Stop installing skills and MCP servers from viral threads unread
weswinder · x · 2026-11-16
A dev warns against blindly installing agent skills and MCP servers from viral threads: a skill is just instructions your agent will follow, and one malicious skill can exfiltrate your .env. Bookmark counts don't mean anyone audited the code — read the files before installing anything.
More from coding & agent
- Dude built a 'window blind' for his desktop — pull the cord, distractions vanish — round · 2026-11-16
- Ex-county GIS tech: an LLM-written GDAL script would have saved his 200GB tile nightmare — dreamwieber · 2026-11-16
- Qdrant workshop gives a simulated fly brain persistent trauma memories at AI Dev NYC — DeepLearningAI · 2026-11-16
- Explainer animation built entirely with code, no video editor needed — iamfakhrealam · 2026-11-15
- Alibaba's Qoder quietly adds stealth Qwen4-Max-Preview — one-prompt 3D Earth in 10 minutes — iamfakhrealam · 2026-11-15
- Two ready-to-use prompts to make coding agents fix happy-path debt and implicit state machines — Yamapama · 2026-11-15