---
title: Blog
canonical_url: https://danielalfasi.com/blog/
last_updated: '2026-08-28'
description: Notes on AI security, agentic systems, red teaming, and research that ships.
---

# Writing

Short notes and longer writeups on agentic AI security, red teaming, and the loop from research to detection.

- [OWASP Agentic Skills Top 10](/blog/owasp-agentic-skills-top-10.md) (2026-08-28): OWASP published the Agentic Skills Top 10. I contributed three attack scenarios: Relay-Node Amplification, Model-Dependent Injection Resistance, and Unreachable Skill. Why they matter, and what they change about review.
- [When acceptEdits quietly becomes code execution: a Grok Build hook-persistence bug](/blog/grok-build-acceptedits-hook-persistence.md) (2026-08-13): Grok Build's acceptEdits mode auto-approves file writes. Its global hooks directory is always trusted and runs at full user privilege. Combining the two turns a convenience setting into persistent, machine-wide code execution. How the composition works, how it was verified, and how xAI fixed it.
- [Inside Claude Fable 5: red-team findings](/blog/inside-claude-fable-5.md) (2026-06-14): As part of my work at Reco, I red-teamed Claude Fable 5 across 431 adversarial evaluations. What I found, and where to read the full report.

## Sitemap

See the full [sitemap](/sitemap.md) for all pages.