AINewsnow

trust-me-bro: Reading an Agent Skill Before It Reads Your .env

One skill folder now runs on Claude Code, Codex, Copilot, Cursor and Gemini CLI. The format is a directory with a SKILL.md and two required frontmatter fields. No signing, no attestation, no review step. Agent Plugins 1.0 says outright that publisher identity and signatures are out of scope. So the…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-14 21:50 · DEV Community — AI
    trust-me-bro: Reading an Agent Skill Before It Reads Your .env

More stories

  1. My Claude Code auto mode config still said GITHUB_ACCOUNT_HERE. One command found it. — DEV Community — AI
  2. GitHub Copilot Model Deprecations on Dec 14, 2026: What to Switch To — DEV Community — AI
  3. I ran the same Halloween animation prompt through five coding agents on one local Qwen model — r/LocalLLaMA
  4. Aletheia 0.2.0: what a full gap scan found in a local memory hub for AI coding tools — DEV Community — AI
  5. Nvidia board to decide Jensen Huang’s fate — Financial Times AI
  6. Anthropic launches Claude Fable 5.2, topping AI index amid rivalry with GPT-6 Astra — DEV Community — AI
  7. What AI coding tools actually cost in November 2026 (16 tools, list prices with sources) — DEV Community — AI
  8. Offering AI coding governance to your clients: an MSP and vCISO playbook — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →