9 guides
Claude-code
Plain-English guides on claude-code for non-technical founders building with AI tools.
founder · 9 min read
NewThe Fix for Last Month's Agent Supply Chain Problem Doesn't Work
Plugin4Shell defeats SHA pinning in Claude Code, Codex, Copilot and Gemini CLI. Two are patched, two are not. Here's which version you need.
founder · 8 min read
NewThe Skill You Installed Last Month Might Be Malware Now
Attackers are cloning AI agent skills, waiting for the install count to climb, then adding the payload. 17,800 add-ons. 6.7 million installs. What to check.
founder · 9 min read
NewEvery File Your Agent Reads Is Executable
Four separate attacks in six weeks. Config files, vendor docs, firewall logs. Same shape every time, and the fix is the same three sentences.
founder · 8 min read
NewYour Agent Trusts the Vendor's Docs. Nobody Owns Half of What They Point At.
Researchers found 227 install commands in company docs pointing at packages nobody owned. Agents ran them inside Fortune 500 networks in minutes.
founder · 8 min read
NewThe Repo Someone Sent You Can Run Code Before You Type Anything
GitSpawn hits seven AI coding agents. Three are still unpatched. The fix takes one command, and it is not the one you'd guess.
founder · 8 min read
What Is Your Coding Agent Actually Allowed to Touch?
Every AI coding tool now ships permission controls. They mean different things, and both major vendors say theirs are not a security boundary.
founder · 7 min read
Your coding agent now approves its own actions
Claude Code flipped to auto mode by default on August 14. An AI now decides what your agent is allowed to do. Here's the founder's read.
founder · 8 min read
Best Vibe Coding Assistants (2026): AI Coding Agents Compared
The best vibe coding assistants and AI coding agents in 2026: Cursor, Claude Code, Copilot and more, compared for when you want real control.
founder · 7 min read
What Anthropic Actually Shipped at Code with Claude 2026
The May 6 SF developer event delivered Claude Managed Agents, Remote Agents for Claude Code, and the clearest signal yet on where Anthropic is heading.