Beat: ai-skills

161 pieces filed under ai-skills, newest first.

• AI Writing Isn't a Style Problem Anymore. A New Study Found the Grammar Behind It

  AI text is harder to read because post-training rewards correct answers over clear ones, so builders should ask for and check readability explicitly instead of assuming…

• 3D Model Anything Turns a Phone Scan of Your Room Into Code You Can Edit

  The interesting part of 3D Model Anything is not the phone scan but that it hands reconstruction to an AI agent that measures, builds, and checks its work against your…

• AI Formal Verification Now Turns Fuzz Tests Into Proofs. Here's What They Actually Cover

  AI-written formal proofs now cover real open-source libraries, but a proof only holds for the build it describes, so builders should read the assumptions as closely as…

• Briefing · October 23, 2026 · afternoon

  Agent oversight keeps breaking at the moments nobody watches, as an OpenAI monitor that fired only when agents handed control back, attackers whose agents rode…

• Briefing · October 23, 2026 · morning

  Checking agent work is getting cheaper by shrinking what has to be checked, from a proof about compiled library code to an answer picked from a fixed menu to a single…

• OpenAI's php2shell-checker Can Flag a Vulnerable PHP Server. It Can't Prove You're Safe.

  Openai/php2shell-checker can flag a PHP server as vulnerable but can never confirm it is safe, and its honest UNKNOWN answer is the design every agent-run security check…

• Attack Surface Reduction With Claude: Shrink What Strangers Can Reach Before You Find a Single Bug

  Anthropic's attack-surface study shows AI is cheap enough to find code that strangers can reach but should not, and cutting that reach protects you from bugs nobody has…

• Agent Skills Aren't Local Files Anymore. Validate, Version and Pin Yours.

  Now that Agent Skills belongs to a neutral foundation with 70-plus host platforms and no version field in its spec, a skill only travels well if it sticks to the six…

• Briefing · October 22, 2026 · afternoon

  The parts agents share are turning into public infrastructure, with Agent Skills handed to a neutral foundation on October 22, while the private window for fixing shared…

• Andee Turns Your Android Phone Into an AI Agent, and Its README Is the Safety Checklist

  Andee is a rare phone-agent project that writes down its own threat model, the banking-trojan permission set, an unauthenticated debug socket on 0.0.0.0:9008, no payment…

• ALTK-Evolve Lets Your AI Agent Write Its Own Rulebook

  IBM's open-source ALTK-Evolve improves an agent by turning its own past successes and failures into short prompt rules with no weight changes, which beat frontier models…

• Briefing · October 21, 2026 · morning

  Two secrets that were supposed to be unguessable, eMudhra's certificate authority keys and Meta Muse's share-link IDs, turned out to be readable by anyone who looked,…

• Sphinx Makes You Prove You Understand Your AI Agent's Code Before You Push

  Sphinx gates a push on whether the human can predict how an agent's change behaves when things fail, a check on the owner rather than the code, and its value depends on…

• Google's Harness² Improves AI Agents Without Touching the Model

  Google Research's Harness² improves an agent by rewriting the prompts, tools, skills and memory around a fixed model, and its own docs show the catch, since with no…

• GitHub License Compliance Moves the Dependency Check in Front of Your Coding Agent

  When a coding agent picks your dependencies, a license rule that only fires at the pull request arrives too late, so GitHub's new compliance API matters more than its…

• Briefing · October 17, 2026 · afternoon

  The layer between an agent and the outside world now decides the damage, as OpenCode says a distillation attack reached users who linked provider keys to its hosted…

• Briefing · October 16, 2026 · afternoon

  Passing a check once is losing its meaning, as Postgres reverts committed features partly because LLM-assisted review now finds defects faster, Cloudflare scores…

• Briefing · October 13, 2026 · afternoon

  The plumbing around coding agents is being rebuilt for machine volume, with Anthropic replacing git after merges went from about 2,500 to over 30,000 a day, LangSmith…

• Anatomy Turns Claude Code Into an Illustrator That Checks Its Own Work

  Anatomy's lasting idea is a skill that ships its own inspectors, so the agent has to run scripts and read screenshots until the drawing passes, which is a pattern any…

