Claude Code Skills: What They Are, Where They Live and How to Write One
Claude Code skills, checked 14 Oct 2026: what a skill is, where skill folders live, a first skill file, how Claude picks one and how to share them.
Guides
Read →
Tag
#Security
13 posts tagged Security.
Muse and Grok Bot Want Your Passwords. Here Is Who Can See Them
Meta Muse and Grok Bot both ask for your logins. We read both companies' security docs: who sees your passwords, what trains on your chats, and how to keep AI agents on your own computer instead.
Comparisons
Read →
Meta Muse vs Grok Bot: Same Blueprint, Different Locks
Meta Muse runs personal errands. Grok Bot is a team of work agents. Compare price, security and platforms, and see which one fits you.
Comparisons
Read →
Grok Bot Alternatives: 9 Picks, Hosted or on Your Computer
Grok Bot runs every Bot on one shared cloud computer in the US. Nine alternatives checked on 30 Sep 2026, from ChatGPT dots to open source agents you run.
Comparisons
Read →
What Is Vibe Coding? Meaning, Risks and Safer Habits
Vibe coding means building software from AI prompts without reading the code. Where the term came from, when it is fine, where it bites, and what to check.
Concepts
Read →
Why Does Claude Code Keep Asking for Permission?
Claude Code keeps asking because Manual mode gates edits, shell commands and web requests. The fixes, safest first: modes, allow rules, sandboxing, then bypass.
Guides
Read →
How to Hire From the Agent Gallery
A practical guide to Munder Difflin's Agent Gallery: pick one of 80 ready made roles, download its manifest, import it with Add agent, review every field, customise identity, workspace, engine and briefing, then spawn it yourself.
Guides
Read →
Treating a Hire Manifest as Untrusted Input
A shareable agent-config manifest is attacker input. How Munder Difflin's import pipeline stays inert: no auto-spawn, default-deny flags, and an SSRF-safe bounded fetch.
Internals
Read →
MCP Tool Poisoning: How to Secure the Model Context Protocol
How the Model Context Protocol gets attacked — tool poisoning, rug pulls, command injection — and the layered defenses that secure your MCP tools.
Guides
Read →
Running AI Agents Safely: Permission Modes and Sandboxing
How to run autonomous AI agents safely: permission modes and the bypassPermissions foot-gun, workspace isolation, and what to gate vs. allow.
Guides
Read →
The Agents Rule of Two: A Simple Safety Rule for Coding Agents
Meta's Agents Rule of Two for coding agents: don't let one session combine untrusted input, private data, and external reach at once — or supervise.
Concepts
Read →
Security for AI Coding Agents: A Practical Guide
How to run AI coding agents safely: contain the blast radius, scope every task, treat agent input as untrusted, and gate the irreversible behind a human.
Guides
Read →
The Lethal Trifecta for Coding Agents
A coding agent reads private code, ingests untrusted content, and runs commands — the lethal trifecta. How a poisoned dependency leaks your secrets.
Guides
Read →