Keyword AUTHFIX
Check Better Auth Magic Link and OAuth Proxy fixes
Check the affected login configurations and coordinate the upgrade across participating servers.
20 resources
Security
Advisories, leaked secrets, risky permissions and supply chain incidents in AI coding tools, with the steps to check and fix your setup.
/
Keyword MERGEGATE
Run five checks before merging AI-written code
Check secrets, unused code, duplication and dependencies, then put repeatable checks in hooks.
Keyword DEPGATE
Check packages before trusting an AI suggestion
Inspect package provenance, lockfile hosts and known vulnerabilities before accepting new dependencies.
Keyword WEEKLY
Check five Claude Code compaction and sandbox fixes
Review the 2.1.309 and 2.1.311 fixes for long sessions, stale instructions, MCP tools and sandbox behavior.
Review claude-mem prompt upload consent before setup
Compare the reported historical upload behavior with the consent flow in the version you install.
Keyword FOLDER
Check instruction files before starting a coding agent
Review downloaded instructions and agent endpoints before they can steer a coding session.
Keyword ACTIONGATE
Check GitHub Actions before merging workflows
Check syntax, security and action pins before running a workflow with access to your repository.
Keyword HERMESMOVE
Import Claude Code settings into Hermes
Preview imported instructions and tools, then review permission rules and credentials that do not transfer.
Keyword BINLOOK
Inspect a binary with capa, Ghidra, YARA-X and ILSpy
Choose an inspection tool for the file type and keep unknown binaries away from your working machine.
Check PHP deployments for the October security fixes
Check the web runtime and vendor patches; the command-line PHP version may belong to another installation.
Keyword BACKUP
Keep coding agents away from production data
A database deletion at Replit shows why recovery and production access need separate checks.
Update Python tooling after the eMudhra certificate incident
Update pip and certificate bundles in each environment; an operating-system update alone is insufficient.
Keyword TVCLEAN
Check your TV before running a cleanup agent
Identify the operating system and preserve a restore path before disabling TV packages.
Keyword OPENSAFE
Read startup files before opening an unfamiliar repository
Inspect hooks and editor startup configuration before a cloned repository can execute commands.
Keyword MCPFIX
Check the MCP reference server security release
Check package versions explicitly after the versioning change, and read the remaining Windows filesystem limitation.
Keyword EXTENSION
Check the affected Claude Code extension in Cursor
Use Cursor's incident checks and remediation guidance; removing the extension alone may leave persistence.
Keyword WABOT
Set up a private Hermes WhatsApp bot
Choose the official integration or configure the unofficial bridge with explicit access controls.
Keyword INSPECT
Check MCP Inspector security fixes before connecting
Match your Inspector version to the published fixes before trusting a remote server.
Review what your AI assistant's browser can access
Review embedded-browser risks from the EMBRACE report without treating its publication-day patch status as current.
Keyword ENVLOCK
Lock Claude Code out of your .env
Four steps that stop Claude Code reading your secrets, and the check that proves it worked.