Blog

How AI coding agents behave in real projects, how to keep the code they write safe, and what changed in your stack since their training cutoff.

Cover: Read it before it runs, next to a SKILL.md that pre-approves Bash, pipes an install script to bash and ships a script that opens AWS credentials and calls a telemetry URL, flagged critical and high

Guides

How to check a Skill or MCP server before you install it

A 10-minute review for Agent Skills and MCP servers: who published it, what runs, what it can reach, how to pin it. With scan data from 55,000 listings.

CodexGuild ResearchOct 22, 20269 min read

Cover: the word AgentBaiting next to an illustrated agent reply recommending 45d5r/databricks-mcp-server and listing install steps that end in a Run anyway button

Agent security

AgentBaiting: fake MCP servers your coding agent recommends

800+ fake Skills and MCP servers got coding agents to relay malware install steps. What happened, what's left three months later, and rules for your agent.

CodexGuild ResearchOct 22, 20266 min read

Cover: litellm 1.107.0 inside a quarantine-tape frame, next to the three files the release added to site-packages — cook.pth, cook.py and sitecustomize.py — and the verdict "Assume compromised"

Agent security

litellm 1.107.0 was backdoored: check, clean up, rotate

litellm 1.107.0 on PyPI ran a credential stealer on every Python start, coding-agent configs included. How to check without triggering it, clean up and rotate.

CodexGuild ResearchOct 22, 20267 min read