Sean Drumm

building

[Sean Drumm @sjdweb]

@tobi https://t.co/RZdg8wdGxA

[Sean Drumm @sjdweb]

@onusoz @sandraleow Been working on the slack ACP PR - are you already working on this?

https://t.co/9UjTLyAxw7

[Sean Drumm @sjdweb]

@AISecHub you may find interesting

[Sean Drumm @sjdweb]

I modified an AI agent skill to steal env vars, shell history, and git config, then installed it into Claude Code and Codex.

Both executed it without a prompt, a warning, or a question.

Thread: what happened, and what we found scanning ~5k skills. 🧵

[Sean Drumm @sjdweb]

Try it today at https://t.co/98I2e7apCx

npx vett add https://t.co/iQ4Hjydyll

or install the vett cli via npm/pnpm.

Full writeup here https://t.co/R3eZ6kGMqA

[Sean Drumm @sjdweb]

@iannuttall Interested in MCP. Please DM!

[Sean Drumm @sjdweb]

@djfarrelly @Shpigford Just went through this decision - Inngest running in my Vercel account felt way cleaner than having my worker code execute on Trigger’s infrastructure. Less vendor dependency, more control over my functions.

[Sean Drumm @sjdweb]

@shl @JacobWolf https://t.co/XxQdcDzbMW

[Sean Drumm @sjdweb]

@lachances @excid3 @jnunemaker Still available?!

[Sean Drumm @sjdweb]

@dhh Any way to get a last minute ticket?