone is never treated as a finding; it is only context when stronger public signals also appear.
- Likely scam: multiple high-severity signals, prior identifier reuse, or several coordination signals stacking together.
- Suspicious: one high-severity signal, multiple medium signals, or one concrete coordination signal that deserves review.
- Inconclusive: weak, conflicting, or partial signals where the scan cannot justify either trust or a stronger warning.
- Looks legitimate: no structural red flags, available metadata, and clean coordination passes.
Values lens
Use scans to slow down, inspect public signals, and keep uncertainty visible. Never use them to harass, shame, or flatten people into a verdict.
Fair-use checks
- What was observed, and what is interpretation?
- What data is missing, blocked, or confidence-limiting?
- Would the wording feel fair if it were about someone you care about?
What the post is doing
- 6 aged accounts reactivated specifically to comment on this post; median commenter age 3579d with 8 accounts showing oldest-archived-activity lower bounds indicates dormant accounts being awakened for
- Cross-report reuse: external domain 'github.com' posted by u/dexterthebot, u/lumpy_vermicelli8869, u/ukanwat, u/timx88, u/freedomsaver across different reports—strong same-operator signal indicating o
- Account u/TamoghnaKabi shows 305-day dormancy then suddenly 10 posts in 24h; u/slowgojoe 92-day dormancy with 9 posts in 24h; u/shravanrevanna 149-day dormancy with 13 submissions in 7d; pattern consi
- Multiple accounts (u/TamoghnaKabi, u/shravanrevanna, u/slowgojoe) posting first-person founder-stories in rapid bursts across adjacent subreddits (r/SideProject, r/ClaudeAI, r/claude) within overlappi
- 10 cross-subreddit promotional drops detected; repeated URL patterns across accounts (u/dilberry 6x same YouTube link, u/shravanrevanna 2x same blog URL) indicate coordinated content seeding infrastru
Automated flags
An account that sat silent for months and then suddenly wakes up to praise a promotional post is almost always a sold or recovered handle being weaponised for credibility.
- u/TamoghnaKabi — sat dormant 305d then lit up
- u/this_happened_rigged — sat dormant 2910d then lit up
- u/shravanrevanna — sat dormant 149d then lit up
- u/dilberry — sat dormant 66d then lit up
- u/slowgojoe — sat dormant 92d then lit up
- u/luxx93 — sat dormant 64d then lit up
Posting the exact same link in 2+ different subreddits is the textbook fingerprint of an affiliate or marketing operator — not someone organically sharing a discovery.
- u/this_happened_rigged dropped i.redd.it/esv7uyd9mtjg1.jpeg in r/sourcandy, r/candy
- u/shravanrevanna dropped blog.shravanrevanna.me/reverse-engineering-a-xiaomi-camera-into-a-self-tracking-robot in r/IMadeThis, r/SideProject
- u/shravanrevanna dropped i.redd.it/zd4vr7uc3ouh1.png in r/ai_trading, r/AgentsOfAI
- u/shravanrevanna dropped i.redd.it/3iy91nz75auh1.png in r/robotics, r/computervision
- u/shravanrevanna dropped github.com/user-attachments/assets/fe982647-a734-4b3d-9abf-329c15c8c714 in r/claudeskills, r/programming
- u/dilberry dropped youtu.be/QfXK53FTDuE in r/BMWX3, r/BMW, r/bmwix3, r/iX3…
- u/dilberry dropped i.redd.it/2dn65f24xsjh1.jpeg in r/iX3, r/bmwix3, r/BMWiX
- u/slowgojoe dropped youtube.com/watch in r/hiphop, r/listentothis
A run of polished first-person business lessons across adjacent SaaS, AI, marketing, and productivity subreddits is a common warm-up pattern for stealth promotion. It is not proof by itself; it is a strong review signal.
- u/shravanrevanna — 13 recent self-posts across r/SideProject, r/ClaudeAI; Python + Selenium script that books Naru Noodle Bar seats seconds after the Monday 8pm drop / Philips Wiz bulbs accept raw JSON over UDP port 38899, so I made them react to music and video / Vibe coded a multi-agent Indian stock trader in a week, and Claude Code drives it via MCP
This repo shows mixed signals. The MIT license, coherent architecture documentation, and reasonable TypeScript setup suggest a real project attempt. However, the impossible future creation date (2026), brand-new maintainer account, extreme feature scope for a 10-day-old repo, and claims of credential/payment-plan integration without proven security track record are concerning. The repository may be legitimate but appears rushed to production with security-sensitive integrations.
