---
title: Sitemap
last_updated: '2026-08-28'
description: Human-readable sitemap of danielalfasi.com.
---

# Sitemap

Overview of [Daniel Alfasi](https://danielalfasi.com). Prefer markdown twins over HTML. Machine-readable: [sitemap.xml](/sitemap.xml).

## Site

- [Home](/index.md) (2026-08-28): AI Security Research Lead at Reco. Agentic AI security, red teaming, and research that ships.
- [About](/about.md) (2026-08-28): Research to detection to shipped product. That loop is the job.
- [Talks & papers](/talks.md) (2026-08-28): Selected research talks and publications.
- [Blog](/blog.md) (2026-08-28): Notes on AI security, agentic systems, red teaming, and research that ships.

## Writing

- [OWASP Agentic Skills Top 10](/blog/owasp-agentic-skills-top-10.md) (2026-08-28): OWASP published the Agentic Skills Top 10. I contributed three attack scenarios: Relay-Node Amplification, Model-Dependent Injection Resistance, and Unreachable Skill. Why they matter, and what they change about review.
- [When acceptEdits quietly becomes code execution: a Grok Build hook-persistence bug](/blog/grok-build-acceptedits-hook-persistence.md) (2026-08-13): Grok Build's acceptEdits mode auto-approves file writes. Its global hooks directory is always trusted and runs at full user privilege. Combining the two turns a convenience setting into persistent, machine-wide code execution. How the composition works, how it was verified, and how xAI fixed it.
- [Inside Claude Fable 5: red-team findings](/blog/inside-claude-fable-5.md) (2026-06-14): As part of my work at Reco, I red-teamed Claude Fable 5 across 431 adversarial evaluations. What I found, and where to read the full report.

## For agents

- [AGENTS.md](/AGENTS.md): How to fetch, cite, and attribute this site.
- [llms.txt](/llms.txt): Catalog of pages.
- [llms-full.txt](/llms-full.txt): Full markdown dump.
- [sitemap.xml](/sitemap.xml): URL list for the HTML pages.
- [sitemap-agents.xml](/sitemap-agents.xml): URL list for the markdown twins and agent files.