seo-engine: day 34 PM, security guide adds the Claude Code extension incident

docs/blog/index.html

@@ -3555,10 +3555,10 @@ <h3><a href="/blog/scheduling-autonomous-agent-missions/">Make a Hive Work While
     <div class="meta">
       <time datetime="2026-06-04">Jun 4, 2026</time>
       <span class="dot" aria-hidden="true"></span>
-      <span>4 min</span>
+      <span>5 min</span>
     </div>
     <h3><a href="/blog/security-for-ai-coding-agents/">Security for AI Coding Agents: A Practical Guide</a></h3>
-    <p class="dek">How to run AI coding agents safely: contain the blast radius, scope every task, treat agent input as untrusted, and gate the irreversible behind a human.</p>
+    <p class="dek">AI coding agent security means limiting what a wrong move can cost. Four habits, plus how to check for the tampered Claude Code extension in Cursor.</p>
     <div class="foot">
       <span class="tag kind">Guides</span>
       <a class="more" href="/blog/security-for-ai-coding-agents/" aria-label="Read: Security for AI Coding Agents: A Practical Guide">Read →</a>

docs/blog/tags/claude-code/index.html

@@ -1395,10 +1395,10 @@ <h3><a href="/blog/observability-for-agent-fleets/">Observability for Agent Flee
     <div class="meta">
       <time datetime="2026-06-04">Jun 4, 2026</time>
       <span class="dot" aria-hidden="true"></span>
-      <span>4 min</span>
+      <span>5 min</span>
     </div>
     <h3><a href="/blog/security-for-ai-coding-agents/">Security for AI Coding Agents: A Practical Guide</a></h3>
-    <p class="dek">How to run AI coding agents safely: contain the blast radius, scope every task, treat agent input as untrusted, and gate the irreversible behind a human.</p>
+    <p class="dek">AI coding agent security means limiting what a wrong move can cost. Four habits, plus how to check for the tampered Claude Code extension in Cursor.</p>
     <div class="foot">
       <span class="tag kind">Guides</span>
       <a class="more" href="/blog/security-for-ai-coding-agents/" aria-label="Read: Security for AI Coding Agents: A Practical Guide">Read →</a>

docs/blog/tags/guides/index.html

@@ -771,10 +771,10 @@ <h3><a href="/blog/debugging-multi-agent-systems/">How to Debug a Multi-Agent Sy
     <div class="meta">
       <time datetime="2026-06-04">Jun 4, 2026</time>
       <span class="dot" aria-hidden="true"></span>
-      <span>4 min</span>
+      <span>5 min</span>
     </div>
     <h3><a href="/blog/security-for-ai-coding-agents/">Security for AI Coding Agents: A Practical Guide</a></h3>
-    <p class="dek">How to run AI coding agents safely: contain the blast radius, scope every task, treat agent input as untrusted, and gate the irreversible behind a human.</p>
+    <p class="dek">AI coding agent security means limiting what a wrong move can cost. Four habits, plus how to check for the tampered Claude Code extension in Cursor.</p>
     <div class="foot">
       <span class="tag kind">Guides</span>
       <a class="more" href="/blog/security-for-ai-coding-agents/" aria-label="Read: Security for AI Coding Agents: A Practical Guide">Read →</a>

docs/blog/tags/multi-agent/index.html

@@ -1091,10 +1091,10 @@ <h3><a href="/blog/recovering-from-agent-failures/">Recovering From Agent Failur
     <div class="meta">
       <time datetime="2026-06-04">Jun 4, 2026</time>
       <span class="dot" aria-hidden="true"></span>
-      <span>4 min</span>
+      <span>5 min</span>
     </div>
     <h3><a href="/blog/security-for-ai-coding-agents/">Security for AI Coding Agents: A Practical Guide</a></h3>
-    <p class="dek">How to run AI coding agents safely: contain the blast radius, scope every task, treat agent input as untrusted, and gate the irreversible behind a human.</p>
+    <p class="dek">AI coding agent security means limiting what a wrong move can cost. Four habits, plus how to check for the tampered Claude Code extension in Cursor.</p>
     <div class="foot">
       <span class="tag kind">Guides</span>
       <a class="more" href="/blog/security-for-ai-coding-agents/" aria-label="Read: Security for AI Coding Agents: A Practical Guide">Read →</a>

