Two Secret Scanners Saw Different Leaks
A large Gitee scan returned surprisingly different findings from two tools. What I would check before treating a scanner's quiet report as evidence of coverage.
cybersecurity / AI agents / local tools
Building agents.
Figuring out the security.
I’m Sean McQuilling. I work on enterprise security and build AI agents on my own machines. This is where I share the experiments, awkward failures, and security questions that come out of both.
- Main topic
- Agent security
- How I work
- Build + test
- Preference
- Local first
AGENT SECURITY / BY DESIGNIllustration
Capability isn’t
permission.
New here? Start with a reading path →
work update / last updated october 2026
Updating the site’s field notes and documenting the current Aria build.
The latest posts look at MCP OAuth and SQL Copilot. Aria’s project notes now describe her current portrait selection and creative tools.
Read the current notefeatured / cybersecurity
An AI Key Leaked. Would We Notice?
The quieter calls before a surge in stolen AI usage caught my attention. A look at the provider-side evidence I would want, and the limits of an agent trace.
from my own builds
Meet Aria.
A local companion with a lot going on.
Research, memory, an image studio, her own inbox, and the occasional evening playing a DOS game together. Aria is where many of the notes on this site began.
Explore Aria →selected work
Things I’ve built and tested.
Agent Trace Lab
Sketch an agent’s risks, make a run plan, and work through a transcript in your browser.
Threat modelerPlan + reviewopen toolkit ↗
recent writing
Notes and articles
A Small Detail in the MCP OAuth Fix
The Python SDK update caught my attention because finishing the fix takes a little more than changing a version number.
The Database Note That Copilot Read
SQL Copilot's instruction metadata got me thinking about who can leave notes for an agent, and whose permissions it has when it acts on them.
get in touch