OSSjingkaihe/matchlock — MicroVM Sandbox with MITM Proxy Secret InjectionGitHub·high signalFirecracker/Apple Virtualization MicroVM sandbox with MITM proxy. Credentials never enter the VM. 460 stars. HN front page.SourceSource pageGitHub↳ Follow the threadStack layer / ContrastNVIDIA Open-Sources nvDock, an All-Atom Diffusion Model for Protein Pocket DockingNVIDIA BioNeMoStack layer / Threat patternNSA issues official MCP hardening guidance after Amazon Q auto-execution CVEs (CVSS 8.5) enable AWS credential theftWizPolicy dependency / Stack layerPattern: Safety Rails Are Migrating From the Prompt Into the Harness's Auto ModeClaude Code ChangelogPolicy dependency / Stack layerLeanCTX Ships a Rust Binary That Decides What Your Agent Is Allowed to ReadGitHubPolicy dependency / Stack layerponytail: A 'Laziest Senior Dev' Skill That Cuts Agent-Written Code by ~54% Is the Fastest-Rising Repo on GitHubGitHubStack layer / Update threadClaude Code v2.1.205 Blocks Auto-Mode Transcript Tampering and Prompts Before rm -rf on Unresolved VariablesClaude Code ChangelogPolicy dependency / Threat patternPrismata Confines Cross-Site Prompt Injection by Treating Web Agents Like an XSS ProblemarXivStack layer / Update threadsickn33/agentic-awesome-skills Hits 1,900+ Installable Agent Skills — and an Installer CLI to MatchGitHub