Agent skills, plugins and MCP servers extend coding and productivity agents with instructions and scripts. Installing one gives its author influence over what your agent reads, writes and runs. The risks we found reviewing community skills, a review checklist, and the sandboxing and policy controls we use.
An engineer with nine keys in ssh-agent could not log in to a new server: the connection closed with Too many authentication failures before the right key was tried. How OpenSSH offers keys, why MaxAuthTries cuts it off, and a per-host config that fixes it and is safer.
A dashboard service account had a Role and RoleBinding for its namespace, yet every request failed with forbidden at the cluster scope, because the client listed pods across all namespaces. How Roles, ClusterRoles and bindings combine, how to debug with kubectl auth can-i, and a fix without cluster-wide read.
Most review comments are about naming and style, while the bugs walk past. How we review for correctness instead: follow the data, probe edge cases and error paths, look for races and trust boundaries, keep PRs small and hand style to machines.
Attackers copy popular repositories, add malware and promote the copies with similar names and fake stars. A practical guide for maintainers and users: how fake clones and repojacking work, how to make the real project verifiable with signed releases and provenance, and what to check before installing.
An exchange API key with withdrawal rights on a bot host is a hot wallet with extra steps. This guide covers the controls we use for trading bot keys: least-privilege permissions, IP allowlists, sub-accounts, secret storage, rotation, logging without leaking signatures, and incident response.