# Posts by tag 'ai' — Liran Tal AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks. Canonical: https://lirantal.com/tag/ai [![](/_astro/practical-second-brain-llm-markdown-knowledge-graph.CEcxBkpJ_Z19xT21.png) Aug 2, 2026 17 min read ### The Practical Second Brain: Building an LLM-Operated Markdown Knowledge Graph A hands-on guide to the files, schemas, workflows, governance, and maintenance routines behind an AI-assisted second brain.](/blog/practical-second-brain-llm-markdown-knowledge-graph) * [ai](/tag/ai) * [ai agents](/tag/ai-agents) * [llm](/tag/llm) * [knowledge management](/tag/knowledge-management) [![](/_astro/building-second-brain-llms-ai-agents.B3w2y6mA_2fR1l0.png) Aug 1, 2026 16 min read ### Building a Second Brain with LLMs and AI Agents How a plain-Markdown knowledge graph becomes a durable context layer, operating system, and compounding productivity tool for AI-assisted work.](/blog/building-second-brain-llms-ai-agents) * [ai](/tag/ai) * [ai agents](/tag/ai-agents) * [llm](/tag/llm) * [productivity](/tag/productivity) [![](/_astro/coding-agents-do-not-replace-technical-proficiency.jTwhgEmj_XAayt.png) May 10, 2026 12 min read ### Coding Agents Do Not Replace Technical Proficiency — They Demand More of It LLMs and coding agents amplify developer capability but they do not substitute for it. Engineering experience determines whether you steer these tools toward sound architecture or blindly accept generated output that drifts from your conventions.](/blog/coding-agents-do-not-replace-technical-proficiency) * [ai](/tag/ai) * [developer experience](/tag/developer-experience) * [software engineering](/tag/software-engineering) * [coding agents](/tag/coding-agents) [![](/_astro/is-prompt-injection-unsolvable-problem-ai.CNHPYK7E_1xccHK.png) May 9, 2026 16 min read ### Is Prompt Injection an Unsolvable Problem in AI? Prompt injection is not a bug you patch but an architectural limit baked into how LLMs process language. This post traces the problem from Gödel and Hofstadter to modern jailbreaks, agent skill supply chains, and why defenders must shift from elimination to survivability.](/blog/is-prompt-injection-unsolvable-problem-ai) * [security](/tag/security) * [ai](/tag/ai) * [prompt injection](/tag/prompt-injection) * [llm](/tag/llm) * [ai agents](/tag/ai-agents) [![](/_astro/restful-http-mental-model-to-understand-mcp.BJyOYSSi_Z14mXpN.jpg) Oct 12, 2025 4 min read ### A RESTful HTTP Mental Model to Understand MCP For those familiar with RESTful HTTP architecture, would it make sense to describe the Model Context Protocol (MCP) in a similar way?](/blog/a-restful-http-mental-model-to-understand-mcp) * [ai](/tag/ai) * [mcp](/tag/mcp) * [software architecture](/tag/software-architecture) [![](/_astro/mcp-server-security-evaluation-framework-logo.CZi2e61B_FchLG.png) Oct 7, 2025 4 min read ### A Proposed Evaluation Framework for MCP Server Security How do you securely integrate a new MCP Server into Cursor or other agentic workflows? what security practices do you consider to evaluate the risks?](/blog/mcp-server-security-evaluation-framework) * [ai](/tag/ai) * [mcp](/tag/mcp) * [security](/tag/security) [![](/_astro/mcp-security-threats-and-risks.akMmTKlb_24MVFf.png) Oct 5, 2025 6 min read ### Evaluation Framework for MCP Security Threats and Risks How to evaluate and categorize security threats and risks associated with Model Code Protocol (MCP) in light of recent security incidents.](/blog/evaluation-framework-for-mcp-security-threats-and-risks) * [ai](/tag/ai) * [MCP](/tag/mcp) * [security](/tag/security) [![](/_astro/the-cursor-jira-mcp-attack-explained-with-toxic-flow-analysis.DDqXsmRM_Z1BA0KJ.jpg) Oct 3, 2025 4 min read ### The Cursor Agentic Jira MCP Attack Explained with Toxic Flow Analysis A breakdown of the Cursor + Jira MCP 0-Click attack, how it was exploited, and why developers are at the center of it all. Understanding MCPs, Toxic Flows, and the