BranchesTags

Repository files navigation

Exploit Bot

AI-powered policy analyzer that finds legal "exploits" in your company's time-off policies — bridge days, holiday stacking, sick leave conversions, and policy loopholes to maximize your days off.

Next.jsSupabaseClaude AIStripe

How It Works

  1. Upload your company policy document (PDF, DOCX, TXT, or screenshot)
  2. AI scans the document to extract time-off rules and restrictions
  3. Exploits detected — bridge days, holiday stacks, policy loopholes with ROI calculations
  4. Calendar optimizer shows optimal dates to maximize consecutive days off

Features

  • Document parsing — PDF, DOCX, TXT, and image OCR via Claude Vision
  • Two-tier AI analysis — Free basic scan (Haiku) or Pro deep analysis (Sonnet) for $4
  • Country-aware holidays — Integrates public holidays via Nager.Date API
  • Exploit detection — Bridge days, holiday stacking, sick conversions, policy loopholes
  • ROI calculations — Shows days off gained per PTO day spent
  • Calendar view — Visual planner with color-coded days
  • Activity history — Track applied/dismissed exploits

Tech Stack

LayerTechnology
FrameworkNext.js 16 (App Router, Turbopack)
DatabaseSupabase (Postgres + RLS)
AuthSupabase Auth (Email + Google OAuth)
StorageSupabase Storage (policy files)
AIAnthropic Claude (Haiku free / Sonnet pro)
PaymentsStripe (one-time $4 per Pro scan)
StylingTailwind CSS 4
DeploymentVercel

Getting Started

# Install dependencies
npm install
# Copy env template and fill in your keys
cp .env.local.example .env.local
# Run Supabase migrations (if using local Supabase)
npx supabase db push
# Start dev server
npm run dev

Open http://localhost:3000.

Environment Variables

NEXT_PUBLIC_SUPABASE_URL= # Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY= # Supabase anon/public key
SUPABASE_SERVICE_ROLE_KEY= # Supabase service role key
ANTHROPIC_API_KEY= # Anthropic API key
STRIPE_SECRET_KEY= # Stripe secret key
STRIPE_WEBHOOK_SECRET= # Stripe webhook signing secret
NEXT_PUBLIC_APP_URL= # Your app URL (http://localhost:3000 for dev)

Database Schema

  • users — Profile with country, PTO balance, plan tier
  • policies — Uploaded documents with scan status
  • exploits — Detected exploits linked to policies
  • calendar_events — User's planned time-off events
  • activity_log — Audit trail of all actions

All tables use Row-Level Security — users can only access their own data.

AI Pipeline

Document → Parse (PDF/DOCX/TXT/OCR)
→ Stage 1: Extract policy rules (Haiku)
→ Stage 2: Detect exploits against holidays + PTO (Haiku or Sonnet)
→ Store results

License

MIT

About

AI-powered policy analyzer that finds legal exploits in company time-off policies — bridge days, holiday stacking, sick conversions & loopholes to maximize days off

exploit-bot.vercel.app

Topics

aiautomationclaudenextjspolicy-analysisstripesupabasetailwindcsstime-offtypescript

