Two skill repos are pulling attention right now. Matt Pocock’s skills and Lauren Tan’s pstack. The obvious move is to install both and hope your agent gets smarter. That move fails. AI agent skills are just markdown files, and markdown you have never read is noise. The video this post covers spends a week inside…
A reference version of Aleksander Stensby’s NDC Copenhagen 2026 talk on AI-assisted coding, with the commands, config, and a fact check of every claim.
Claude Code commands for daily work, checked against the docs: Ctrl+G plan editing, /rewind, /btw, /usage, /context, /goal, /focus, and claude agents.
Claude Code setup you do once: a lean CLAUDE.md, local and user instruction files, deny rules for secrets, /doctor cleanup, themes, and a status line.
Extend Claude Code with hooks that feed test failures back, skills that bundle scripts, /batch, /simplify, /loop, project .mcp.json, and claude -p.
A Node.js forgot password route that trusts req.hostname emails users an attacker’s link. Fix the link, token, timing, and sessions. Secure yours today.
Run AWS Cognito without Amplify in Next.js. Write the OAuth flow by hand and fix the logout that signs users back in. Build it today.
Most Node.js email verification tutorials tell attackers who your users are. Give every address the same answer in the same time. Fix your signup today.
Six auth security checks that catch token, cookie, logout, and rate limit bugs in about 20 minutes. Run them on your app today.
Simple software architecture starts with saying no. Jerry Nixon’s NDC talk explains what every box does. Learn which ones to skip.