implications for AI-assisted coding environments.](/blog/the-cursor-jira-mcp-attack-explained-with-toxic-flow-analysis) * [ai](/tag/ai) * [MCP](/tag/mcp) * [security](/tag/security) [![](/_astro/MCP_logo_bleeding_colored_red.KTYPhij6_ZFXwLm.png) Sep 24, 2025 3 min read ### The Uprising of Model Context Protocol (MCP) Security Research The Model Context Protocol (MCP) is gaining traction in the AI community, and with its rise comes a wave of security research. This article explores the emerging security landscape surrounding MCP, highlighting key vulnerabilities and the importance of robust security measures in this evolving protocol.](/blog/the-uprising-of-model-context-protocol-mcp-security-research) * [ai](/tag/ai) * [mcp](/tag/mcp) * [security research](/tag/security-research) [![](/_astro/agent-rules-for-ai-coding-agents.BzPsNPe8_Z2wwBBm.png) Sep 21, 2025 4 min read ### Agent Rules is the Missing Link in AI-Powered Development How agent-rules open source project is helping create consistent and deterministic security in AI coding assistants.](/blog/agent-rules-missing-link-ai-powered-development) * [ai](/tag/ai) * [agent-rules](/tag/agent-rules) * [opensource](/tag/opensource) [![](/_astro/mastra-ai-agents-devrel-cfp-committee-workflows.nYERJL5x_1dcWhs.jpg) Sep 20, 2025 11 min read ### Automating DevRel Conference CFP Evaluation with AI Agents: A Complete Guide with the Mastra AI Framework Ever wanted to automate the process of evaluating hundreds of conference Call for Papers (CFP) submissions? Here's how I built an AI-powered CFP evaluation system using Mastra AI agents to streamline the review process while maintaining quality and consistency.](/blog/automating-devrel-conference-cfp-evaluation-with-ai-agents) * [mastra](/tag/mastra) * [devrel](/tag/devrel) * [ai](/tag/ai) [![](/_astro/agentic-marketing-future-ai-driven-marketing-strategies.8JWP4MyR_DN2sa.jpg) Sep 17, 2025 5 min read ### Agentic Marketing: The Future of AI-Driven Marketing Strategies Agentic marketing is going to be the next marketing transformation that product marketers and growth teams need to embrace to stay ahead of the curve. This paradigm shift is set to revolutionize the way businesses engage with their audience.](/blog/agentic-marketing-future-ai-driven-marketing-strategies) * [devrel](/tag/devrel) * [marketing](/tag/marketing) * [ai](/tag/ai) [![](/_astro/gamified-learning.Bag_tSd__Z2d5lNw.png) Sep 3, 2025 7 min read ### What do AI-first DevTool Companies Look Like and how DevRel Practices Change? If you're in Developer Relations and you haven't yet adapted your practices to the post-GPT era, you might be missing out on the next big thing in developer tools. In this write-up, I want to unpack what AI-first developer relations practices look like and specifically draw a direct line to developer tool companies that aim to be AI-first.](/blog/ai-first-devtool-companies-and-devrel) * [AI](/tag/ai) * [DevTool](/tag/devtool) * [DevRel](/tag/devrel) [![](/_astro/mcp-server-security-evaluation-framework.DZIWGiQo_7Enkv.jpg) Sep 1, 2025 4 min read ### A Proposed MCP Server Security Evaluation Framework With great MCP power comes great MCP responsibility and you should be prepared to evaluate the security of your MCP server implementation and MCP adoption in your AI agents.](/blog/mcp-server-security-evaluation-framework) * [mcp](/tag/mcp) * [security](/tag/security) * [ai](/tag/ai) * [model context protocol](/tag/model-context-protocol) [![](/_astro/plan-dont-execute-agentic-workflows-in-zero-trust-environments.CUXdPFbf_Zg2tcG.jpg) Aug 19, 2025 3 min read ### Plan, Don't Execute: Agentic Workflows in Zero Trust Environments How zero-trust environments can leverage AI agents and agentic workflows without compromising security and trust.](/blog/plan-dont-execute-agentic-workflows-in-zero-trust-environments) * [ai](/tag/ai) * [security](/tag/security) [![](/_astro/gamified-learning.Bag_tSd__Z2d5lNw.png) Aug 15, 2025 