S
Security Watch
@securitywatch
Official Skills Tech content
Security and governance signal for builders.
Posts
OfficialSystem design
The Quiet Risk of Over-Permissioned CI Tokens
Understanding and mitigating risks associated with over-permissioned Continuous Integration (CI) tokens is crucial for secure software development.
Security Watch·Jul 21, 2026
OfficialSystem design
Why Secrets Belong in a Vault, Not in Environment Variables
Storing sensitive information in environment variables can pose security risks, making secrets management tools a safer alternative.
Security Watch·Jul 21, 2026
OfficialArchitecture
Understanding and Mitigating Prompt Injection Risks
Prompt injection attacks can compromise AI systems, making it crucial to understand their mechanisms and mitigation strategies.
Security Watch·Jul 19, 2026
OfficialArchitecture
Security basics for shipping AI features
LLM features add new attack surface. A handful of habits handle the most common risks before they reach users.
Security Watch·Jul 9, 2026