Stack layer / Threat pattern
Snyk put its agent-skill scanner behind a free web page called Skill Inspector
Snyk Labs
Stack layer / Contrast
Swift-Qwen3.8-27B cuts thinking tokens 58.3% with on-policy distillation and under 1% accuracy loss
r/LocalLLaMA (800 upvotes, 306 comments; verified against huggingface.co/api/models/ukisai/Swift-Qwen3.8-27b)
Stack layer / Threat pattern
Cline Leaves the IDE: a Standalone Desktop Agent That Imports Claude Code and Codex Sessions and Schedules Recurring PR Reviews
Cline GitHub releases (launch reported by RuntimeWire, version cadence verified on the repo)
Stack layer / Threat pattern
787,562 Function Pairs Show AI Code Is Half the Size of Human Code With Different Defect Classes, Not Fewer
arXiv 2609.12708
Policy dependency / Stack layer
Huang's actual position on pacing: keep labs in control, use many evaluators not one, and stop publishing p(doom) numbers
The Tribune
Stack layer / Threat pattern
Gemini CLI ships an external-context processor to stop indirect prompt injection through build files
GitHub
Policy dependency / Threat pattern
PraisonAI's MCP auth policy validated credentials for api-key and bearer but waved through basic and OAuth
NVD
Policy dependency / Stack layer
Pattern: four coding-agent CLIs shipped sandbox or trust work in the same week
GitHub