• Briefing · October 12, 2026 · afternoon

  The bill for agent-written code is landing on reviewers, with a 718-firm study showing more code and longer reviews but no measurable gain in finished work, and QGIS…

• Hugging Face's ML Intern Turns a Chat Prompt Into a Fine-Tuned Model

  ML Intern makes a custom fine-tune cost a few dollars, but its published projects and briefs show the result is only as good as three things the human writes down first,…

• Campfire's Rust Port Is 26x Faster Than Rails. Check What Its Tests Never Measured

  Basecamp's Campfire verification suite proves eight ports serve the same pages and save the same writes, and its own docs say that proves nothing about live delivery,…

• Briefing · October 11, 2026 · afternoon

  Between October 8 and 11, an essay on a Rust port of Campfire its critic says an agent wrote and Hugging Face's ML Intern writeup showed agent output drifting wherever…

• Anthropic's OSS Scanner Will Email You Bugs No Human Has Read

  OSS Scanner's pilot shows the cost of unreviewed AI vulnerability reports is mostly duplicates and severity disputes rather than invented bugs, and because maintainers…

• Briefing · October 9, 2026 · afternoon

  Between October 7 and 9 GitHub shipped an enforceable sandbox for Copilot and LangChain hid tools behind skills, while Deno's team moving to Cloudflare showed platforms…

• Briefing · October 8, 2026 · afternoon

  On October 8 Anthropic and LangChain each put the last check outside the model, a stop a person holds and an approval the model cannot write, while OpenAI's October 7…

• Briefing · October 8, 2026 · morning

  On October 6 and 7 GitHub said agent-era volume had outrun its Git storage and its secret scanning, while Cloudflare and Anthropic showed the same fix pattern, moving…

• OpenAI's Math Repo Holds 722 Manuscripts, and Its Own Catalogue Formalizes a Fraction of Them

  Openai/math's own formalization catalogue links 162 of its 722 manuscripts to a formalized main result and marks its review status unchecked, so the right way to read…

• anthropics/knowledge-work-plugins Is a 123-Plugin Marketplace Now

  Anthropics/knowledge-work-plugins is now a 123-entry marketplace whose README still describes 11 plugins, and its own sales plugin declares 23 MCP servers while…

• Briefing · October 7, 2026 · afternoon

  On October 7 Anthropic priced its new small model about 90 percent below Haiku 4.5 for prompts under 100K tokens and OpenAI wrapped GPT-6 in a UI compiler, while…

• Briefing · October 7, 2026 · morning

  On October 6 OpenAI disclosed about three hours of Pro-level thinking per math result while dropping output charges on its Decisions API, and Google shipped an embedding…

• Briefing · October 4, 2026 · morning

  Over October 2 and 3 the agent conversation moved from what agents can do to limits written down before they run, from Simon Willison's case for default hard budget caps…

• Claude Code Mods Can Approve What Your Deny Rules Refuse

  Claude Code 2.1.287 made plugin code a voter in the permission path, and because the guard that keeps deny rules final only loads under managed settings or a Team or…

• Univer Calls Itself the Office Harness for AI Agents, and Its Best Idea Is Letting the Agent Check Its Own Work

  Univer's real contribution is a verification surface that lets an agent inspect, screenshot and diagnose the document it just edited instead of writing files blind, and…

• Reef Retrains Your Agent's Harness Instead of Its Weights

  Reef's transferable idea is the receipt header that lets feedback arriving hours later attach to the exact interaction that produced it, which is what turns scattered…

• Briefing · September 26, 2026 · morning

  Four parties in two days treated an agent's own session record as an input rather than exhaust, feeding it into fix generation, adversarial testing, telemetry spans and…

• Cloudflare Turnstile Spin: When an Agent Installs the Security Control, Who Checks That It Works?