Resources

Readme
Activity

Stars

0 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
BranchesTags
Repository files navigation
Exploit Bot
AI-powered policy analyzer that finds legal "exploits" in your company's time-off policies — bridge days, holiday stacking, sick leave conversions, and policy loopholes to maximize your days off.
Next.jsSupabaseClaude AIStripe
How It Works
  1. Upload your company policy document (PDF, DOCX, TXT, or screenshot)
  2. AI scans the document to extract time-off rules and restrictions
  3. Exploits detected — bridge days, holiday stacks, policy loopholes with ROI calculations
  4. Calendar optimizer shows optimal dates to maximize consecutive days off
Features
  • Document parsing — PDF, DOCX, TXT, and image OCR via Claude Vision
  • Two-tier AI analysis — Free basic scan (Haiku) or Pro deep analysis (Sonnet) for $4
  • Country-aware holidays — Integrates public holidays via Nager.Date API
  • Exploit detection — Bridge days, holiday stacking, sick conversions, policy loopholes
  • ROI calculations — Shows days off gained per PTO day spent
  • Calendar view — Visual planner with color-coded days
  • Activity history — Track applied/dismissed exploits
Tech Stack
LayerTechnology
FrameworkNext.js 16 (App Router, Turbopack)
DatabaseSupabase (Postgres + RLS)
AuthSupabase Auth (Email + Google OAuth)
StorageSupabase Storage (policy files)
AIAnthropic Claude (Haiku free / Sonnet pro)
PaymentsStripe (one-time $4 per Pro scan)
StylingTailwind CSS 4
DeploymentVercel
Getting Started
# Install dependencies
npm install
# Copy env template and fill in your keys
cp .env.local.example .env.local
# Run Supabase migrations (if using local Supabase)
npx supabase db push
# Start dev server
npm run dev
Open http://localhost:3000.
Environment Variables
NEXT_PUBLIC_SUPABASE_URL= # Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY= # Supabase anon/public key
SUPABASE_SERVICE_ROLE_KEY= # Supabase service role key
ANTHROPIC_API_KEY= # Anthropic API key
STRIPE_SECRET_KEY= # Stripe secret key
STRIPE_WEBHOOK_SECRET= # Stripe webhook signing secret
NEXT_PUBLIC_APP_URL= # Your app URL (http://localhost:3000 for dev)

Database Schema
  • users — Profile with country, PTO balance, plan tier
  • policies — Uploaded documents with scan status
  • exploits — Detected exploits linked to policies
  • calendar_events — User's planned time-off events
  • activity_log — Audit trail of all actions
All tables use Row-Level Security — users can only access their own data.
AI Pipeline
Document → Parse (PDF/DOCX/TXT/OCR)
→ Stage 1: Extract policy rules (Haiku)
→ Stage 2: Detect exploits against holidays + PTO (Haiku or Sonnet)
→ Store results

License
MIT
About
AI-powered policy analyzer that finds legal exploits in company time-off policies — bridge days, holiday stacking, sick conversions & loopholes to maximize days off
exploit-bot.vercel.app
Topics
aiautomationclaudenextjspolicy-analysisstripesupabasetailwindcsstime-offtypescript
Resources
Readme
Activity
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
Exploit Bot
AI-powered policy analyzer that finds legal "exploits" in your company's time-off policies — bridge days, holiday stacking, sick leave conversions, and policy loopholes to maximize your days off.
Next.jsSupabaseClaude AIStripe
How It Works
  1. Upload your company policy document (PDF, DOCX, TXT, or screenshot)
  2. AI scans the document to extract time-off rules and restrictions
  3. Exploits detected — bridge days, holiday stacks, policy loopholes with ROI calculations
  4. Calendar optimizer shows optimal dates to maximize consecutive days off
Features
  • Document parsing — PDF, DOCX, TXT, and image OCR via Claude Vision
  • Two-tier AI analysis — Free basic scan (Haiku) or Pro deep analysis (Sonnet) for $4
  • Country-aware holidays — Integrates public holidays via Nager.Date API
  • Exploit detection — Bridge days, holiday stacking, sick conversions, policy loopholes
  • ROI calculations — Shows days off gained per PTO day spent
  • Calendar view — Visual planner with color-coded days
  • Activity history — Track applied/dismissed exploits
Tech Stack
LayerTechnology
FrameworkNext.js 16 (App Router, Turbopack)
DatabaseSupabase (Postgres + RLS)
AuthSupabase Auth (Email + Google OAuth)
StorageSupabase Storage (policy files)
AIAnthropic Claude (Haiku free / Sonnet pro)
PaymentsStripe (one-time $4 per Pro scan)
StylingTailwind CSS 4
DeploymentVercel
Getting Started
# Install dependencies
npm install
# Copy env template and fill in your keys
cp .env.local.example .env.local
# Run Supabase migrations (if using local Supabase)
npx supabase db push
# Start dev server
npm run dev
Open http://localhost:3000.
Environment Variables
NEXT_PUBLIC_SUPABASE_URL= # Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY= # Supabase anon/public key
SUPABASE_SERVICE_ROLE_KEY= # Supabase service role key
ANTHROPIC_API_KEY= # Anthropic API key
STRIPE_SECRET_KEY= # Stripe secret key
STRIPE_WEBHOOK_SECRET= # Stripe webhook signing secret
NEXT_PUBLIC_APP_URL= # Your app URL (http://localhost:3000 for dev)

