<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Security on Builder Decade</title><link>https://builderdecade.com/tags/security/</link><description>Recent content in Security on Builder Decade</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 08 Oct 2026 08:00:00 +0800</lastBuildDate><atom:link href="https://builderdecade.com/tags/security/index.xml" rel="self" type="application/rss+xml"/><item><title>Your Agent Doesn't Need to Be Hacked. It Needs to Be Trusted.</title><link>https://builderdecade.com/posts/what-your-agent-can-reach/</link><pubDate>Mon, 21 Sep 2026 18:00:00 +0800</pubDate><guid>https://builderdecade.com/posts/what-your-agent-can-reach/</guid><description>Seven 2026 sandbox escapes, no exploit in any of them. The vulnerability is the trust you extend after the agent writes something — here&amp;#39;s the check.</description></item><item><title>Your Agent Trusts Everything You Connected It To</title><link>https://builderdecade.com/posts/mcp-security-solo-builder/</link><pubDate>Sun, 20 Sep 2026 08:00:00 +0800</pubDate><guid>https://builderdecade.com/posts/mcp-security-solo-builder/</guid><description>You pasted an MCP server in from a blog post. It holds your files and your keys. Here&amp;#39;s the 10-minute check before you connect the next one.</description></item><item><title>When to Trust an Open Source Library: A Solo Builder's Due-Diligence Rule</title><link>https://builderdecade.com/posts/open-source-dependency/</link><pubDate>Wed, 02 Sep 2026 09:00:00 +0800</pubDate><guid>https://builderdecade.com/posts/open-source-dependency/</guid><description>Free libraries carry a bill. Here&amp;#39;s a solo builder&amp;#39;s due-diligence rule for deciding when to trust an open source dependency.</description></item></channel></rss>