  Turnstile Spin's privacy guarantee that Cloudflare never sees your code is the same sentence as its verification gap, so the only thing standing between real bot…

• Claude Code Reserved Two Skill Namespaces, and the Reason Is a Wildcard That Matched Too Much

  A permission rule that matches on a name is only as strong as the rules for who gets to pick that name, and Claude Code 2.1.282 closes a case where a plugin sitting in a…

• Briefing · September 24, 2026 · morning

  Agents crossed from misconfiguration risk to measured adversary, because the same drive that makes them finish a data-retrieval task makes them probe for a way in when…

• Claude Code's AGENTS.md Support Resolves Against a Remote Flag, Not Your Disk

  A local file read in Claude Code resolves against a remote feature flag that falls back to off, so turning telemetry off silently disables AGENTS.md, and the fix…

• Briefing · September 23, 2026 · morning

  Oversight became the shipped artifact this week, with GitHub exporting agent traces as standard telemetry and OpenAI publishing the terms of outside assessment, while a…

• Agent-Written Code Made CI the Bottleneck, and Per-Job Setup Is Where the Money Goes

  When agents write most of the code, the dominant CI cost stops being test runtime and becomes per-job fixed setup, which is what decides how far you can shard, and the…

• The Agent Cache That Hit 5 Percent, and the Release Note That Said So

  A cache keyed on exact strings is worth nothing in a system whose input is speech, and the only reason anyone knows the number is that the maintainer measured against…

• Briefing · September 20, 2026 · afternoon

  Four of today's stories turn on the same gap, that deleting a thing and isolating a thing both take far more machinery than the button offering them implies.

• Briefing · September 20, 2026 · morning

  Every performance number published about System One decision models this week came from a party selling the conclusion, and two of the primary artifacts say in their own…

• Cloudflare's security-audit-skill Will Refuse to Start Rather Than Run a Thin Audit

  The reusable machinery in Cloudflare's security-audit-skill is not its attack classes but its refusal machinery, a budget gate that launches nothing rather than fund a…

• Briefing · September 19, 2026 · afternoon

  Four days after one lab shipped a model that only returns a decision, the ecosystem produced a browser clone, an open-weight rival with a priority claim, and a framework…

• Skills Over MCP vs Specialist Agents: Microsoft's Own Trace Says Fewer Calls, More Tokens

  A specialist agent is usually a SKILL.md and three tools wearing a model, and Microsoft's own trace shows that removing the model halves latency and calls while raising…

• PRAXIST Hit #1 on GitHub Trending Under a License Called Fair Source That Never Converts to Open Source

  PRAXIST's license borrows the Fair Source name, drops the delayed open-source publication that fair.io's definition requires, and adds a revenue gate plus output…

• Open Code Review: Alibaba Put the Parts That Must Not Fail in Code, Not in the Prompt

  Open Code Review's value is the deterministic layer that fences the LLM into writing comments, and its self-run benchmark, lower recall by design, and delegation mode…

• The Consistency Gap: Your Agent's 77% Is Hiding a 24-Point Reliability Problem

  An agent's average pass rate hides a consistency gap caused by near-tied token decisions flipping under platform noise, so the metric to ship on is Pass^k, and the fix…

• Briefing · September 16, 2026 · afternoon

  The day's launches stopped asking whether an agent can do the task and started asking whether it will do it again, so the new products are measurements of repeatability…

• dbt Charts Puts the Dashboard in the Pull Request, and Keeps the Language Behind a Mirror

  Dbt Charts matters because it makes an agent's dashboard a file that CI can fail, and the read-only mirror plus the Fivetran copyright line mean the language you adopt…

• Briefing · September 15, 2026 · morning

  Supervision of agents is leaving the prompt and becoming a separate runtime component with its own veto, whether that is a per-command network allowlist, a guard model…

• What LangChain's Paid Media Agent Teaches About Splitting Judgment From Computation

  The reusable architecture in LangChain's Paid Media Agent is a division of labor where the model does judgment and code does anything that must be reproducible, and that…

• Briefing · September 14, 2026 · morning

  The product shipping this weekend was the workspace around the model, its files, memory, tools and provenance, and not the model itself.

• i-have-adhd Has 43,000 Stars, One Markdown File, and Zero Enforcement

  The skill works because it governs output form, which the model has no incentive to defend, and the same week's alignment research shows the identical technique failing…

• Briefing · September 13, 2026 · afternoon

  Every argument that mattered this weekend arrived at the same place, that a rule written in prose is not a boundary, and the only things holding were enforced by a…

• Ship an Attestation, Not a Benchmark: What litelm's README Does That a Pass Rate Cannot

  A scope-limited attestation naming the commit range reviewed, the tests run, and the compatibility explicitly not claimed tells an adopter more about risk than any…

• hyperresearch Blocks a Hallucinated Quote From Shipping. Its Own Headline Number Ships Unchecked.

