Back to the portfolio
The blog

Field notes.

Notes from the terminal, the incident, and the next thing to figure out.

AgentVouch

The Supply-Chain Risk in AI Agent Skills

How agent skills can turn instructions into unsafe actions—and a practical checklist for reviewing files, limiting access, and evaluating reputation signals.

7 min readRead note
AgentVouch

Junk Skills: When SKILL.md Gets Ahead of Reality

Why AI skill descriptions need evidence: inspect author reputation, USDC-backed vouches, and dispute history before trusting a SKILL.md file.

3 min readRead note