Notes from shipping with Claude Code agents

What my agents get wrong, what my review catches, and the numbers from my own logs. I'm a senior full-stack engineer, 10+ years in production, and I review every PR my agents write.

2 posts found

Featured

The Shell-Injection Bugs My Agents Wrote, and the 3 I Missed

Agents wrote 7 shell commands built from strings into 30 PRs on my own repo. Review fixed 4 and missed 3. The diffs, the fixes and the check I run now.

AISecurity

July 9, 20268 min read

How to Review AI-Generated Code: What 30 Agent PRs Needed

25 of 30 agent PRs needed a fix before merge. I counted all 79 fixes: duplicated code led, security came third, and review still missed 5 security bugs.

AICode review

July 9, 20268 min read

Have a backlog? Book a 30‑minute scoping call.

Tell me what you want built or shipped. You get the scope and a fixed price in writing within one working day.

The checklist I review agent PRs with

Get the Agent PR Review Checklist: the checks that catch the bugs your tests let through. Plus an occasional email on shipping AI-written code safely. Unsubscribe anytime.

How I handle your data