5 Commits

• docs: publish The Shorthand Guide to Everything Agentic Security

  Full article with embedded images: attack chain diagram, sandboxing
  comparison, sanitization visual, observability logging, ghostyy overflow.
  Tweet quotes from @TalBeerySec, @HedgieMarkets, @blackorbird formatted
  as blockquotes. Stats table fixed. Code blocks tagged. Links to shorthand
  and longform guides at bottom.

  Affaan Mustafa · 2026-03-20 22:57:50 -07:00
  c1847bec5d
• docs: add SECURITY.md, publish agentic security guide, remove openclaw guide

  - Add SECURITY.md with vulnerability reporting policy
  - Publish "The Shorthand Guide to Everything Agentic Security" with attack
    vectors, sandboxing, sanitization, CVEs, and AgentShield coverage
  - Add security guide to README guides section (3-column layout)
  - Remove unpublished openclaw guide
  - Copy security article images to assets/images/security/

  Affaan Mustafa · 2026-03-20 20:25:15 -07:00
  fc4e5d654b
• Revert "fix: remove internal sponsor/partner notes from public README"

  This reverts commit 27ee3a449b.

  Affaan Mustafa · 2026-03-07 20:26:04 -08:00
  036d8e872c
• fix: remove internal sponsor/partner notes from public README

  The "Traction & Distribution" section contained internal business
  context (sponsor-call checklists, partner reporting instructions)
  that doesn't belong in a user-facing README. Moved to docs/business/.

  Affaan Mustafa · 2026-03-07 20:19:37 -08:00
  27ee3a449b
• feat: add security guides and sanitize external links across repo

  New articles:
  - the-security-guide.md: "The Shorthand Guide to Securing Your Agent" (595 lines)
    Attack vectors, sandboxing, sanitization, OWASP Top 10, observability
  - the-openclaw-guide.md: "The Hidden Danger of OpenClaw" (470 lines)
    Security analysis of OpenClaw, MiniClaw thesis, industry evidence
  
  External link sanitization (22 files across EN, zh-CN, zh-TW, ja-JP, .cursor):
  - Removed third-party GitHub links from skills and guides
  - Replaced with inline descriptions to prevent transitive prompt injection
  - Kept official org links (Anthropic, Google, Supabase, Mixedbread)

  Affaan Mustafa · 2026-02-25 07:20:42 -08:00
  a9b104fc23