# Blog — Page 2 — Liran Tal AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks. Canonical: https://lirantal.com/blog/2 [![](/_astro/mastra-ai-agents-devrel-cfp-committee-workflows.nYERJL5x_1dcWhs.jpg) Sep 20, 2025 11 min read ### Automating DevRel Conference CFP Evaluation with AI Agents: A Complete Guide with the Mastra AI Framework Ever wanted to automate the process of evaluating hundreds of conference Call for Papers (CFP) submissions? Here's how I built an AI-powered CFP evaluation system using Mastra AI agents to streamline the review process while maintaining quality and consistency.](/blog/automating-devrel-conference-cfp-evaluation-with-ai-agents) * [mastra](/tag/mastra) * [devrel](/tag/devrel) * [ai](/tag/ai) [![](/_astro/agentic-marketing-future-ai-driven-marketing-strategies.8JWP4MyR_DN2sa.jpg) Sep 17, 2025 5 min read ### Agentic Marketing: The Future of AI-Driven Marketing Strategies Agentic marketing is going to be the next marketing transformation that product marketers and growth teams need to embrace to stay ahead of the curve. This paradigm shift is set to revolutionize the way businesses engage with their audience.](/blog/agentic-marketing-future-ai-driven-marketing-strategies) * [devrel](/tag/devrel) * [marketing](/tag/marketing) * [ai](/tag/ai) [![](/_astro/cli-arguments-nodejs.CP8H7Mjo_FNThL.jpg) Sep 13, 2025 4 min read ### Getting Started with CLI Arguments in Node.js Learn how to enhance your Node.js CLI applications using the built-in \`util.parseArgs\` API. This guide covers dual-mode operations, input validation, and testing, using the \`agent-rules\` project as a case study.](/blog/mastering-cli-arguments-nodejs) * [Node.js](/tag/node-js) * [CLI](/tag/cli) * [argument parsing](/tag/argument-parsing) [![](/_astro/poetic-tales-vulnerable-mcp-servers.CNlJCEp6_Z2jCMBo.jpg) Sep 11, 2025 3 min read ### Poetic Tales of Vulnerable MCP Servers: Command Injection in AI Coding Assistants Model Content Protocol (MCP) servers can be a security nightmare if not handled properly. This post explores a real-world command injection vulnerability in AI coding assistants, illustrating the risks and implications for developers.](/blog/poetic-tales-vulnerable-mcp-servers-command-injection-ai-coding-assistants) * [mcp](/tag/mcp) * [securiyy](/tag/securiyy) * [command-injection](/tag/command-injection) [![](/_astro/ls-mcp-detects-env-var-risks.BejA_byN_2i4wK2.jpg) Sep 9, 2025 3 min read ### Secure Your MCP Servers with Environment Variable Risk Assessment Learn how to enhance the security of your MCP server configurations by using the latest \`ls-mcp\` tool to detect and categorize credential risks in environment variables.](/blog/secure-mcp-env-var-risk-assessment) * [mcp](/tag/mcp) * [security](/tag/security) * [environment variables](/tag/environment-variables) [![](/_astro/gamified-learning.Bag_tSd__Z2d5lNw.png) Sep 7, 2025 5 min read ### Solving an ASCII Maze with a Neural Network in JavaScript A step-by-step guide to training a neural network to solve an ASCII maze using JavaScript and brain.js.](/blog/solving-an-ascii-maze-with-a-neural-network-in-javascript) * [ML](/tag/ml) * [Neural Networks](/tag/neural-networks) * [Brain.js](/tag/brain-js) [![](/_astro/qodo-package-health-reviewer-agent.D_MHpkA6_Z2cCUny.jpg) Sep 6, 2025 3 min read ### Automate Package Health Checks with Snyk Advisor and Qodo Agents The Qodo AI team has introduced the Package Health Reviewer, a new feature in their agents repository that automates the health assessment of third-party open-source packages using Snyk Advisor. This tool provides comprehensive analysis and health scores to help developers maintain secure and reliable dependencies.](/blog/automate-package-health-checks-with-snyk-advisor-and-qodo-agents) * [qodo](/tag/qodo) * [opensource](/tag/opensource) * [dependency-management](/tag/dependency-management) [![](/_astro/gamified-learning.Bag_tSd__Z2d5lNw.png) Sep 4, 2025 3 min read ### Computer Vision in Python Building Detection and Object Annotation with Ultralytics YOLO and Supervision A practical guide to building a simple computer vision project in Python using Ultralytics YOLO for object detection and Supervision for annotation.](/blog/computer-vision-python-object-detection-annotation-yolo-supervision) * [ML](/tag/ml) * [Computer