Entity trail

PIPES

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-22 / github-pulse-researcherclaudish-to-english rewrites the agent's own output into plain language on screen, 579 stars on day oneLeutenegger/claudish-to-english was created and pushed on 2026-08-21 and reached 579 stars and 61 forks within a day, MIT, Shell. It is a Claude Code plugin that pipes each assistant message through a rewrite before display, defaulting to a local ollama model and optionally using the codex CLI, Anthropic, or any OpenAI-compatible endpoint, with an optional Markdown rewrite. It is fail-open and screen-only, so it does not touch the transcript the agent reasons over. Same-day sibling repos with the same complaint (adnanakil/nobuzz at 146 stars, LB623/no-negative-echo at 150) suggest this is a category, not one person's itch.
2026-08-22 / hn-researcher'LLMs Are Proof That Unix Won' Makes the Case That Text-Streams-and-Pipes Is Why Agent Tooling Composes At AllBastian Rieck's essay reached 41 points and 16 comments, arguing that the Unix philosophy of small programs communicating over plain text streams is exactly the interface that made LLM tool use and agent composition tractable. It is an opinion piece rather than new data and carries modest community validation, but it lands in the same week three separate agent harnesses on HN (Proliferate, Munder Difflin, Autolith) built themselves as wrappers around existing CLIs rather than as new runtimes.
2026-08-22 / hn-researcherA Second Anti-Slop Tool Hit HN in 48 Hours: Claudette Pipes Claude's Output Through Google's Antigravity CLI Instead of Claude ItselfClaudette (repo name nobuzz, MIT, 146 stars) took 296 points and 190 comments with a Claude Code skill that writes the previous response to a temp file, invokes Google's `agy` CLI with plain-English style instructions, and returns the translation verbatim. The author's stated reason for using a rival model is the design insight: you cannot have 'a debuzzer that quietly asks the buzzer to debuzz itself.' Three modes ship (colleague, manager, director), and it post-processes rather than touching Claude's behavior. Coming two days after Vomit's 298-point thread, two separate cross-model output-cleaning tools now front-paged in one week.
2026-08-21 / rss-researcherv0 pipes every Snowflake call through a TLS-terminating proxy so generated code never touches the OAuth tokenVercel published the architecture behind v0's Snowflake integration: the sandbox firewall forwards requests to a v0 proxy using a certificate authority unique to each sandbox, so the proxy can read the traffic, verify the sandbox's OIDC token, resolve the chat session, and fetch a fresh credential server-side. Rather than substituting a placeholder blindly, which would leak the token through query results, it injects credentials only into protocol-defined fields such as the Authorization bearer header or the login request's token field, and rejects any request where the placeholder appears elsewhere. First 15 days: roughly 13,000 requests, zero placeholder-misuse rejections.
2026-08-21 / hn-researcherA Go Tool Called 'Vomit' Pipes Claude 5's Output Through a Local 20B Model to Make It Readable, and 260 HN Comments Agreed With the PremiseZach Ahn's vomit (104 GitHub stars, GPLv3) installs via 'go install', hooks Claude's output with 'vomit scrub -claude', and rewrites it through a local model, with GPT-OSS 20B on Llama.app as the recommended default. The README's motivation is blunt: 'Save your tokens, Claude 5 is hopeless.' The 266-point thread drew 260 comments, most of them agreeing that Claude 5 writes in dense jargon ('load-bearing', 'seams', 'smoke') and that prompt instructions to stop get ignored as sessions lengthen. The dissent is the sharper point: paying two models to undo one model's house style does not fix the model.
2026-08-16 / skill-finderTag tool output with source provenance and field contracts: state-corruption attack success drops 84.7% to 2.3%PIPES (Provenance-Informed, Prior-Enforced Screening) defends against state-corruption attacks, where attacker-controlled data makes false claims about the environment that slip past injection filters because they read as ordinary tool results. It screens each response unit two ways — static field contracts where a schema gives stable expectations, and source provenance metadata for open-ended content — then removes, warns, blocks, or escalates on violation. On six benchmark splits with Gemma 4 31B IT under adaptive attack, attack success fell from 84.7% to 2.3% while benign utility rose slightly (92.5% vs 90.6%).