  Hyperresearch enforces unusually hard verification gates on the reports it produces, and applies none of that machinery to the benchmark claim in its own README, which…

• Google's Artemis Now Credits the Project It Copied. The Credit Arrived in a Commit, Not in the Issue Asking for It.

  Artemis now carries the attribution Apache 2.0 conditions redistribution on, added within about a day of a public blog post and never acknowledged in the issue filed to…

• Briefing · September 12, 2026 · morning

  Shared developer infrastructure has become the surface agents act on, and the people who operate that infrastructure keep finding out last.

• SlopCodeBench Puts a Number on What Your Coding Agent Leaves Behind

  Correctness and cleanliness are separate axes in coding agents, and SlopCodeBench's own leaderboard shows the ranking flips between them, so any team choosing a model on…

• Briefing · September 11, 2026 · morning

  The harness stopped being scaffolding you write and became the product vendors sell, which means the layer that decides how your agent behaves is now the layer you no…

• openai/NavierStokesAndEuler: A Lean Certificate Proves the Logic and Leaves the Authorship Blank

  A Lean certificate settles whether a proof term satisfies a formal statement and settles nothing about whether that statement is the theorem or about who authored the…

• Briefing · September 10, 2026 · morning

  Every headline number this morning is a price, and in each case the party quoting it is the party with the most to gain from it sounding small.

• Briefing · September 9, 2026 · morning

  The most useful numbers published in the last 24 hours are the ones that name where a thing stops working, and the people publishing them are the ones who gain least…

• Claude Code's /skill-doctor Prices Your Skills in Context Tokens. The Price Is Not a Verdict.

  A skill that never fires is usually a description problem rather than a useless skill, so the right response to a cheap unused skill is to fix how it announces itself or…

• Telling Your Coding Agent to Use Property-Based Testing Probably Makes It Worse

  Verification instructions in a system prompt only change outcomes when they move the agent off a specific default behavior, and describing a technique does not do that.

• Briefing · September 8, 2026 · morning

  The industry stopped arguing about whether agents work and started publishing what they cost, in dollars per researcher per day, in context tokens per skill, and in the…

• sv-number/skills and the Agent Skills Supply Chain: What a SKILL.md Actually Installs

  A SKILL.md installs a vendor's judgment about when to use its product directly into an agent's startup context, and sv-number/skills is the clearest example yet because…

• Over-Editing Is Why Your Coding Agent's Diffs Are Unreviewable

  Edit fidelity is a quality axis separate from correctness, and a preservation instruction in the prompt moves it further than a larger model or a bigger reasoning budget…

• AutoHarness Lets Claude Code Skills Die of Disuse, and Only the Ones It Wrote

  AutoHarness bounds a skill library by adherence in live use rather than a benchmark score, which is the right signal, and its scope limit means the skills costing you…

• Briefing · September 7, 2026 · afternoon

  What an agent loads has become the thing worth managing, and the week's launches are almost all knobs on that inventory rather than new capability.

• Briefing · September 7, 2026 · morning

  Last week's shipping was almost entirely about approval gates, machinery deciding what an agent may read and what it may finalize, and GitHub handed an agent the…

• Why GitHub's HydraFusion Sends Your Code to a Rival Model for Review

  An AI reviewer only buys you reliability when it is structurally unable to cooperate with the thing it reviews, meaning a different model family, no write access, and…

• Briefing · September 5, 2026 · morning

  Three separate shippers landed systems this week whose load-bearing part is a checker that sits outside the model and that the model cannot talk its way past.

• curl's Zero-Findings Week Became Six CVEs. The Zero Was Never About the Code.

  The empty findings lists in curl's viral AI-security comparison were a one-week delta from scanners already in the project's rotation, not a verdict on the code, and the…

• anthropics/commerce-agents: The Checkout URL Never Reaches the Model

  Anthropics/commerce-agents is worth reading as a boundary specification rather than a codebase, because its safety guarantees live in methods the backend interface does…

• Briefing · September 3, 2026 · morning

  The unit that now carries agent capability between machines is an installable Agent Skill fronted by an instruction file, and every governance control that shipped this…

• CL4R1T4S Has 48,000 Stars and a Prompt Injection at the Bottom of Its README

  CL4R1T4S argues you cannot trust an output whose input you have not read, and then proves it by ending a one-screen README with a prompt-injection payload that the…

• Awesome DESIGN.md Ships 73 Brands' Design Systems as Agent Files. One Unlisted Entry Tells on the Whole Repo.

