20+ years building software, products, and teams - currently spending most of my time poking at AI to see what it actually changes.
// recent writing
June 2026
// AI agent skills became a plugin ecosystem, and like every plugin ecosystem before them, an attack surface. A study of 42,447 skills found 26% vulnerable and 5% likely malicious. Here's how to vet one before it touches your machine.
read more →May 2026
// I wrote a 16-line bash script that builds its own coding agent, then has that agent build a backdoor. No frameworks, no dependencies, no malicious code on disk. The dangerous part is one paragraph of English.
read more →May 2026
// A hackathon project: type in a stock ticker and get three agents arguing the buy, hold, and sell cases against each other — grounded in real data — instead of one confident signal pretending the answer is obvious.
read more →$ cat about.txt
Day job: CTO at Ordinary Objects, working out of Sofia, Bulgaria. The rest of the time I'm following my curiosity - mostly into AI right now, and into whatever a generalist with 20 years of habits wanders toward next.