Database Schema
  • users — Profile with country, PTO balance, plan tier
  • policies — Uploaded documents with scan status
  • exploits — Detected exploits linked to policies
  • calendar_events — User's planned time-off events
  • activity_log — Audit trail of all actions
All tables use Row-Level Security — users can only access their own data.
AI Pipeline
Document → Parse (PDF/DOCX/TXT/OCR)
→ Stage 1: Extract policy rules (Haiku)
→ Stage 2: Detect exploits against holidays + PTO (Haiku or Sonnet)
→ Store results

License
MIT
About
AI-powered policy analyzer that finds legal exploits in company time-off policies — bridge days, holiday stacking, sick conversions & loopholes to maximize days off
exploit-bot.vercel.app
Topics
aiautomationclaudenextjspolicy-analysisstripesupabasetailwindcsstime-offtypescript
Resources
Readme
Activity
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
Exploit Bot
AI-powered policy analyzer that finds legal "exploits" in your company's time-off policies — bridge days, holiday stacking, sick leave conversions, and policy loopholes to maximize your days off.
Next.jsSupabaseClaude AIStripe
How It Works
  1. Upload your company policy document (PDF, DOCX, TXT, or screenshot)
  2. AI scans the document to extract time-off rules and restrictions
  3. Exploits detected — bridge days, holiday stacks, policy loopholes with ROI calculations
  4. Calendar optimizer shows optimal dates to maximize consecutive days off
Features
  • Document parsing — PDF, DOCX, TXT, and image OCR via Claude Vision
  • Two-tier AI analysis — Free basic scan (Haiku) or Pro deep analysis (Sonnet) for $4
  • Country-aware holidays — Integrates public holidays via Nager.Date API
  • Exploit detection — Bridge days, holiday stacking, sick conversions, policy loopholes
  • ROI calculations — Shows days off gained per PTO day spent
  • Calendar view — Visual planner with color-coded days
  • Activity history — Track applied/dismissed exploits
Tech Stack
LayerTechnology
FrameworkNext.js 16 (App Router, Turbopack)
DatabaseSupabase (Postgres + RLS)
AuthSupabase Auth (Email + Google OAuth)
StorageSupabase Storage (policy files)
AIAnthropic Claude (Haiku free / Sonnet pro)
PaymentsStripe (one-time $4 per Pro scan)
StylingTailwind CSS 4
DeploymentVercel
Getting Started
# Install dependencies
npm install
# Copy env template and fill in your keys
cp .env.local.example .env.local
# Run Supabase migrations (if using local Supabase)
npx supabase db push
# Start dev server
npm run dev
Open http://localhost:3000.
Environment Variables
NEXT_PUBLIC_SUPABASE_URL= # Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY= # Supabase anon/public key
SUPABASE_SERVICE_ROLE_KEY= # Supabase service role key
ANTHROPIC_API_KEY= # Anthropic API key
STRIPE_SECRET_KEY= # Stripe secret key
STRIPE_WEBHOOK_SECRET= # Stripe webhook signing secret
NEXT_PUBLIC_APP_URL= # Your app URL (http://localhost:3000 for dev)

Database Schema
  • users — Profile with country, PTO balance, plan tier
  • policies — Uploaded documents with scan status
  • exploits — Detected exploits linked to policies
  • calendar_events — User's planned time-off events
  • activity_log — Audit trail of all actions
All tables use Row-Level Security — users can only access their own data.
AI Pipeline
Document → Parse (PDF/DOCX/TXT/OCR)
→ Stage 1: Extract policy rules (Haiku)
→ Stage 2: Detect exploits against holidays + PTO (Haiku or Sonnet)
→ Store results

