Fetching from the wire…
01
02
03
04
05
06
07
08
OSS2026-08-11 · source-backed
The agent-security topic holds 42 repos above 100 stars, four from large companies rather than startups: NVIDIA/SkillSpector (14,498 stars, scanning Claude Code/Codex/MCP skills for prompt injection), Tencent/AI-Infra-Guard (4,467, red-teaming with Many-Shot/PAIR/GOAT/ActorAttack), uber/ADR (1,351, "deployed at Uber"), and perplexityai/numbat (886, created July 24). Numbat is the most EDR-shaped: a cgo-free single binary for macOS/Linux/Windows normalizing agent hooks, plugins, and OTLP logs into one event model, evaluated by a CEL rule engine, detecting cloud-metadata probing, secret-file access paired with exfiltration, and SSH key persistence. All shipped rules are monitor-only with blocking off by default.
Each link below shares sources, entities, or timing with this story.
github.com/perplexityai/numbat shipped v0.1.1 on July 29 at 239 stars, Apache 2.0, a single cgo-free Go binary for macOS/Linux/Windows. It observes Claude Code, Codex, OpenCode, and Pi through local hooks, OTLP/HTTP log exporters, and on-disk session artifacts, normalizes into...
One Claude Code release fixed two independent permission-check bypasses on the same day. That's the story. Version 2.1.221, shipped August 4, patches a Bash tool bypass where zsh could execute hidden commands embedded inside [[ ]] regex conditionals. The approval prompt never...
msitarzewski/agency-agents added 446 stars today, packaging personas across "divisions" (frontend specialists, community experts, fact-checkers, reality checkers), each defined with a voice, a process, and concrete deliverables rather than a generic prompt template (GitHub). I...
I check Product Hunt maybe once a week and usually regret it. Today's board is worth reading as market structure. The July 30 leaderboard: SKI at 277 upvotes (free voice input for Claude Code and Codex). AI Search Console at 249 (prompt analytics and citation mapping). Memmy A...
open-design is a local-first macOS/Windows/Linux desktop app that turns your existing coding agent into a design engine, producing prototypes, landing pages, dashboards, slides, images, and video with real HTML/PDF/PPTX/MP4 export. It runs on 25 distinct local CLI executables...
Nothing touches your files until you accept it. shepherd-agents/shepherd (MIT, v0.3.0 on July 8) is a runtime substrate that captures agent execution as durable, inspectable traces that meta-agents can observe, fork, replay, and revert. Agent work is held as a reviewable propo...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.