---
title: "Discussion on \"I Handed Claude Code the Keys. Turns Out I'm Not the Only One Using Them.\" | Hashnode"
description: "Discussion on \"I Handed Claude Code the Keys. Turns Out I'm Not the Only One Using Them.\". What happens when an attacker, not you, is the one holding the agent's keys."
url: "https://hashnode.com/posts/i-handed-claude-code-the-keys-turns-out-i-m-not-the-only-one-using-them/6a31d105b58dc64183a398de"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [I Handed Claude Code the Keys. Turns Out I'm Not the Only One Using Them.](https://blog.theknowngood.com/i-handed-claude-code-the-keys-turns-out-i-m-not-the-only-one-using-them?utm_source=hashnode&utm_medium=feed)

What happens when an attacker, not you, is the one holding the agent's keys.

Jun 16 · 11 min read · blog.theknowngood.com  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#information-security](https://hashnode.com/tag/information-security)
-   [#ai](https://hashnode.com/tag/ai)
-   [#devops](https://hashnode.com/tag/devops)
-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)
-   [#llm](https://hashnode.com/tag/llm)

## Written by

[Kerry Kier](https://hashnode.com/@kkier)

@kkier · Sacramento, USA

  
[View profile](https://hashnode.com/@kkier)

Systems engineer working on public safety infrastructure, emergency communications, and where AI actually belongs.

I'm a systems engineer in a public safety environment. The systems I keep running are the ones people reach after something has already gone wrong, which sets a different bar than most IT work — the failure isn't a bad quarter, it's a call that doesn't connect. My work sits in three places: the network and virtualization layer under emergency communications, the security posture around it, and the practical question of where AI belongs in systems that can't afford to be confidently wrong. What I keep returning to are the failures that don't announce themselves — degraded service that still passes an availability check, a vendor dependency nobody inventoried, a monitor measuring the wrong layer entirely. I run my own infrastructure for the same reason: local inference stacks, self-hosted services, hardware I own end to end. It's the only way to see how something actually fails rather than how the documentation says it will. I write that up as field notes at blog.theknowngood.com, and maintain a reference dataset on AI model evaluation at theknowngood.com. Licensed amateur radio operator, KO6JKE. Troubleshooting an RF path and debugging a network stack are closer than they look, and both matter most when the usual channels are down.

## Responses 3

Markdown supported · ⌘↵ to post

[Joel Horvath](https://hashnode.com/@joelhorvath)

[Jun 17](https://hashnode.com/posts/i-handed-claude-code-the-keys-turns-out-i-m-not-the-only-one-using-them/6a31d105b58dc64183a398de/comment/6a320557ef147aecc73c490d)

Hey,

Great article. I especially liked your observation that the core problem isn't prompt injection itself—it's that agentic systems blur the line between data and commands while holding real privileges.

The way you tied together the supply-chain attack, Cursor vulnerability, and MCP issue under the same architectural pattern was genuinely thought-provoking.

I have one idea and I believe that your expertise is very good fit for this. Would love to connect if you're open to it.

[Kerry Kier](https://hashnode.com/@kkier)

[Jun 20](https://hashnode.com/posts/i-handed-claude-code-the-keys-turns-out-i-m-not-the-only-one-using-them/6a31d105b58dc64183a398de/comment/6a320557ef147aecc73c490d#reply-6a36a738722c96c9a7d7f1af)

Hi Joel, Thanks for the feedback. If yo want to shoot me a DM we can discuss more if you want no problems on this side.

[Joel Horvath](https://hashnode.com/@joelhorvath)

[Jun 20](https://hashnode.com/posts/i-handed-claude-code-the-keys-turns-out-i-m-not-the-only-one-using-them/6a31d105b58dc64183a398de/comment/6a320557ef147aecc73c490d#reply-6a36b9d9998d50e84c5601b6)

Hi, Kerry. How's going? So how can we contact? My mail is [joelhorvath614@gmail.com](mailto:joelhorvath614@gmail.com)? What's yours? Please ping me.