Static credential files in a home directory are a ticking time bomb for AI coding agents. Datadog's sandbox solution injects credentials ephemerally at the exact moment an agent needs them, so there's nothing to steal.
Where this was said
At 6:30 · chapter starts 5:40
The lesson from the SQL incident translated directly into architectural changes. Datadog built role-based MCP servers — dedicated servers scoped to specific functions like SDRs — that govern exactly what data an AI agent can retrieve based on the user's role [1] — Emilio Escobar "Rather than locking down data broadly, Datadog built role-based MCP servers that give AI agents access to exactly the data their user's rol…" 05:30 . Once that governance layer is in place, employees can use whatever AI tool they prefer. On the engineering side, the challenge was different: how do you let coding agents authenticate to services like GitHub or AWS without exposing static credential files? Datadog contributed to an open-source sandbox that solves this by design — agents simply cannot access credential files in the home directory [2] — Emilio Escobar "Static credential files in a home directory are a ticking time bomb for AI coding agents. Datadog's sandbox solution injects credentials ep…" 06:30 . Instead, credentials are injected ephemerally at the exact moment an agent needs them, using an existing CLI tool. The agent calls a 'auth GitHub' function, receives a short-lived token, does its work, and the token disappears. No persistent secrets, no exfiltration surface.
Datadog's sandbox prevents agents from accessing static credential files; instead, credentials are injected ephemerally at the moment an agent needs them.
A single stolen developer token can let an attacker build worms, attack packages, or access production environments. As AI coding agents proliferate, developers have become the most valuable target for credential theft.
Datadog built an AI-powered 'judge' using LLMs to evaluate whether code and agent skills are malicious in intent — and found malicious skills across multiple marketplaces.
Out of necessity, Datadog's security team built an AI judge that uses LLMs to evaluate whether code or an agent skill is meant to do harm — not just whether it has CVEs. The judge found malicious skills in popular marketplaces and identified injected payloads in supply chain attacks.
The fastest path to Twitter growth isn't volume — it's forming sharp opinions about how the platform works and sharing them immediately. People cluster around those who understand the rules and say so out loud.
Sam had no coding knowledge, so he used ChatGPT voice mode to generate his entire codebase and copy-pasted it into Notepad. A friend later introduced him to Cursor, and he never looked back.
Copy days of Discord chat history, paste it into ChatGPT, and ask it to list recurring pain points. The ones that come up most often are your best product bets.
Sam's top advice: when prompting Cursor, tell it to architect code for 100,000 users from day one. The AI changes its approach, building scalable frameworks instead of brittle one-user code.
With AI coding tools like Cursor, Bhanu replicates an existing free tool for a new keyword in under 5 minutes. What used to be a multi-day build is now a lunch-break task.
Ahrefs, SiteGPT, Cal.com, PostHog, Datafast, Sibyl AI, Bento, Feather, Featurepace, Mintlify, Cloud Code, ChartMogul — Bhanu runs his entire business solo with these 12 tools.
PropGPT runs on React Native with TypeScript and Python for ML, Neon for the database, RevenueCat and Superwall for monetization. LLM costs are $20/month, data APIs $100/month, and after $10K in monthly marketing spend, margins sit at roughly 50%.
Automated food production cheaper than grocery shopping. Mining companies that own nothing but real estate. Kalanick believes these are near-certainties, not moonshots, and they dwarf anything digital AI has done to enterprise software.
Meraki couldn't beat Cisco on reputation in 2009. So they stopped trying to pitch and started shipping. Attend a webinar, get a free access point. Once mid-market IT teams experienced cloud-managed networking, no argument was needed — the product sold itself.
We use essential and analytics cookies to run Vuci. To understand how the site is used: Privacy Policy.
Install Vuci on your phone
Add it to your home screen for a faster, app-like experience.
Install Vuci on your phone
Tap the Share button, then “Add to Home Screen”.
A new version is available
Reload to get the latest Vuci.