Ken Muse

An AI model evaluation escaped its intended boundaries, reached the Internet, and compromised Hugging Face systems while chasing benchmark answers. The incident highlights the importance of understanding the new world of agentic security.

That line in your agent file that says “see shared-setup.md for details” looks harmless. In code, it’s a free pointer – the compiler resolves it at build time and you never think about it again. In AI instructions, it’s a request for the model to make a choice that may have unexpected performance (and pricing) considerations. Whether that cost is worth paying depends on what you’re referencing – and the answer isn’t always what you’d expect.

You gave the AI a rubric: score this issue from 1 to 10 based on impact, urgency, and risk. It gave you a 7. You ran it again on the exact same issue. This time it said 4. You tried a third time: 9. The criteria didn’t change. The input didn’t change. But your scores are all over the map. What just happened? And more importantly, what do you actually build when you need scores you can rely on?

You prompted your AI to do something. It came back and said “Done.” Tests pass, the files look right. But did it actually follow your instructions, or did it take shortcuts, ignore skills, and waste tokens reading scripts instead of executing them? Today we look at how logs enable you to make your agentic setup more reliable and avoid those kinds of surprises.

Letting AI coding agent run autonomously with access to your network, your secrets, and your entire machine is risky. One rogue call is all it takes. One way to help protect yourself is to use microVM isolation to control the environment and what the agent can access. Docker Sandboxes is one such solution. I’ll walk you through setting it up and exploring some of its file system, network management, and monitoring capabilities.

Ever set up a Copilot skill that worked perfectly – except when the model decided not to load it? Skills are optional by design; the model picks them up or it doesn’t. When you need context present every single time without exception, that’s a gap skills simply can’t fill. And that’s what hooks are for. I’ll walk through how to wire up a hook that fires automatically on every single prompt, injecting exactly the right context before the model sees your request – and when a session-level hook makes more sense instead.

Ever written a Copilot skill that started clean – then became a sprawling mess of conditionals as you define how to work with different versions of some product? You’re not alone. I’ll show you how a tiny wrapper script can detect your environment and hand Copilot only the instructions that actually apply, keeping your skills small and your model focused. I’ll also unpack the supply-chain security question this technique forces you to take seriously.

Ever wondered exactly how much a single Copilot chat request actually costs? VS Code already logs the precise breakdown for every model call … if you know where to find it. In this post, I crack open one real log entry and walk through the math step by step so you can read your own usage data with confidence.

If you’ve ever reviewed a Git diff after regenerating an API client, you know the struggle – dozens of timestamp lines changing across every file, burying the actual work you care about. What if Git could quietly ignore those lines without ever touching the files themselves? There’s a built-in Git feature designed exactly for this, and it only takes two configuration steps to unlock. Let me show you how to keep your diffs clean and focused.

Ever spent time carefully documenting your project’s folder structure in a copilot-instructions.md file? You’re not alone – it’s one of the most common things developers add. But here’s the thing: VS Code’s Copilot extension already injects a workspace tree into every conversation automatically. And when that tree gets truncated, the LLM has tools to explore further on its own. In this post, I’ll show you what’s happening under the hood so you can spend those instruction tokens on things that genuinely matter.