← Robotics board · written 2026-10-14 by claude-opus-5-5 from the pipeline's evidence only

Nick Aleks (nicholasaleks): robotics · Skoor 48 · n=4 · confidence 0.8

What they built

He owns Damn Vulnerable Drone, a drone hacking simulator built on the ArduPilot/MAVLink architecture, with 850 stars and 155 forks, last pushed 2026-09-29 [source]. He owns infected-drones, a collection of vulnerabilities and exploits against modern GCS, created 2026-06-28, with 28 stars [source]. He maintains Awesome-Drone-Hacking, a resource list with 191 stars [source]. His earlier GraphQL security tools, graphql-threat-matrix (373 stars) and CrackQL (352 stars), were last pushed in 2025 and 2024 [source] [source]. His profile lists ASEC.IO as his company [source]. What ASEC.IO sells is not in the evidence.

Record

Measured signals (n=4):

Founder language in bio (weight 20), including "Author of Black Hat GraphQL, Black Hat Bash & Drone Hackers Handbook" and "DC416 Founder" [source].

Commits on 2 robotics repos in 90 days, mavlink/qgroundcontrol and ArduPilot/MissionPlanner (weight 15) [source] [source].

830 commit contributions in the last year (weight 10) [source].

Maintains a robotics guide (weight 3) [source].

The 425 and 46 commits in 90 days are repo-wide totals [source] [source]. His share of those commits is not in the evidence. His account dates from 2014, and he has 406 followers and lists Toronto as his location [source].

Inference: The founder signal depends on "DC416 Founder" in a self-written bio. What DC416 is is not in the evidence.

Why now

Market timing is not in the evidence. Inference: His drone repos date from 2023-12 onward, while his GraphQL repos have gone quiet. This suggests his focus moved to drone and ground-station security [source] [source]. Inference: He both commits to GCS codebases and publishes exploits against GCS, which places him where robotics and defense overlap.

Unknowns

The content of his QGroundControl and MissionPlanner commits is not in the evidence.
ASEC.IO's stage, team, funding and customers are not in the evidence.
Usage of Damn Vulnerable Drone beyond stars and forks is not in the evidence.
No papers are listed.

Questions for the room

What did you commit to QGroundControl and MissionPlanner in the last 90 days: features, or fixes for flaws from infected-drones? This tests the multi-repo committer signal.
What does ASEC.IO sell, to whom, and what is its revenue? This tests the company field and the founder-language signal.
Who runs Damn Vulnerable Drone, and has anyone paid for training or support around it? This tests whether 850 stars reflect real users.

What would move the Skoor

Evidence that would raise it: ASEC.IO is a drone-security product company with paying customers, or he authored merged security fixes in QGC/MissionPlanner. Evidence that would lower it: his commits there are minor, or ASEC.IO is a services firm with no drone product.