Beam / field notes

What we’re seeing in the field.

What we're seeing as we watch AI coding agents work — flagged actions, skill/MCP scan findings, and how to keep Claude Code, Codex, and the rest honest without slowing them down.Page 10 of 14

All authorsYash ThakkerBeam TeamNewest firstOldest firstTitle A–Z

AllAI AgentsSecurityAI Agent SecuritySupply ChainClaude CodeIncident ResponseThreat IntelligencePrompt InjectionOpenAIMCPAnthropicAgent SecurityCredential TheftAgent SkillsVulnerability ManagementClaimed vs Verified

158 posts

Sep 19, 2026 · 11 min readJev and Agent Hooks: What a Judgment Model in Your Pipeline Means for SecurityTypeSafe AI's Jev is a non-generative "System One" model increasingly used inside third-party hooks (jev-guard, jev-axi) to risk-score a coding agent's tool calls before they run. Beam added discovery-only support for it rather than an installable hook, because that ecosystem has no single vendor contract yet.Sep 15, 2026 · 17 min readBeam MDM: Apple and Windows device management, alongside agent monitoringDevice management used to be a separate tool from AI agent oversight. Beam now brings both into one workspace: enroll Apple and Windows devices, push configuration, and track remote operations next to the agent activity running on those same machines.Sep 15, 2026 · 12 min readOpenAI's Project Lily: what human review of ChatGPT chats means for work404 Media's reporting on OpenAI's internal "Project Lily" confirms something most ChatGPT users assume isn't happening: contractors read real conversation threads to grade model responses. It's industry practice, not an OpenAI-only story — and it says a lot about why ungoverned AI use at work is a bigger blind spot than any one chatbot's privacy settings.Sep 14, 2026 · 12 min readAgent Skills specification and security reviewA valid SKILL.md tells an agent how to discover and use a skill. A security review must also account for everything the package can read, execute, download, or change.Sep 14, 2026 · 12 min readAI Agent Application and Supply-Chain SecurityA practical review method for the application and delivery paths around an AI agent. Connect API authorization, sensitive-data handling, package execution, and CI privileges to specific evidence and fixes.Sep 14, 2026 · 10 min readAI agent deployment security and incident responseConnect deployment review to incident investigation: inspect container and cloud boundaries, understand telemetry gaps, and distinguish a suspicious instruction from a confirmed effect.Sep 14, 2026 · 11 min readAI agent security assessment: skills, tools, and evidenceA practical review of the path from untrusted instructions to sensitive actions, with a reproducible test design and clear limits for offline scanning.Sep 14, 2026 · 11 min readAI agent web and transport securityAgent security extends through the browser, session API, tool dispatcher, and provider connection. This guide maps those boundaries and shows how to review them without exposing real conversations or credentials.Sep 14, 2026 · 12 min readAI Asset Inventory and Model Security: A Repository ReviewA practical repository review for agents, model dependencies, prompts, datasets, and deployment configuration. Learn how to record evidence, prioritize findings, and distinguish configuration from runtime activity.Sep 14, 2026 · 12 min readUse Beam security skills with Claude Code and Codex sub-agentsA guide to choosing Beam security workflows, installing reviewer profiles, and combining specialist findings without losing scope or evidence.Sep 14, 2026 · 11 min readMCP security: review servers before connecting your agentA practical pre-connect review for local and remote MCP servers, covering package provenance, untrusted tool manifests, OAuth boundaries, and the limits of static scanning.Sep 14, 2026 · 10 min readHow to Stop Claude Code From Running Dangerous CommandsClaude Code will run a destructive shell command unless something stops it first. This guide walks through the three real levers — permission rules, PreToolUse hooks, and sandboxing — and where Beam fits as a local observer on top of them.

Page 10 of 14 · 158 posts