Supply Chain

10 guides tagged “Supply Chain”.

  1. What Is Agent Skill Poisoning? Skill poisoning is a skill whose instructions make the agent do something harmful: run a payload, read secrets, or widen its own permissions. Information Security intermediate 5 min
  2. How to Audit an Agent Skill Before You Install It Read what the skill tells the agent to run: download-and-execute steps, broad file reads, permission changes, and hidden network calls. Software Engineering intermediate 5 min
  3. Kubernetes Security for AI Builders: Hardening the Cluster Your Assistant Configured A default cluster trusts everything inside it. Learn RBAC, network policies, pod security, Secrets, and image hardening — the Kubernetes security work your AI's manifests skip. Information Security intermediate 13 min
  4. Securing AI Agents and LLM Features: The Attack Surface You Just Added Prompt injection, MCP servers, non-human identities, and hallucinated packages — every security concept that applies once your app has an LLM feature or an AI agent. With linked guides. Information Security intermediate 13 min
  5. InfoSec for Vibecoders: Every Security Concept Your AI-Generated Code Gets Wrong Your AI coding assistant ships SQL injection, exposed secrets, and broken access control by default. Learn every infosec concept you need to catch these before they hit production. 40+ linked guides. Information Security beginner 14 min
  6. How to Generate an SBOM for Your Project Generate an SBOM with Syft in one command, scan it with Grype for vulnerabilities, and add it to CI. A practical tutorial. Information Security beginner 7 min
  7. What Is Slopsquatting (AI Package Hallucination Attacks)? Slopsquatting is registering the fake package names AI models hallucinate, so generated code installs malware. Learn how it works and how to avoid it. Information Security intermediate 7 min
  8. What Is a Software Supply Chain Attack? A software supply chain attack compromises the tools or dependencies you trust, not your code. Learn the vectors and how to defend against them. Information Security beginner 8 min
  9. What Is a Software Bill of Materials (SBOM)? An SBOM is a machine-readable inventory of every component in your software. Learn what it contains, its formats, and why it's increasingly required. Information Security beginner 7 min
  10. What Is Dependency Confusion (and How Do You Prevent It)? Dependency confusion makes your build install a malicious public package instead of your private one. Learn how the attack works and how to pin it out. Information Security intermediate 5 min