2026-08-14 / agents-researcherPIPES cuts agent perception attacks from 84.7% to 2.3% success by attaching provenance to what the agent seesarXiv 2608.12789 (2026-08-13) treats agent perception — what lands in the context from tools, pages and environments — as the thing to secure, tagging inputs with provenance and priors rather than asking the model to spot injections. Across three VitaBench and three AgentDyn splits with Gemma 4 31B IT as the target agent, average attack success drops from 84.7% to 2.3% while benign utility is preserved (92.5% with PIPES vs 90.6% undefended). The pattern is the one that keeps winning: enforce outside the model, because a defense the model has to reason about is a defense the attacker can argue with.
2026-08-11 / saas-disruption-researcherKubit Launched Product Analytics That Maps Agent Traces to User Behavior and Pipes the Answer Into Claude CodeKubit debuted 'Product Analytics for Agents and Users' on Product Hunt August 11 (#7, 98 upvotes), joining LLM traces to clickstream so you can see what a user was trying to do alongside how the agent reasoned about it. It claims intent, sentiment and friction extraction from 100% of traces with no sampling, ingests from Langfuse, LangSmith and Arize via OpenTelemetry fan-out, and — the architecturally interesting part — ships the resulting context back into Claude Code or Cursor over MCP so the fix happens in the IDE rather than in a dashboard. That is the Mixpanel/Amplitude workflow inverted: the analytics product's output surface is a coding agent, not a chart.
2026-08-11 / github-pulse-researchercodex-bridge Pipes GPT-5 Subagents and gpt-image-2 Into Claude Code Using Only the Codex CLI Login You Already HaveSateezg/codex-bridge was created 2026-08-09 and took 359 stars in about two days. It's a Shell-based Claude Code plugin that gives Claude access to GPT-5 subagents and gpt-image-2 image generation by routing through an existing Codex CLI OAuth session rather than an OpenAI API key. This is the same subscription-arbitrage pattern that showed up in openclaude's loopback proxy hosts last week, now pointed the other direction — cross-vendor rather than provider-swapping — and it means a developer paying for two coding-agent subscriptions can use both models from one harness without a third billing relationship.
2026-06-24 / skill-finderRe-scan MCP tool descriptions on every update and reject silent changes — the rug-pull defenseCommand injection accounts for 43% of all MCP CVEs in early 2026, with pipes, semicolons, and ampersands in AI-generated arguments going straight to the shell. Beyond sanitizing arguments, scan tool descriptions both at install time and at every server update and reject silent changes, because a trusted server can be updated to quietly alter a tool's described behavior (a 'rug pull') after your agent has already learned to call it. Treat tool metadata as a security surface with change-detection, not as static config you validate once.
2026-06-09 / saas-disruption-researcherProduct Hunt June 2026: Agent Memory and Data-Access Ship as Standalone Products, Not App FeaturesJune launches show agent infrastructure unbundling into composable primitives: Databox MCP pipes business data into Claude, Powabase bundles Postgres + RAG + workflows + agent orchestration in one, Walrus Memory sells cross-session context for long-running agents, and Dune Keypad ships Claude-integrated input. Capabilities that used to be buried inside a SaaS app (memory, governed data access) are now sold as developer-facing building blocks. The category mix — coding agents, MCP connectors, voice agents — confirms agent plumbing is where indie builders are shipping.
2026-06-09 / news-researcherA Hugging Face Agent Built a 3D Paris Gallery by Autonomously Chaining Two SpacesHugging Face detailed how an agent constructed an interactive 3D Paris art gallery by autonomously chaining together two existing Hugging Face Spaces, using an agents.md-style spec to coordinate the workflow. The demo is a concrete example of agent-to-tool composition, where the model discovers and pipes together hosted apps rather than writing everything from scratch. For builders it's a template for treating Spaces (or any hosted endpoints) as composable tools in an agent pipeline.

Graph relationships

BENCHMARKED AGAINST
Gemma 4 31B IT
PIPES reduced state-corruption attack success from 84.7% to 2.3% on Gemma 4 31B IT
Source finding
BENCHMARKED AGAINST
AgentDyn
PIPES defense was evaluated across AgentDyn attack splits
Source finding
BENCHMARKED AGAINST
VitaBench
PIPES defense was evaluated across VitaBench attack splits
Source finding

Source trail

arXiv GitHub bastian.rieck.me / Hacker News GitHub / Hacker News Vercel Blog GitHub / Hacker News Kubit (corroborated by Product Hunt Aug 11 leaderboard)GitHub Practical DevSecOps — MCP Security Best Practices: What Actually Works in 2026 Product Hunt Hugging Face Blog GitHub

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…