Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-31 · high
The TypeScript tool runs authorized pentests, bug bounty work and CTF labs locally, swapping OpenAI, Anthropic or DeepSeek as the model.
Why now: S1N6H posted the repo on August 26, and by August 31 it already wires in four model APIs plus auto-discovery for any OpenAI-compatible gateway.
Pentest Harness crossed 306 stars on GitHub after S1N6H posted it August 26. It's a TypeScript agent harness for authorized penetration tests, bug bounty work, security labs and CTFs. Sessions stay on your machine instead of routing through a vendor's cloud.
For researchers running those sessions, the model is a configuration line, not a vendor lock-in. The harness swaps between OpenAI's Chat Completions and Responses APIs, Anthropic's Messages API, DeepSeek, or any OpenAI-compatible gateway. It auto-discovers whatever models are on the other end.
The toolset covers what you'd want mid-engagement: shell access, filesystem operations, web research, a skills system, goal tracking, subagents, background jobs and workflow control. Subagents and background jobs let it run several steps of an engagement without someone babysitting each one.
The repo doesn't say how it performs against a real target, or how it guards against someone pointing it at systems outside authorized scope. For a tool that runs shell commands against live infrastructure, that gap matters before anyone relies on it.
Each link below shares sources, entities, or timing with this story.
Blaizzy/nativ (1,163 stars, Swift, MIT, macOS 26+) comes from the mlx-vlm author and bundles that server into a SwiftUI app that discovers MLX models already in your HF cache. It exposes OpenAI-compatible chat, Responses, image, audio and model endpoints plus Anthropic Message...
Cline released @cline/sdk on May 13, an open-source TypeScript agent runtime that powers their CLI, VS Code, and JetBrains extensions. Running claude-opus-4.7, Cline CLI scores 74.2% on Terminal-Bench 2.0. Claude Code on the same model: 69.4%. Same model. Different harness. Al...
The IDE market is fragmenting, and this week drew the sharpest lines yet. Cursor 3 launched as a rebuilt agent-orchestration platform in Rust and TypeScript, replacing the VS Code fork with an Agents Window for dispatching and monitoring multiple AI coding agents. Anysphere hi...
A Chinese lab shipped a runtime that manages two American coding agents as subagents, and it went from repo creation to 145,439 stars in four days. deepseek-ai/deepseek-harness published dsh-v0.1.0-rc.7 at 12:01 UTC today, its first tagged release since the repo appeared on Au...
Three moves, two days, no coordination between them. August 10–11: GitHub shipped Ollama as a BYOK provider inside Copilot for JetBrains (GitHub Changelog). Unsloth released Unsloth Desktop with a command literally named unsloth start claude, which points Claude Code and Codex...
Cherry Studio ships unified access to OpenAI, Anthropic, Gemini, DeepSeek, Qwen, Ollama, and dozens more providers in a single Electron app. Autonomous agent mode, built-in knowledge base, MCP support. It's basically a free, local-first alternative to switching between web int...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.