#ephemeral credentials
7 related articles
·2 min
hotcell: A Local Sandbox SDK Built for AI Agents
hotcell is an open-source self-hosted sandbox SDK designed for secure AI Agent code execution. Run locally on Mac/Linux with default-deny egress, per-sandbox ephemeral tokens, and resource controls.
Read more →
Clawk: Creating Disposable Linux Sandb…
·2 min
Clawk: Creating Disposable Linux Sandbox Environments for AI Coding Assistants
Clawk offers a core solution to AI coding assistant security risks: disposable Linux VMs that isolate SSH keys, API tokens, and sensitive data from agents like Claude Code and Cursor.
Read more →
·4 min
Deep Dive into actions/checkout: The Core Foundation of GitHub Actions CI/CD
A comprehensive guide to GitHub Actions' actions/checkout: how it works, key parameters, and best practices covering fetch-depth, cross-repo checkout, security, and version pinning strategies.
Read more →
·3 min
Claude Code Permission Management Fully Explained: Configure It Right Before You Trust It
Deep dive into Claude Code's four permission categories (Bash, File, MCP, WebFetch), two-level config system, and three common pitfalls for safe AI coding.
Read more →
·2 min
The Era of Managed Agents: Anthropic vs. Google's Two Diverging Approaches
Deep analysis of Anthropic vs Google's Managed Agent architectures, pricing strategies, and selection guidance. Managed Agents are emerging as a new AI infrastructure product category.
Read more →
Tutorials·3 min
Open Code Practical Guide: Building an AI Coding Team with Multi-Agent Systems
Deep dive into Open Code's core architecture: main agents, sub-agents, Skills extensions, JWT security, and multi-platform deployment for building efficient AI coding teams.
Read more →
