ai
Tool Poisoning and MCP Security: When Your Agent's Toolbox Is the Weapon
MCP tool descriptions are instructions, not metadata. Here's how attackers exploit that — and what the benchmark data actually shows about model safety alignment.
security
Defensive security, penetration testing, and risk assessment—augmenting human expertise through structured methodology and hands-on practice.
security
From Pattern Scanner to Security Researcher: The Code Review Upgrade
The code review skill now runs four sequential passes — structural recon, pattern scanning, semantic data flow tracing, and self-verification with confidence ratings.
security
Prompt Injection in 2026: Why the Attack Surface Keeps Growing
Prompt injection isn't growing because attackers got smarter. It's growing because we keep adding capability without solving the underlying architectural problem.
security
From Vulnerable to Validated: A Comprehensive Security Code Review Journey
14 security vulnerabilities found. 3 systematic sprints. 100% validation success. How systematic code review and sprint-based remediation transformed our framework from vulnerable to production-ready.
security
AI Penetration Testing: Reality vs. Hype
The market promises autonomous AI pentesters replacing humans. The reality is more nuanced. What AI pentesting actually is, what it isn't, and why adjacency beats replacement.
security
Security Hardening the IA Framework: A Systematic Audit
A systematic gap analysis against Claude Code security standards revealed dormant hooks, missing defense layers, and undocumented decisions. Here is what I found and what I fixed.
security
Introducing Advisory: Automated Security Research That Actually Cites Its Sources
Security guidance with framework citations, not hallucinations. Meet /advisory—a skill that automates research BEFORE asking questions.
framework
Building a Privacy-First AI Model Ranker with OpenRouter ZDR
Automated model ranking system aggregating benchmarks from four sources with zero data retention filtering.
culture
AI and C.S. Lewis: How The Abolition of Man Predicted Our Current Moment
In 1943, C.S. Lewis warned of a philosophical crisis that's now arriving with AI. We've embraced moral relativism while building systems that require absolute moral certainty.
culture
The Roll-Up Economy: How Private Equity Is Monopolizing Everything
From cybersecurity to plumbing, private equity uses identical playbook to consolidate fragmented industries. The result: higher prices, reduced competition, and consumers paying for financial engineering.
security
Ephemeral Observability: Real-Time Monitoring for AI Development
Introducing a new design pattern for developer tools: ephemeral observability. The IA Framework monitor skill demonstrates how architectural constraints create advantages for localhost AI development workflows.
security
Close-Loop Vulnerability Remediation: Multi-Phase Workflow from Finding to Validation
Build a complete vulnerability remediation workflow using SSH and structured phases - no enterprise SOAR platform required.