docs/blog/tags/security/index.html

@@ -323,10 +323,10 @@ <h3><a href="/blog/agents-rule-of-two/">The Agents Rule of Two: A Simple Safety
     <div class="meta">
       <time datetime="2026-06-04">Jun 4, 2026</time>
       <span class="dot" aria-hidden="true"></span>
-      <span>4 min</span>
+      <span>5 min</span>
     </div>
     <h3><a href="/blog/security-for-ai-coding-agents/">Security for AI Coding Agents: A Practical Guide</a></h3>
-    <p class="dek">How to run AI coding agents safely: contain the blast radius, scope every task, treat agent input as untrusted, and gate the irreversible behind a human.</p>
+    <p class="dek">AI coding agent security means limiting what a wrong move can cost. Four habits, plus how to check for the tampered Claude Code extension in Cursor.</p>
     <div class="foot">
       <span class="tag kind">Guides</span>
       <a class="more" href="/blog/security-for-ai-coding-agents/" aria-label="Read: Security for AI Coding Agents: A Practical Guide">Read →</a>

docs/blog/topics/guides/index.html

@@ -943,10 +943,10 @@ <h3><a href="/blog/prompt-caching-for-ai-agents/">Prompt Caching for AI Agents:
     <div class="meta">
       <time datetime="2026-06-04">Jun 4, 2026</time>
       <span class="dot" aria-hidden="true"></span>
-      <span>4 min</span>
+      <span>5 min</span>
     </div>
     <h3><a href="/blog/security-for-ai-coding-agents/">Security for AI Coding Agents: A Practical Guide</a></h3>
-    <p class="dek">How to run AI coding agents safely: contain the blast radius, scope every task, treat agent input as untrusted, and gate the irreversible behind a human.</p>
+    <p class="dek">AI coding agent security means limiting what a wrong move can cost. Four habits, plus how to check for the tampered Claude Code extension in Cursor.</p>
     <div class="foot">
       <span class="tag kind">Guides</span>
       <a class="more" href="/blog/security-for-ai-coding-agents/" aria-label="Read: Security for AI Coding Agents: A Practical Guide">Read →</a>

docs/llms.txt

@@ -122,7 +122,7 @@ Saturday 24 October 2026.
 - [Evaluating AI Agent Reliability: How to Measure What You Can Trust](https://munderdiffl.in/blog/evaluating-ai-agent-reliability/): How to measure whether an AI agent is reliable enough to trust: reliability thresholds, why benchmarks overstate, and evaluating on your own codebase.
 - [Approving AI Agents: Human-in-the-Loop Without a Queue](https://munderdiffl.in/blog/human-in-the-loop-approving-ai-agents/): How to approve what AI agents do without a parallel approval queue: native permission prompts, routing 'to: human' to the orchestrator, remote approval.
 - [Prompt Caching for AI Agents: Stop Paying for the Same Tokens Twice](https://munderdiffl.in/blog/prompt-caching-for-ai-agents/): An agent re-sends the same prompt, tools, and context every turn. Prompt caching makes you pay for that prefix once — here's how to design for it.
-- [Security for AI Coding Agents: A Practical Guide](https://munderdiffl.in/blog/security-for-ai-coding-agents/): How to run AI coding agents safely: contain the blast radius, scope every task, treat agent input as untrusted, and gate the irreversible behind a human.
+- [Security for AI Coding Agents: A Practical Guide](https://munderdiffl.in/blog/security-for-ai-coding-agents/): AI coding agent security means limiting what a wrong move can cost. Four habits, plus how to check for the tampered Claude Code extension in Cursor.
 - [A Small-Team Playbook for AI Coding Agents](https://munderdiffl.in/blog/small-team-ai-agents-playbook/): How a small team adopts a hive of AI coding agents without chaos — the roles to assign, the cadence to run, and the guardrails that keep it safe.
 - [The Lethal Trifecta for Coding Agents](https://munderdiffl.in/blog/the-lethal-trifecta-for-coding-agents/): A coding agent reads private code, ingests untrusted content, and runs commands — the lethal trifecta. How a poisoned dependency leaks your secrets.
 - [Trigger Your AI Agent Hive from Slack](https://munderdiffl.in/blog/trigger-ai-agents-from-slack/): Trigger an AI agent hive from Slack: a local webhook verifies each message and drops it into your orchestrator's queue as a task — no server to host.

docs/sitemap.xml

@@ -10,7 +10,7 @@
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
   <url>
     <loc>https://munderdiffl.in/</loc>
-    <lastmod>2026-10-27</lastmod>
+    <lastmod>2026-10-31</lastmod>
     <changefreq>weekly</changefreq>
     <priority>1.0</priority>
   </url>
@@ -1292,7 +1292,7 @@
   </url>
   <url>
     <loc>https://munderdiffl.in/blog/security-for-ai-coding-agents/</loc>
-    <lastmod>2026-06-04</lastmod>
+    <lastmod>2026-10-31</lastmod>
     <changefreq>monthly</changefreq>
     <priority>0.8</priority>
   </url>