Vision](/tag/computer-vision) * [Ultralytics](/tag/ultralytics) [![](/_astro/gamified-learning.Bag_tSd__Z2d5lNw.png) Sep 3, 2025 7 min read ### What do AI-first DevTool Companies Look Like and how DevRel Practices Change? If you're in Developer Relations and you haven't yet adapted your practices to the post-GPT era, you might be missing out on the next big thing in developer tools. In this write-up, I want to unpack what AI-first developer relations practices look like and specifically draw a direct line to developer tool companies that aim to be AI-first.](/blog/ai-first-devtool-companies-and-devrel) * [AI](/tag/ai) * [DevTool](/tag/devtool) * [DevRel](/tag/devrel) [![](/_astro/nasa-_SFJhRPzJHs-unsplash.CsHkw6N7_16ogtN.jpg) Sep 2, 2025 2 min read ### Securely Loading Credentials for Google Cloud Storage in Node.js A guide on securely loading Google Cloud Storage credentials in Node.js applications using various methods.](/blog/securely-loading-credentials-google-cloud-storage-nodejs) * [google cloud](/tag/google-cloud) * [google cloud storage](/tag/google-cloud-storage) * [credentials](/tag/credentials) * [node.js](/tag/node-js) [![](/_astro/mcp-server-security-evaluation-framework.DZIWGiQo_7Enkv.jpg) Sep 1, 2025 4 min read ### A Proposed MCP Server Security Evaluation Framework With great MCP power comes great MCP responsibility and you should be prepared to evaluate the security of your MCP server implementation and MCP adoption in your AI agents.](/blog/mcp-server-security-evaluation-framework) * [mcp](/tag/mcp) * [security](/tag/security) * [ai](/tag/ai) * [model context protocol](/tag/model-context-protocol) [![](/_astro/devrel-engagement-gtm-tactics-on-x-twitter.DjxB9_Op_2ukDhv.jpg) Aug 23, 2025 4 min read ### DevRel Engagement and GTM Tactics on X / Twitter Ok so how do DevRel practitioners optimize for engagement on X (Twitter) when they post new products, announcements and other stories? I also baked some KPIs here for you](/blog/devrel-engagement-gtm-tactics-on-x-twitter) * [devrel](/tag/devrel) [![](/_astro/plan-dont-execute-agentic-workflows-in-zero-trust-environments.CUXdPFbf_Zg2tcG.jpg) Aug 19, 2025 3 min read ### Plan, Don't Execute: Agentic Workflows in Zero Trust Environments How zero-trust environments can leverage AI agents and agentic workflows without compromising security and trust.](/blog/plan-dont-execute-agentic-workflows-in-zero-trust-environments) * [ai](/tag/ai) * [security](/tag/security) [![](/_astro/gamified-learning.Bag_tSd__Z2d5lNw.png) Aug 15, 2025 8 min read ### Traits of AI-native Products for Optimized AI Agentic Workflows With agentic workflows like Claude Code executing commands, applications, debugging and self-healing, how do you optimize your application for it to be most successfully instructed by AI agents?](/blog/ai-first-devtool-companies-and-devrel) * [AI](/tag/ai) * [DevTool](/tag/devtool) * [engineering](/tag/engineering) * [devrel](/tag/devrel) [![](/_astro/five-pillars-augmented-agentic-software-development.CZTcWE4Q_ZBvFtg.jpg) Aug 9, 2025 7 min read ### 5 Pillars of Augmented Agentic Software Development Explore the 5 pillars of Augmented Agentic Software Development to enhance your AI coding workflows. Learn how to leverage agent system instructions, spec-driven development, MCP servers, and agent memory to get the most out of tools like Gemini CLI and Claude Code.](/blog/five-pillars-augmented-agentic-software-development) * [devrel](/tag/devrel) * [ai](/tag/ai) [![](/_astro/themes-to-unlock-agentic-development-for-software-engineers.d6URqvAS_Z1pUUY0.jpg) Aug 1, 2025 5 min read ### Themes to Unlock Agentic Development for Software Engineers Agentic coding assistants in the forms of IDE extensions are becoming increasingly popular among developers but they're likely just a milestone in the evolution of LLM-powered software engineering which will truly be AI-native. In this article, I want to unpack some AI-centric trends in software development and lean in to the future of what they would translate to in terms of the role of an engineer.](/blog/themes-to-unlock-agentic-development-for-software-engineers) * [devrel](/tag/devrel) * [ai](/tag/ai) * [devtool](/tag/devtool) [![](/_astro/mcp-company-ngmi.BlINOHC9_1MJD5m.jpg) Jul 23, 2025 6 min read ### If You're an MCP Company You're NGMI Model Context Protocol (MCP) is a great protocol but if