← Feed

Posts

• View post

  kinda feel bad I'm doing a software update while at the lounge's wifi

• View post

  Claude Code + Snyk MCP Server = secure code at inception ✨ Video courtesy of the brilliant Brian Clark

• View post

  here's an example in action of coding agents suggesting whatever random open souce package that made sense, but... is it actually healthy? maintainable? free of vulnerabilities? who knows unless you install the Snyk MCP server and then you know (there's a package health tool)

• View post

  another finding from a seed/starter Python (Flaks) project which devs have likely built their projects with and had "adopted" the insecure code that leads to a security vulnerability (harmful IDOR here)...

• View post

  snapshot from the Snyk VulnBench when I set out to build the benchmarking harness so if I were to build a new benchmark - what questions would you want it to answer... ?

• View post

  if you think engineering and technical savy is unimportant beacuse you can just ask the agent... well, here's yet another example of pushing back and steering agents away from disaster and disappointed users

• View post

  Claude and me

• View post

  trustworthiness is engineered, and it's engineered where Snyk operates (context, tooling, guardrails) thanks for coming to my ted talk

• View post

  hmmm, didn't Anthropic folks say that this model switch in between session is no longer an issue or did I miss something? that's from the Claude Code app

• View post

  it feels weird but also right at the same time what is happening

• View post

  what if I ran /grill-me but I'd have the agent answer its own questions

• View post

  wip for running the benchmarks on VulnBench 2.0 which is a new set of fixture data, larger apps codebase, varied language ecosystem... pretty interesting how harness + model are very much a pair, for example Codex Security agent with Terra on xhigh just isn't scoring high enough

• View post

  we're in 2026, AI-pilled and the right-click spelling menu in macOS is horrible and useless, what the actual hell

• View post

  When Claude Code prints that token stat (10k tokens) I assume those are output tokens, right? how do you know?

• View post

  jack of all trades, orchestrator top gun

• View post

  vanity metrics of the day

• View post

  oh my god, new hell discovered

• View post

  you're all rushing into Skynet speculations from Mythos and other cybersecurity models but in the meanwhile, in the reality of things, about 3 years later after I disclosed these set of (CVE) vulnerabilities, I received a note that a maintainer will look into addressing them in a fork 🤷‍♂️

• View post

  if you haven't yet jumped on the LifeOS wagon, well... there's no better time. go build yourself a second brain.

• View post

  from CLI to an isolated workspace environment I can work with Claude Code app in under a minute. Slick DX powered by Boxdown ✨

• View post

  looks like a lot of you are working with agents in a highly privileged mode + highly sensitive environment (your local dev machine) how do you sleep at nights? 😅

• View post

  what AX means

• View post

  it's 2026 and Atlassian didn't add export to Markdown in Confluence :(

• View post

  Black Hat 2026 will be riddled with AI Security announcements but this one from Snyk I am genuinely excited about Agentic Development Security is how we started with shaping GenAI code to ensure secure and trusted output and then continued to MCP security and then Skill scanning

• View post

  it's been cooking for quite some time but it's not the duration but rather that it's a relatively small scope so now I'm super curious at what the agent stumbled onto throughout that required this amount of work to be invested... how do you all do agents observability locally?

• View post

  secure software factory >> software factory

• View post

  Snyk VulnBench JS 1.0 shows that the best-scoring LLM configuration reached 75.4% Snyk-reference F1, leaving a 24.6-point gap against deterministic SAST reference reproduction. Go read up on this coding agents security benchmark

• View post

  DevRel friends you should invest more in doing deep research I ran the VulnBench benchmark project at Snyk, which now graduated to a full-time Forward Research initiative under DevRel, and it's not only satisfying from a technical perspective but also incredibly energising to dive into the details

• View post

  in case you were living under a rock and missed the OpenAI + Hugging Face incident from last week... Here, I highlighted everything you need to know from the incident report. Maybe emergent properties? Maybe Skynet early days. Maybe a nice PR. Either way, stay vigilant.

• View post

  I was really hoping to use VS Code for managing the second brain Obsidian-like vault but the extensions and overall capabilities are just terrible What did you all do? Just use Obsidian?