Engineering write-ups, product decisions, and the occasional opinion on how to ship developer infrastructure. Long enough to be useful, short enough that you'll finish it.

341 malicious skills on ClawHub showed how agents inherit supply chain risk. What a scan catches, what it misses, and what your agent should check first.

ApyHub shipped a native MCP server that lets AI agents search the certified API catalog at runtime and call exactly the capability they need, instead of loading hundreds of tool d…