# Strip a stranger’s repo for parts (safely)

Somebody ships a clever skills repo, a sharp blog post, a tool with one great idea inside it. I want the idea, not the dependency. I pull the 2-3 patterns worth taking, and run the safety gates first, because a cloned repo can attack your agent without ever executing a line of code.

This page is a hand-designed HTML document, not markdown. Read the full text at https://bootstrapping.io/notes/strip-a-repo-for-parts/