License
MIT
About
AI-powered policy analyzer that finds legal exploits in company time-off policies — bridge days, holiday stacking, sick conversions & loopholes to maximize days off
exploit-bot.vercel.app
Topics
aiautomationclaudenextjspolicy-analysisstripesupabasetailwindcsstime-offtypescript
Resources
Readme
Activity
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
BranchesTags
Repository files navigation
Exploit Bot
AI-powered policy analyzer that finds legal "exploits" in your company's time-off policies — bridge days, holiday stacking, sick leave conversions, and policy loopholes to maximize your days off.
Next.jsSupabaseClaude AIStripe
How It Works
  1. Upload your company policy document (PDF, DOCX, TXT, or screenshot)
  2. AI scans the document to extract time-off rules and restrictions
  3. Exploits detected — bridge days, holiday stacks, policy loopholes with ROI calculations
  4. Calendar optimizer shows optimal dates to maximize consecutive days off
Features
  • Document parsing — PDF, DOCX, TXT, and image OCR via Claude Vision
  • Two-tier AI analysis — Free basic scan (Haiku) or Pro deep analysis (Sonnet) for $4
  • Country-aware holidays — Integrates public holidays via Nager.Date API
  • Exploit detection — Bridge days, holiday stacking, sick conversions, policy loopholes
  • ROI calculations — Shows days off gained per PTO day spent
  • Calendar view — Visual planner with color-coded days
  • Activity history — Track applied/dismissed exploits
Tech Stack
LayerTechnology
FrameworkNext.js 16 (App Router, Turbopack)
DatabaseSupabase (Postgres + RLS)
AuthSupabase Auth (Email + Google OAuth)
StorageSupabase Storage (policy files)
AIAnthropic Claude (Haiku free / Sonnet pro)
PaymentsStripe (one-time $4 per Pro scan)
StylingTailwind CSS 4
DeploymentVercel
Getting Started
# Install dependencies
npm install
# Copy env template and fill in your keys
cp .env.local.example .env.local
# Run Supabase migrations (if using local Supabase)
npx supabase db push
# Start dev server
npm run dev
Open http://localhost:3000.
Environment Variables
NEXT_PUBLIC_SUPABASE_URL= # Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY= # Supabase anon/public key
SUPABASE_SERVICE_ROLE_KEY= # Supabase service role key
ANTHROPIC_API_KEY= # Anthropic API key
STRIPE_SECRET_KEY= # Stripe secret key
STRIPE_WEBHOOK_SECRET= # Stripe webhook signing secret
NEXT_PUBLIC_APP_URL= # Your app URL (http://localhost:3000 for dev)

Database Schema
  • users — Profile with country, PTO balance, plan tier
  • policies — Uploaded documents with scan status
  • exploits — Detected exploits linked to policies
  • calendar_events — User's planned time-off events
  • activity_log — Audit trail of all actions
All tables use Row-Level Security — users can only access their own data.
AI Pipeline
Document → Parse (PDF/DOCX/TXT/OCR)
→ Stage 1: Extract policy rules (Haiku)
→ Stage 2: Detect exploits against holidays + PTO (Haiku or Sonnet)
→ Store results

License
MIT
About
AI-powered policy analyzer that finds legal exploits in company time-off policies — bridge days, holiday stacking, sick conversions & loopholes to maximize days off
exploit-bot.vercel.app
Topics
aiautomationclaudenextjspolicy-analysisstripesupabasetailwindcsstime-offtypescript
Resources
Readme
Activity
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
Exploit Bot
AI-powered policy analyzer that finds legal "exploits" in your company's time-off policies — bridge days, holiday stacking, sick leave conversions, and policy loopholes to maximize your days off.
Next.jsSupabaseClaude AIStripe
How It Works
  1. Upload your company policy document (PDF, DOCX, TXT, or screenshot)
  2. AI scans the document to extract time-off rules and restrictions
  3. Exploits detected — bridge days, holiday stacks, policy loopholes with ROI calculations
  4. Calendar optimizer shows optimal dates to maximize consecutive days off
Features
  • Document parsing — PDF, DOCX, TXT, and image OCR via Claude Vision
  • Two-tier AI analysis — Free basic scan (Haiku) or Pro deep analysis (Sonnet) for $4
  • Country-aware holidays — Integrates public holidays via Nager.Date API
  • Exploit detection — Bridge days, holiday stacking, sick conversions, policy loopholes
  • ROI calculations — Shows days off gained per PTO day spent
  • Calendar view — Visual planner with color-coded days
  • Activity history — Track applied/dismissed exploits
Tech Stack
LayerTechnology
FrameworkNext.js 16 (App Router, Turbopack)
DatabaseSupabase (Postgres + RLS)
AuthSupabase Auth (Email + Google OAuth)
StorageSupabase Storage (policy files)
AIAnthropic Claude (Haiku free / Sonnet pro)
PaymentsStripe (one-time $4 per Pro scan)
StylingTailwind CSS 4
DeploymentVercel
Getting Started
# Install dependencies
npm install
# Copy env template and fill in your keys
cp .env.local.example .env.local
# Run Supabase migrations (if using local Supabase)
npx supabase db push
# Start dev server
npm run dev
Open http://localhost:3000.
Environment Variables
NEXT_PUBLIC_SUPABASE_URL= # Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY= # Supabase anon/public key
SUPABASE_SERVICE_ROLE_KEY= # Supabase service role key
ANTHROPIC_API_KEY= # Anthropic API key
STRIPE_SECRET_KEY= # Stripe secret key
STRIPE_WEBHOOK_SECRET= # Stripe webhook signing secret
NEXT_PUBLIC_APP_URL= # Your app URL (http://localhost:3000 for dev)

