Yubico's USB-C and NFC security key: how it stops phishing, how it puts a human touch in front of AI agents, a hardening cheatsheet, GPG keys with an offline backup, and what it costs. €69.02, and you need 2.

OpenID Connect explained plainly: short-lived signed tokens instead of permanent API keys, why Vercel wants to kill static credentials, and what it means for AI agents.

Danielle Morrill's setup for giving Claude Code agents real credentials: 1Password as the source, a read-only service account per Mac, and the macOS keychain as the cache.

Google's open-source toolkit of agent skills that find, reproduce and patch security vulnerabilities in a codebase, from threat model to verified fix and report.

Cloudflare's open-source skill that turns a coding agent into a security auditor: 6 phases, independent verification, and machine-readable findings.