Security. 2 notes.
Read it before you install it: auditing an agent plugin
Microsoft published a plugin that watches coding agent sessions. I read the code before installing it, found one real condition, and built two small pieces of my own instead.
November 2026AgentsSecurity
Guardrails for coding agents: hooks that stop mistakes
Rules in a prompt can be ignored. A hook cannot. Here is how a small script in front of every tool call keeps secrets out of the output, with sample code and honest limits.
October 2026SecurityAgents