Beam / field notes

What we’re seeing in the field.

What we're seeing as we watch AI coding agents work — flagged actions, skill/MCP scan findings, and how to keep Claude Code, Codex, and the rest honest without slowing them down.Page 13 of 14

All authorsYash ThakkerBeam TeamNewest firstOldest firstTitle A–Z

AllAI AgentsSecurityAI Agent SecuritySupply ChainClaude CodeIncident ResponseThreat IntelligencePrompt InjectionOpenAIMCPAnthropicAgent SecurityCredential TheftAgent SkillsVulnerability ManagementClaimed vs Verified

158 posts

Sep 10, 2026 · 10 min readHow to vibe code safely with BeamThe vibe coding checklist tells you what to do. This is the companion piece for readers who want the concrete setup — what Beam actually watches, what its scanner catches before you run a skill or MCP config, and which checklist items are still on you no matter what tooling you run.Sep 10, 2026 · 12 min readWhat is security.txt? RFC 9116, and the note HF left for AI agentssecurity.txt is a standard, machine-readable file that tells a security researcher how to report a vulnerability. Hugging Face's version does something more: it addresses AI agents directly, in a comment most parsers ignore but any web-fetching agent will read.Sep 9, 2026 · 11 min readAI agent security: securing coding assistants against skill injectionA SKILL.md is plain text your agent obeys. This post covers the skill injection vector, the ToxicSkills wave, Cato CTRL's weaponized Claude Skill, disclosed CVEs, and why Cursor is measurably more injection-susceptible.Sep 9, 2026 · 18 min readAI agent security incidents: a timeline (2025-2026)From a coding agent deleting a production database mid-freeze to an autonomous attacker breaching Hugging Face, this timeline lists the confirmed AI agent security incidents of 2025-2026 in order, with primary sources and the pattern connecting them.Sep 9, 2026 · 12 min readAI compliance and regulation for agent activity: what auditors needSecurity teams rolling out coding agents need one audit trail across mixed agents and IDEs. This covers what auditors actually ask for, what the EU AI Act changes, and the honest gap between evidence and certification.Sep 9, 2026 · 12 min readThe Hugging Face agent breach: when the attacker is also an AIOn July 21, 2026, Hugging Face's dataset pipeline was reportedly breached by an autonomous AI system chaining an HDF5 deserialization leak and a Jinja2 template-injection RCE on its own, with no human directing each step. This explains what happened, what is still unclear, and what it means for anyone running local coding agents.Sep 9, 2026 · 11 min readIntroducing Beam: a local-first security console for your AI coding agentsAI coding agents can read your files, run shell commands, and pull in skills and MCP servers you haven't audited. Beam watches what they do locally, flags what looks wrong, and never ships your activity anywhere.Sep 9, 2026 · 12 min readMCP security: a practical guide to tool poisoning and rug pullsTool poisoning, tool shadowing, rug pulls, and toxic flows are the four documented MCP attack classes. This guide covers how each works, what the postmark-mcp incident proved, and the honest limits of MCP scanning.Sep 9, 2026 · 11 min readnpm supply-chain worms are coming for your AI toolingSelf-replicating npm worms have moved from generic package theft to deliberately targeting AI and agent tooling by name. This explains how Shai-Hulud, Mastra AI, axios, node-ipc, and Clinejection actually propagate, and what to check in your own dependency tree.Sep 9, 2026 · 11 min readNullBulge and the Disney breach: when a fake AI tool becomes a felonyRyan Mitchell Kramer, operating as NullBulge, agreed to plead guilty to two federal felonies after a malicious custom node for ComfyUI stole the credentials behind a 1.1TB Disney Slack leak. This is what a real prosecution over malicious AI tooling looks like, and why it is still rare.Sep 9, 2026 · 12 min readHow much sensitive data do people share with AI chatbots? The 2026 numbersEmployees paste something sensitive into an AI chatbot roughly every three days, per DLP telemetry. This roundup covers what the 2026 reports actually measured — the data going in, the trust gap, and the breach numbers coming out the other side.Sep 9, 2026 · 14 min readVibe coding security: a practical checklistVibe coding is fast and genuinely productive, but handing an agent a monorepo and standing production access is how you get the Replit incident. This is a practical, non-preachy checklist for keeping it that way on purpose.

Page 13 of 14 · 158 posts