Field notes, threat models, and product thinking from the team building the security control plane for AI coding agents.https://bluebear.io/https://bluebear.io/blog/introducing-bear-metal/https://bluebear.io/blog/introducing-bear-metal/Bear Metal is Bluebear's open-source background coding agent: it works tickets delegated through Linear and opens pull requests through your GitHub App installation.Tue, 07 Jul 2026 00:00:00 GMTAvivhttps://bluebear.io/blog/the-mandate-gap/https://bluebear.io/blog/the-mandate-gap/Coding agents introduce a new class of risk: the gap between what a user authorized and what the agent actually did. Why your existing controls miss it, and how to govern intent instead of just actions.Mon, 06 Jul 2026 00:00:00 GMTIdohttps://bluebear.io/blog/agent-skills-plugins-slopsquatting/https://bluebear.io/blog/agent-skills-plugins-slopsquatting/We found 72 exported AI agent skills and plugins referencing package names that do not exist, creating an opening for slopsquatting attacks across npm, PyPI, and Cargo.Mon, 08 Jun 2026 00:00:00 GMTNoamhttps://bluebear.io/blog/introducing-baloo-bear/https://bluebear.io/blog/introducing-baloo-bear/Baloo is Bluebear's open-source GitHub App for self-hosted AI pull request review, built from the agent we used to review our own agent-generated code.Thu, 28 May 2026 00:00:00 GMTAmirhttps://bluebear.io/blog/hidden-git-branch-leaking-secrets/https://bluebear.io/blog/hidden-git-branch-leaking-secrets/While tracing the source of an AI coding-agent dataset, we found 20,000+ agent sessions exposed through public Git branches, including API keys, credentials, infrastructure details, and screenshots.Tue, 19 May 2026 00:00:00 GMTNoamhttps://bluebear.io/blog/not-what-model-writes-what-agent-runs/https://bluebear.io/blog/not-what-model-writes-what-agent-runs/Recent threat intelligence details how cybercriminals are using headless coding agent frameworks on compromised hosts to automate source code exfiltration.Wed, 29 Apr 2026 00:00:00 GMTIdohttps://bluebear.io/blog/hidden-attack-surface-coding-agents/https://bluebear.io/blog/hidden-attack-surface-coding-agents/Most teams still talk about coding agents as if they're just LLMs that write code. That misses the real security picture.Mon, 20 Apr 2026 00:00:00 GMTIdohttps://bluebear.io/blog/credentials-your-ai-agent-sees/https://bluebear.io/blog/credentials-your-ai-agent-sees/AI agents increasingly need credentials to act on our behalf, and by doing that are quietly turning local configuration files and shell profiles into a secondary, high‑risk credential store. That creates a new security boundary, a phenomena we call context‑window credential driftFri, 20 Mar 2026 00:00:00 GMTIdohttps://bluebear.io/blog/coding-agent-ecosystem-under-attack/https://bluebear.io/blog/coding-agent-ecosystem-under-attack/Attackers aren't just targeting what coding agents do — they're going after the entire ecosystem around them. InstallFix is only the latest example.Wed, 11 Mar 2026 00:00:00 GMTIdo