- Repo created 2026-10-04 (future date anomaly — timestamp error or fabricated)
- Maintainer account created 2025-12-30 with only 8 public repos and zero followers
- 1 star, 0 forks, 0 open issues — very new with no community adoption
- README promises extensive multi-platform features (web, macOS, Windows, cloud agents, integrations with ChatGPT/Claude/Grok) but repo is only 10 days old
"github.com" was previously logged by Hugin under u/dexterthebot, u/lumpy_vermicelli8869, u/ukanwat, u/timx88, u/freedomsaver. Same external identifier surfacing under multiple Reddit accounts across separate threads is a coordinated-operation pattern.
- u/dexterthebot (report 2pr-ctd-xhg)
- u/lumpy_vermicelli8869 (report dcu-z6q-5td)
- u/ukanwat (report pau-xjq-fqm)
- u/timx88 (report gpq-9ys-uqw)
- u/freedomsaver (report 6rb-gf6-rc8)
Linked code repositories
GitHub repos linked in this thread were fetched and screened for malware-disguised-as-OSS patterns (postinstall scripts, fresh maintainer + thin commits, hardcoded wallets/tokens, drainer / sniper / checker naming, Telegram-routed READMEs).
This repo shows mixed signals. The MIT license, coherent architecture documentation, and reasonable TypeScript setup suggest a real project attempt. However, the impossible future creation date (2026), brand-new maintainer account, extreme feature scope for a 10-day-old repo, and claims of credential/payment-plan integration without proven security track record are concerning. The repository may be legitimate but appears rushed to production with security-sensitive integrations.
- Repo created 2026-10-04 (future date anomaly — timestamp error or fabricated)
- Maintainer account created 2025-12-30 with only 8 public repos and zero followers
- 1 star, 0 forks, 0 open issues — very new with no community adoption
- README promises extensive multi-platform features (web, macOS, Windows, cloud agents, integrations with ChatGPT/Claude/Grok) but repo is only 10 days old
- Large CLAUDE.md file (102KB) and large package-lock.json (505KB) suggest either incomplete commit history or scaffolded/generated code
- Claims tight integration with paid AI services (ChatGPT Plus, Claude Pro, Grok) and credential handling — high-risk surface for credential theft if not legitimate
Shared signals
External identifiers (wallets, Telegram/Discord, referral links, promo codes, external URLs, emails) extracted from the post body and comments. Different accounts pointing at the same identifier — inside one thread or across separate reports — is the strongest coordination signal Hugin can show, sourced entirely from public post content.
Also appeared in prior reports under different accounts
Coordination map
Who replied to whom in the scanned comments. Organic threads branch out from the post; accounts that reply back and forth to each other or hub around one shared identifier are the structural fingerprints of a coordinated pod. This shows the most significant pattern found, not every commenter.
- Subject
- Procedural
Commenter patterns
Recent public Reddit activity for the OP and selected accounts, plus same-hand writing checks when the stylometry pass runs. These are coverage-limited evidence summaries, not identity or availability claims.
- r/claude (14)
- r/OnePiece (7)
- r/ClaudeCode (2)
- r/ReverieSpoilers (1)
- v.redd.it (4)
- r/2007scape (6)
- r/conspiracy (5)
- r/AmmonHillman (4)
- r/ironscape (3)
- i.redd.it (7)
- imgur.com (1)
- i.redd.it/esv7uyd9mtjg1.jpeg (2x across 2 subs)
Reddit returned only part of this account's recent public activity during the scan.
