Computer Engineering student at the Instituto Tecnológico de Costa Rica (TEC). I build and ship software end to end, from the UI to the CI/CD pipeline, and I teach teams how to keep AI systems from being turned against them.
Recent work
- compdes-workshop: hands-on AI-agent security lab I designed and taught at COMPDES 2026 (Universidad de El Salvador). Attendees build an MCP/RAG agent, attack it with NVIDIA Garak and Microsoft PyRIT, then harden it.
- valencia-emocional-3modelos: research assistantship (TEC × UNAD, Colombia) predicting emotional valence from facial Action Units. MLP vs LSTM vs BiGRU-attention over 10×5-fold cross-validation, deployed with ONNX and Streamlit.
- RuneKeep: offline-first React Native app for Android and the web. 123 releases shipped through GitHub Actions to Cloudflare Pages. Live at runekeep.pages.dev.
- txt-forge: npm CLI that packages a codebase into AI-ready context. 4,900+ downloads in the past year.
- conversation-service: Azure microservice (Node, Cosmos DB, Service Bus, JWT + mTLS) with OIDC-based CI/CD.
Stack: TypeScript, Python, SQL, React / Next.js, React Native, Node.js, Azure, GitHub Actions, Docker, PostgreSQL, LLM security tooling.
Born in the U.S., based in Costa Rica, native in English and Spanish. Reach me at davidmolinaguerrero12@gmail.com.



