# Thoughts & Stories: 8 / 137

> Sharing my experiences, learnings, and adventures in tech and beyond.

URL: https://www.matthewswong.com/en/blog/page/8/

- [Malicious Agent Skills: ClawHavoc SKILL.md Supply Chain Guide](https://www.matthewswong.com/en/blog/agent-skills-supply-chain-clawhavoc-skill-md/)
- [GitGuardian Secrets Sprawl 2026: AI Agent Commits, MCP Configs](https://www.matthewswong.com/en/blog/gitguardian-secrets-sprawl-2026-ai-agent-commits/)
- [Anthropic Threat Report September 2026: DevOps Lessons](https://www.matthewswong.com/en/blog/anthropic-threat-report-september-2026-agent-attacks/)
- [METR AI Developer Productivity Study 2026: What It Really Says](https://www.matthewswong.com/en/blog/metr-developer-productivity-2026-uplift-update/)
- [AI Code Security Report 2026: Veracode Stuck at 56% Pass Rate](https://www.matthewswong.com/en/blog/veracode-2026-genai-code-security-report-pass-rate/)
- [Cursor CVE-2026-22708 RCE: Shell Built-ins Beat the Allowlist](https://www.matthewswong.com/en/blog/cursor-cve-2026-22708-shell-builtins-allowlist-bypass/)

---

- HTML version: https://www.matthewswong.com/en/blog/page/8/
- Bahasa Indonesia: https://www.matthewswong.com/id/blog/page/8/
- Site index for agents: https://www.matthewswong.com/llms.txt
- Sitemap: https://www.matthewswong.com/sitemap.xml
- API description (OpenAPI): https://www.matthewswong.com/openapi.json