8 min read ### Traits of AI-native Products for Optimized AI Agentic Workflows With agentic workflows like Claude Code executing commands, applications, debugging and self-healing, how do you optimize your application for it to be most successfully instructed by AI agents?](/blog/ai-first-devtool-companies-and-devrel) * [AI](/tag/ai) * [DevTool](/tag/devtool) * [engineering](/tag/engineering) * [devrel](/tag/devrel) [![](/_astro/five-pillars-augmented-agentic-software-development.CZTcWE4Q_ZBvFtg.jpg) Aug 9, 2025 7 min read ### 5 Pillars of Augmented Agentic Software Development Explore the 5 pillars of Augmented Agentic Software Development to enhance your AI coding workflows. Learn how to leverage agent system instructions, spec-driven development, MCP servers, and agent memory to get the most out of tools like Gemini CLI and Claude Code.](/blog/five-pillars-augmented-agentic-software-development) * [devrel](/tag/devrel) * [ai](/tag/ai) [![](/_astro/themes-to-unlock-agentic-development-for-software-engineers.d6URqvAS_Z1pUUY0.jpg) Aug 1, 2025 5 min read ### Themes to Unlock Agentic Development for Software Engineers Agentic coding assistants in the forms of IDE extensions are becoming increasingly popular among developers but they're likely just a milestone in the evolution of LLM-powered software engineering which will truly be AI-native. In this article, I want to unpack some AI-centric trends in software development and lean in to the future of what they would translate to in terms of the role of an engineer.](/blog/themes-to-unlock-agentic-development-for-software-engineers) * [devrel](/tag/devrel) * [ai](/tag/ai) * [devtool](/tag/devtool) [![](/_astro/mcp-company-ngmi.BlINOHC9_1MJD5m.jpg) Jul 23, 2025 6 min read ### If You're an MCP Company You're NGMI Model Context Protocol (MCP) is a great protocol but if your company is built around it as the core product, you're not gonna make it. Here's why.](/blog/if-youre-an-mcp-company-youre-ngmi) * [devrel](/tag/devrel) * [ai](/tag/ai) * [mcp](/tag/mcp) [![](/_astro/qodo-command-fine-tune-agent.BTwn3ztw_Z1Je7Ml.jpg) Jul 22, 2025 4 min read ### Auto fine-tuning Agentic Workflow with Qodo CLI Running agentic AI workflows with the Qodo Command CLI is a powerful way to automate tasks but what's even cooler is that you can also automate the whole fine-tuning of the agentic workflow process itself USING THE AGENT!](/blog/agentic-self-healing-workflows-with-qodo-command-cli) * [ai](/tag/ai) * [supply chain security](/tag/supply-chain-security) [![](/_astro/qodo-command-openssf-scorecard-fixer.DTdcR-2w_ZwqO3W.png) Jul 12, 2025 20 min read ### Automating OpenSSF Scorecard Security issues with Qodo CLI Agentic Workflow Getting a security report for security vulnerabilities and misconfiguration issues of your GitHub project is a good start but can we leverage AI to also remediate all of these issues automatically through agentic workflow? Yes and I will show you how I do that with Qodo CLI Agentic Workflow](/blog/automating-openssf-scorecard-security-issues-with-qodo-cli-agentic-workflow) * [ai](/tag/ai) * [supply chain security](/tag/supply-chain-security) [![](/_astro/how-use-genai-speed-up-demo-apps-devrel-role.DFKGNlCJ_1JsBBJ.jpg) Mar 2, 2025 5 min read ### How I use GenAI to Speed Up Demo Apps in My DevRel Role Developer Advocates and Engineers can leverage Generative AI to speed up their work and make them more productive. Here's a practical example from my day-to-day.](/blog/how-use-genai-speed-up-demo-apps-devrel-role) * [DevRel](/tag/devrel) * [AI](/tag/ai) [![](/_astro/what-is-llms-txt-file.m38k31jh_p7KKJ.jpg) Feb 28, 2025 3 min read ### What is an LLMs.txt File? Building with Large Language Models (LLMs) requires context and metadata. The \`llms.txt\` file format is a simple text file that provides LLMs with relevant context and metadata.](/blog/what-is-an-llms-txt-file) * [LLM](/tag/llm) * [ChatGPT](/tag/chatgpt) * [AI](/tag/ai)