- r/SideProject (3)
- r/programming (2)
- r/developersIndia (1)
- r/homeautomation (1)
- i.redd.it (7)
- blog.shravanrevanna.me (4)
- github.com (2)
- shravanrevanna.me (1)
- blog.shravanrevanna.me/reverse-engineering-a-xiaomi-camera-into-a-self-tracking-robot (2x across 2 subs)
- i.redd.it/zd4vr7uc3ouh1.png (2x across 2 subs)
- i.redd.it/3iy91nz75auh1.png (2x across 2 subs)
- r/aigamedev (9)
- r/ONDS (8)
- r/BMWiX (5)
- r/iX3 (4)
- i.redd.it (7)
- youtu.be (6)
- v.redd.it (2)
- youtu.be/QfXK53FTDuE (6x across 5 subs)
- i.redd.it/2dn65f24xsjh1.jpeg (3x across 3 subs)
- r/ClaudeAI (11)
- r/claude (4)
- r/listentothis (4)
- r/agi (2)
- youtu.be (4)
- i.redd.it (3)
- youtube.com (2)
- v.redd.it (1)
- youtu.be/E6A45AA_YTQ (3x across 1 sub)
- youtube.com/watch (2x across 2 subs)
- r/Rabbitr1 (5)
- r/Darmstadt (5)
- r/KeineDummenFragen (4)
- r/OeffentlicherDienst (3)
- v.redd.it (7)
- i.redd.it (5)
- zeit.de (2)
- ai.ugreen.com (1)
- v.redd.it/htlcbkvic7th1 (2x across 2 subs)
- i.redd.it/uufwwao4fo5h1.jpeg (2x across 1 sub)
- zeit.de/campus/2026/02/polit-influencer-marcant-rechtsextremismus-afd-youtube (2x across 2 subs)
- r/Golfsimulator (4)
- r/SipsTea (3)
- r/CAguns (3)
- r/HummerEV (2)
- i.redd.it (3)
- v.redd.it (2)
- youtube.com (1)
Reddit returned only part of this account's recent public activity during the scan.
- r/Anthropic (4)
- r/claude (2)
- r/Wetherspoons (2)
- r/Claudeopus (2)
The writing-style pass ran and did not surface same-hand pairs.
Account age coverage
OP and scanned commenters are shown when Hugin recovered profile metadata or an oldest-public-activity age floor. Lower-bound ages are labeled as estimates; unknown age remains missing coverage, not a finding about the account.
Archived evidence
Snapshot of the post and comments at scan time. Preserved here so the evidence survives even if it gets deleted on Reddit.
- u/this_happened_riggedscore 0It sounds like a cool project but unfortunately I'm not handing over any of my information to it or giving it any access. Good luck..
- u/TamoghnaKabiscore 0Totally fair! Security concerns are valid, especially for an app that can control your computer. Wren is fully open-source, so you can inspect the code yourself before trusting it. It also has permission controls and approval gates. No pressure to use it! 😄 https://github.com/tamoghnakabi-wq/wren
- u/this_happened_riggedscore 0I will be following your project. Thanks
- u/shravanrevannascore 0how does "works with your existing sub" actually work for Claude? driving the Claude Code CLI under the hood, or reusing the OAuth token directly against the API?
- u/TamoghnaKabiscore 0Driving the CLI. The desktop app runs your own unmodified claude binary on your machine (stream-json mode) and handles its permission prompts through Claude Code’s --permission-prompt-tool, so actions still go through Wren’s approvals. Claude Code signs in with its own login, and Wren never reads or reuses your OAuth token; Anthropic doesn’t allow third-party apps to use Claude logins anyway. Same idea for Grok (the official grok agent stdio). That’s also why subscription use is desktop-only: cloud agents use API keys.
- u/dilberryscore 0Nothing shouts AI garbagio harder than "Wren" - sorry OP, I've worked too much with GPT & Claude who both go to that name for everything and anything.
- u/TamoghnaKabiscore 0Note taken,I haven’t finalised the name yet.
- u/slowgojoescore 0Honestly the whole video screams Claude to me. The font choice, the way it speaks.. “on your okay”. Just be careful of that. Love that it’s agent agnostic though. And interested in how you actually achieved that. I wonder if anthropic would see that as a work around and essentially patch it.
Original on Reddit: https://www.reddit.com/r/claude/comments/1x5i136/i_built_wren_an_opensource_ai_agent_platform/ — “I built Wren, an open-source AI agent platform using Claude Opus 5.5”
Share this report
Share this link in a Reddit reply when the thread needs supporting evidence. The report stays public so anyone reading the thread can review the data themselves.
Reports like this stay free for everyone. Keep Hugin free →