#supply-chain

Tagged with "supply-chain"

TechnologySep 19, 20268 min read

Plugin4Shell: A Pinned AI Agent Plugin Was Not Necessarily the Code That Ran

Plugin4Shell bypassed commit pinning in four major coding agents. The immediate task is patching; the lasting lesson is to verify resolved artifacts and constrain agent runtimes.

Kyluke McDougall

Read the analysis

TechnologyJun 15, 202610 min read

AI Agent Skills Are Software Supply Chain Now

AI coding agents are getting reusable skills, commands and tool integrations. For serious products, those capabilities need the same discipline as dependencies, CI scripts and production access.

Kyluke McDougall

Read the analysis

TechnologyMay 16, 20269 min read

When AI agents install packages, supply-chain security becomes architecture

AI coding tools speed up development. They also speed up the moment when compromised dependencies, scripts and credentials become production risk.

Kyluke McDougall

Read the analysis