Database Schema
  • users — Profile with country, PTO balance, plan tier
  • policies — Uploaded documents with scan status
  • exploits — Detected exploits linked to policies
  • calendar_events — User's planned time-off events
  • activity_log — Audit trail of all actions
All tables use Row-Level Security — users can only access their own data.
AI Pipeline
Document → Parse (PDF/DOCX/TXT/OCR)
→ Stage 1: Extract policy rules (Haiku)
→ Stage 2: Detect exploits against holidays + PTO (Haiku or Sonnet)
→ Store results

License
MIT
About
AI-powered policy analyzer that finds legal exploits in company time-off policies — bridge days, holiday stacking, sick conversions & loopholes to maximize days off
exploit-bot.vercel.app
Topics
aiautomationclaudenextjspolicy-analysisstripesupabasetailwindcsstime-offtypescript
Resources
Readme
Activity
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
Exploit Bot
AI-powered policy analyzer that finds legal "exploits" in your company's time-off policies — bridge days, holiday stacking, sick leave conversions, and policy loopholes to maximize your days off.
Next.jsSupabaseClaude AIStripe
How It Works
  1. Upload your company policy document (PDF, DOCX, TXT, or screenshot)
  2. AI scans the document to extract time-off rules and restrictions
  3. Exploits detected — bridge days, holiday stacks, policy loopholes with ROI calculations
  4. Calendar optimizer shows optimal dates to maximize consecutive days off
Features
  • Document parsing — PDF, DOCX, TXT, and image OCR via Claude Vision
  • Two-tier AI analysis — Free basic scan (Haiku) or Pro deep analysis (Sonnet) for $4
  • Country-aware holidays — Integrates public holidays via Nager.Date API
  • Exploit detection — Bridge days, holiday stacking, sick conversions, policy loopholes
  • ROI calculations — Shows days off gained per PTO day spent
  • Calendar view — Visual planner with color-coded days
  • Activity history — Track applied/dismissed exploits
Tech Stack
LayerTechnology
FrameworkNext.js 16 (App Router, Turbopack)
DatabaseSupabase (Postgres + RLS)
AuthSupabase Auth (Email + Google OAuth)
StorageSupabase Storage (policy files)
AIAnthropic Claude (Haiku free / Sonnet pro)
PaymentsStripe (one-time $4 per Pro scan)
StylingTailwind CSS 4
DeploymentVercel
Getting Started
# Install dependencies
npm install
# Copy env template and fill in your keys
cp .env.local.example .env.local
# Run Supabase migrations (if using local Supabase)
npx supabase db push
# Start dev server
npm run dev
Open http://localhost:3000.
Environment Variables
NEXT_PUBLIC_SUPABASE_URL= # Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY= # Supabase anon/public key
SUPABASE_SERVICE_ROLE_KEY= # Supabase service role key
ANTHROPIC_API_KEY= # Anthropic API key
STRIPE_SECRET_KEY= # Stripe secret key
STRIPE_WEBHOOK_SECRET= # Stripe webhook signing secret
NEXT_PUBLIC_APP_URL= # Your app URL (http://localhost:3000 for dev)

