Do you audit the plugins and hooks your coding agent loads? What does your routine look like?
A GitHub issue this week reported a desktop app adding plugins and a session-start hook to Codex and Claude Code without asking. Whatever comes of that report, it is a good prompt to look at our own setups. For those who use coding agents daily: how often do you check which…