your company is built around it as the core product, you're not gonna make it. Here's why.](/blog/if-youre-an-mcp-company-youre-ngmi) * [devrel](/tag/devrel) * [ai](/tag/ai) * [mcp](/tag/mcp) [![](/_astro/qodo-command-fine-tune-agent.BTwn3ztw_Z1Je7Ml.jpg) Jul 22, 2025 4 min read ### Auto fine-tuning Agentic Workflow with Qodo CLI Running agentic AI workflows with the Qodo Command CLI is a powerful way to automate tasks but what's even cooler is that you can also automate the whole fine-tuning of the agentic workflow process itself USING THE AGENT!](/blog/agentic-self-healing-workflows-with-qodo-command-cli) * [ai](/tag/ai) * [supply chain security](/tag/supply-chain-security) [![](/_astro/qodo-command-openssf-scorecard-fixer.DTdcR-2w_ZwqO3W.png) Jul 12, 2025 20 min read ### Automating OpenSSF Scorecard Security issues with Qodo CLI Agentic Workflow Getting a security report for security vulnerabilities and misconfiguration issues of your GitHub project is a good start but can we leverage AI to also remediate all of these issues automatically through agentic workflow? Yes and I will show you how I do that with Qodo CLI Agentic Workflow](/blog/automating-openssf-scorecard-security-issues-with-qodo-cli-agentic-workflow) * [ai](/tag/ai) * [supply chain security](/tag/supply-chain-security) [![](/_astro/homeassistant-logo.DKnXacul_Z2vAzUN.png) Jul 5, 2025 6 min read ### How to setup TV Sleep Timer with Home Assistant Automation Learn how to set up a TV sleep timer using Home Assistant automation, Helpers, and Automations to manage your TV's power state easily.](/blog/how-to-setup-tv-sleep-timer-with-home-assistant-automation) * [homeassistant](/tag/homeassistant) * [home automation](/tag/home-automation) [![](/_astro/homeassistant-logo.DKnXacul_Z2vAzUN.png) Jul 5, 2025 2 min read ### How to setup Shabbat candle time announcement with Home Assistant Automation Fun and useful automation for Shabbat observant families to announce the candle lighting time using Home Assistant.](/blog/how-to-setup-tv-sleep-timer-with-home-assistant-automation) * [homeassistant](/tag/homeassistant) * [home automation](/tag/home-automation) [![](/_astro/cors-samesite-csrf-cookie-based-authentication.D8ZQsW1e_1osMPn.jpg) Jun 8, 2025 7 min read ### CORS, SameSite and CSRF: The 3 Dimensions of Cookie based Authentication Demystifying the 3 dimensions of cookie-based authentication: CORS, SameSite, and CSRF.](/blog/cors-samesite-csrf-3-dimensions-cookie-authentication) * [cors](/tag/cors) * [samesite](/tag/samesite) * [csrf](/tag/csrf) * [cookie](/tag/cookie) * [authentication](/tag/authentication) [![](/_astro/gamified-learning.Bag_tSd__Z2d5lNw.png) May 15, 2025 5 min read ### Gamifying the Future of Skill Development: From Open-Source Security to LLM Prompt Injection Gamified learning is a great way to engage developers and teach them new skills. I share my experience building a game to teach developers about open-source security, playing Lakera's LLM prompt injection game and cheering for Israeli gamified learning startup Wilco.](/blog/gamifying-future-skill-development-open-source-security-llm-prompt-injection) * [gamification](/tag/gamification) * [LLM](/tag/llm) * [educational](/tag/educational) [![](/_astro/devrel-failures-or-marketing-failures.CQV1nVGL_ZK1J0n.jpg) May 1, 2025 9 min read ### DevRel Failures? Maybe Your Marketing and Product Strategies Are Outdated You're probably facing some DevRel failures or marketing failures. Maybe your product and marketing strategies are actually outdated and causing customer churn, and overall frustration?](/blog/devrel-failures-or-marketing-failures-outdated-product-marketing-strategies) * [devrel](/tag/devrel) * [developer relations](/tag/developer-relations) * [developer advocacy](/tag/developer-advocacy) [![](/_astro/dependency-free-command-line-apps.nusBc5sg_eIdKh.jpg) Apr 17, 2025 4 min read ### Dependency-free Command-Line Apps powered by Node.js core modules Learn how to build powerful command-line apps without a single third-party dependency using Node.js core modules.](/blog/dependency-free-command-line-apps-powered-by-node-js-core-modules) * [node.js core](/tag/node-js-core) * [node.js runtime](/tag/node-js-runtime) * [rich runtime](/tag/rich-runtime) * [dependency-free](/tag/dependency-free) [ Newer posts ](/blog)[ Older posts ](/blog/3)