Database Schema
  • users — Profile with country, PTO balance, plan tier
  • policies — Uploaded documents with scan status
  • exploits — Detected exploits linked to policies
  • calendar_events — User's planned time-off events
  • activity_log — Audit trail of all actions
All tables use Row-Level Security — users can only access their own data.
AI Pipeline
Document → Parse (PDF/DOCX/TXT/OCR)
→ Stage 1: Extract policy rules (Haiku)
→ Stage 2: Detect exploits against holidays + PTO (Haiku or Sonnet)
→ Store results

License
MIT
About
AI-powered policy analyzer that finds legal exploits in company time-off policies — bridge days, holiday stacking, sick conversions & loopholes to maximize days off
exploit-bot.vercel.app
Topics
aiautomationclaudenextjspolicy-analysisstripesupabasetailwindcsstime-offtypescript
Resources
Readme
Activity
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
BranchesTags
Repository files navigation
Exploit Bot
AI-powered policy analyzer that finds legal "exploits" in your company's time-off policies — bridge days, holiday stacking, sick leave conversions, and policy loopholes to maximize your days off.
Next.jsSupabaseClaude AIStripe
How It Works
  1. Upload your company policy document (PDF, DOCX, TXT, or screenshot)
  2. AI scans the document to extract time-off rules and restrictions
  3. Exploits detected — bridge days, holiday stacks, policy loopholes with ROI calculations
  4. Calendar optimizer shows optimal dates to maximize consecutive days off
Features
  • Document parsing — PDF, DOCX, TXT, and image OCR via Claude Vision
  • Two-tier AI analysis — Free basic scan (Haiku) or Pro deep analysis (Sonnet) for $4
  • Country-aware holidays — Integrates public holidays via Nager.Date API
  • Exploit detection — Bridge days, holiday stacking, sick conversions, policy loopholes
  • ROI calculations — Shows days off gained per PTO day spent
  • Calendar view — Visual planner with color-coded days
  • Activity history — Track applied/dismissed exploits
Tech Stack
LayerTechnology
FrameworkNext.js 16 (App Router, Turbopack)
DatabaseSupabase (Postgres + RLS)
AuthSupabase Auth (Email + Google OAuth)
StorageSupabase Storage (policy files)
AIAnthropic Claude (Haiku free / Sonnet pro)
PaymentsStripe (one-time $4 per Pro scan)
StylingTailwind CSS 4
DeploymentVercel
Getting Started
# Install dependencies
npm install
# Copy env template and fill in your keys
cp .env.local.example .env.local
# Run Supabase migrations (if using local Supabase)
npx supabase db push
# Start dev server
npm run dev
Open http://localhost:3000.
Environment Variables
NEXT_PUBLIC_SUPABASE_URL= # Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY= # Supabase anon/public key
SUPABASE_SERVICE_ROLE_KEY= # Supabase service role key
ANTHROPIC_API_KEY= # Anthropic API key
STRIPE_SECRET_KEY= # Stripe secret key
STRIPE_WEBHOOK_SECRET= # Stripe webhook signing secret
NEXT_PUBLIC_APP_URL= # Your app URL (http://localhost:3000 for dev)

Database Schema
  • users — Profile with country, PTO balance, plan tier
  • policies — Uploaded documents with scan status
  • exploits — Detected exploits linked to policies
  • calendar_events — User's planned time-off events
  • activity_log — Audit trail of all actions
All tables use Row-Level Security — users can only access their own data.
AI Pipeline
Document → Parse (PDF/DOCX/TXT/OCR)
→ Stage 1: Extract policy rules (Haiku)
→ Stage 2: Detect exploits against holidays + PTO (Haiku or Sonnet)
→ Store results

License
MIT
About
AI-powered policy analyzer that finds legal exploits in company time-off policies — bridge days, holiday stacking, sick conversions & loopholes to maximize days off
exploit-bot.vercel.app
Topics
aiautomationclaudenextjspolicy-analysisstripesupabasetailwindcsstime-offtypescript
Resources
Readme
Activity
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages