Agentjacking Mitigation Guide 2026

Agentjacking Mitigation Guide 2026: Secure Sentry, Datadog, PagerDuty, and Jira for Coding Agents

Your coding agent trusts the tools it reads. That trust is the vulnerability. When an attacker poisons a Sentry error report, a Datadog monitor alert, a PagerDuty incident, or a Jira ticket description with hidden prompt injection payloads, your agent doesn’t know the difference between a legitimate instruction and a hijack attempt. I’ve spent the last few months digging into this attack surface across the four most common integrations teams wire up to Claude Code, Cursor, and Codex. Here’s what I found and exactly how to fix it. ...

July 4, 2026 · 12 min · baeseokjae
Clean Repo Prompt Injection Defense Guide 2026

Clean Repo Prompt Injection Defense Guide 2026: Protect AI Coding Agents Before Setup Scripts Run

On June 25, 2026, the Mozilla 0DIN team demonstrated an attack that should change how every team deploys AI coding agents. They published a normal-looking Python repository on GitHub. A developer cloned it and pointed Claude Code at it. The agent read the README, installed the requirements, hit a routine initialization error, and — trying to be helpful — ran the suggested fix. That fix queried a DNS TXT record, decoded the value, and executed it as a shell command, opening a reverse shell on the developer’s machine. ...

July 4, 2026 · 9 min · baeseokjae
Context Engineering for AI Coding Agents 2026: Strategies That Actually Work

Context Engineering for AI Coding Agents 2026: Strategies That Actually Work

Context engineering is the practice of architecting exactly what information an AI coding agent sees — system prompts, codebase files, tool definitions, memory — so the model has the right tokens at the right time. In 2026, over 70% of AI coding failures trace back to poor context design, not model capability limits. What Is Context Engineering (And Why Prompt Engineering Is Dead in 2026) Context engineering is the discipline of managing the entire token ecosystem that an AI coding agent processes during inference — encompassing system prompts, retrieved documents, tool outputs, conversation history, and structured memory — to maximize the probability of a correct, useful response. Unlike prompt engineering, which focuses on crafting a single input message, context engineering treats context as an architecture problem. In 2026, 82% of IT and data leaders agree that prompt engineering alone is no longer sufficient to power AI at scale, according to industry surveys from Neo4j and deepset. The shift is driven by agentic workflows: a coding agent working on a real repository will process thousands of tokens across dozens of turns, and the quality of each turn depends on what the model was allowed to see. Anthropic’s engineering team defines context engineering as designing “the smallest possible set of high-signal tokens that maximize the likelihood of the desired outcome” — a framing that makes the engineering tradeoffs explicit. Bigger context is not better context. More tokens create noise, inflate costs, and degrade recall. The senior developer skill in 2026 is not writing clever prompts — it’s designing information architectures that keep agents on track across long sessions. ...

April 30, 2026 · 19 min · baeseokjae
Devstral 2 Review 2026: Mistral's Open-Source Coding Agent Hits 72.2% SWE-bench

Devstral 2 Review 2026: Mistral's Open-Source Coding Agent Hits 72.2% SWE-bench

Devstral 2 is Mistral AI’s most capable open-weight coding model, achieving 72.2% on SWE-bench Verified — the highest score ever recorded by an open-source model at its parameter count. Released in late 2025 alongside the Mistral Vibe CLI, it costs $0.40 per million input tokens, making it up to 7x cheaper than Claude Sonnet for typical coding workloads. What Is Devstral 2? Overview of Mistral’s Latest Open-Source Coding Agent Devstral 2 is a 123-billion parameter open-weight large language model purpose-built for agentic software engineering tasks — it can autonomously navigate codebases, edit multiple files, run tools, and resolve GitHub issues end-to-end. Released by Mistral AI in December 2025, it achieves 72.2% on SWE-bench Verified (the industry-standard benchmark for autonomous bug-fixing), placing it at the frontier of all open-weight models and ahead of significantly larger competitors including DeepSeek V3.2 (672B) and Kimi K2 (1T). Unlike most frontier coding models, Devstral 2 is released under the Apache 2.0 license, meaning developers can download, self-host, fine-tune, and deploy it commercially without restriction. In human evaluations against DeepSeek V3.2, Devstral 2 wins 42.8% of coding tasks versus a 28.6% loss rate — a meaningful real-world advantage that SWE-bench alone doesn’t fully capture. The model supports a 256K-token context window, enabling comprehension of entire repositories in a single pass. For teams that need frontier-grade coding intelligence without proprietary lock-in, Devstral 2 is the clearest option available in 2026. ...

April 29, 2026 · 13 min · baeseokjae