Tooling | Blog

~/blog/tag/tooling

Tooling

Tools, workflows and configuration that accelerate the development process.

What I write about here

Tools sit between what you mean and what gets done. That sentence sounds obvious until you watch a team adopt a tool that does the opposite, and ship worse code with more confidence.

The posts under this tag are mostly about tooling for working with AI. CLAUDE.md files. Hooks. Skills, plugins, the surrounding scaffolding that turns an agent from a clever autocomplete into something with rules and memory. Half of them are guides to specific patterns that have held up. The other half are critical assessments of tools that look impressive in a demo and fall apart when you put real work through them.

The test I keep applying is simple. Does this tool make my intent more explicit, or does it make the output feel more confident? Those are very different things. A tool that forces you to specify what you want is useful. A tool that paraphrases your vague prompt into fluent code is a liability, no matter how good the demo looked.

Read these posts expecting opinions on specific instruments. I name names. Some tools earn their stars. Some do not.

If you are just getting started with this tooling, the Agentic coding guide is the shortest route through the posts that matter.

latest
securitytooling
7 minIncidents #8

Plugin4Shell: a pinned plugin is only pinned if something checks where it landed

Air showed that Claude Code, Codex, Copilot and Gemini CLI all asked git for the commit a marketplace pinned without checking that they got it. I reproduced it in git, watched Claude Code refuse it, and found the same hole in my own CI runner.

read →