I Audited a Claude Code Plugin That Reads All Your Browser Cookies
A security review of millionco/expect — a Claude Code plugin that runs AI-driven browser tests via Playwright. The skill is safe. The CLI decrypts every cookie in your browser.
Blog
Long-form posts about software, vibe coding, and building in public.
Everyone's Sharing Claude Code Skills. Nobody's Checking What's Inside.
The skills ecosystem is growing fast. A recent study found malicious payloads in 13% of published skills. Here's what that looks like in practice and what you can do about it.
The Blind Spot in Vibe Coding: Your AI Agent Doesn't Check Licenses
Your AI coding agent installs packages to solve problems. It doesn't check if those packages are GPL, unlicensed, or pulled from a sketchy mirror. Here's how to protect your project.
Claude Code Loves Worktrees. Your Infrastructure Doesn't.
Claude Code's instinct to parallelize with worktrees is powerful — until your project has Docker Compose, env secrets, and 5 services fighting for the same port.
Scaling Vibe Coding: A Framework for Teams Using Claude Code
Vibe coding works great solo as is. But what happens when your team grows exponentially?