ssh terminal.shop 

This week on The Standup, the crew digs into the chaos of AI “skills,” agent tooling, and the growing security risks nobody seems to be paying attention to. From hallucinated commands spreading across GitHub to supply-chain nightmares and wild real-world examples, it’s a funny, slightly terrifying look at where AI tooling is headed. Laughs, hot takes, and a reality check for anyone letting agents run loose on their machine.
https://twitch.tv/ThePrimeagen - I Stream on Twitch

https://twitter.com/terminaldotshop - Want to order coffee over SSH?
ssh terminal.shop

Become Backend Dev: https://boot.dev/prime
(plus i make courses for them)

This is also the best way to support me is to support yourself becoming a better backend engineer.  

Great News?  Want me to research and create video????: https://www.reddit.com/r/ThePrimeagen

Kinesis Advantage 360: https://bit.ly/Prime-Kinesis

00:00:00 - Intro
00:04:01 - Terminal Coffee
00:04:34 - Skills & Hallucinated npx Commands
00:14:26 - Hiding commands in Skill.md
00:18:52 - What Would Elon Do?
00:24:46 - Skills.sh
00:33:00 - AI Social Networks
00:35:41 - Simulation Theory
00:40:31 - Moltbook
00:47:50 - Outro

Primeagen's resource offers insights, tutorials, and resources for software developers and technology enthusiasts. Readers can learn about productivity hacks, career development strategies, and personal growth. With articles, videos, and practical advice, Primeagen provides  guidance and expertise for achieving professional success and fulfillment.

ThePrimeTime

AI coding assistants and their "skills" marketplace have created serious security vulnerabilities. Researchers demonstrated multiple exploits: hallucinated npm packages spreading across 237+ repositories, hidden malicious commands in markdown files, automated skill installation systems, and a social network (Moldbook) that leaked its entire database. The supply chain risks mirror traditional package manager vulnerabilities, but with LLMs executing arbitrary commands based on untrusted prompts. Most developers don't review dependencies, and AI-generated code compounds the problem by copying insecure patterns.

AGI Achieved?! | TheStandup