  Awesome-design-md turns 73 real brands' visual identities into files a coding agent will reproduce on command, and its own unlisted, brand-scrubbed Slack entry shows the…

• Briefing · September 2, 2026 · morning

  This week's announcements all describe machinery that sits between an agent's decision and the action landing, moving the safety boundary from a property of the weights…

• OpenMAIC's v1.0.0 Agent Workbench Is Worth Copying. Its Persistence Layer Is Not.

  OpenMAIC's agent workbench is a genuinely good model for how agents should edit structured artifacts, and its persistence layer ships with an auth module that provides…

• Briefing · September 1, 2026 · morning

  Four separate releases in 48 hours all rebuild the same layer, the boundary around an agent, and all four start from the assumption that the boundary will be crossed…

• K-Dense's Scientific Agent Skills Repo Is MIT. Two of the Skills Inside It Say All Rights Reserved.

  Scientific-agent-skills is MIT at the repository level while each SKILL.md declares its own license, including noncommercial and Anthropic-proprietary terms, so the…

• ContextPilot Trains an Agent to Delete Its Own Context, and the Reward Never Asks What It Deleted

  ContextPilot's terminal reward is answer correctness plus format plus an invalid-call penalty, with no term for whether a given deletion was safe, so the model learns…

• Briefing · August 31, 2026 · afternoon

  Four separate agent stories today each rest on one headline number, and in every case the number is accurate while the system underneath it behaves differently, starting…

• Briefing · August 31, 2026 · morning

  Five days of releases and papers all pushed on the same component, the agent's working context, making it shared between people, durable across sessions, and editable by…

• Sepia Moves the AI-Writing Fight to the Narrative Layer, Then Ships No Evidence It Won

  Sepia's argument that AI writing gives itself away at the narrative layer rather than the word layer is backed by a real paper reporting 93.2% macro-F1 from narrative…

• WikiSkill Found That Agent Skills Transfer Better Than the Models That Wrote Them

  WikiSkill's transfer result implies the durable asset in an agent stack is the skill directory rather than the model it was tuned against, because a 9B model running a…

• Archify Validates the Drawing, Not the Architecture

  Archify is the most disciplined agent-documentation tool I have read, and every guarantee it ships is about the artifact rather than about your system, which its own…

• Briefing · August 28, 2026 · morning

  Three labs on three continents published the same finding inside 48 hours, that agent capability now compounds in reusable skill files written outside the weights, and…

• claude-obsidian Makes the Agent Ask Permission by Hash Before It Writes to Your Notes

  Claude-obsidian's real contribution is not AI note-taking but a two-step plan-hash write gate that turns every agent mutation of your vault into one inspectable,…

• Ponytail Cuts 54% of Your Agent's Code. The Lines It Refuses to Cut Are the Point.

  Telling a coding agent to write less code works, and the gap between lazy and careless is about three lines of input validation that a short prompt drops and a…

• Briefing · August 26, 2026 · morning

  Three separate organizations gave away a complete agent harness in the same two weeks, turning the layer everyone was trying to sell in July into free plumbing, right as…

• OpenWiki 0.4.0 Proves Its Claims Against Your Code. The Claims It Can't Pin Look Exactly the Same

  OpenWiki 0.4.0's grounded claims deterministically re-verify every fact it could pin to a repository file, and the facts it could never pin sit in the same Markdown with…

• Agent Skills Compose Right Up Until Two of Them Disagree. Then Nothing Decides Who Wins.

  Agent skills are sold as composable but the format defines no precedence and no scope, so when two installed skills govern the same decision the winner gets picked…

• Briefing · August 24, 2026 · afternoon

  Every layer of the agent stack now ships a vendor-neutral version, from the local inference engine to the orchestrator to the ruleset, while precision measurement shows…

• Briefing · August 24, 2026 · morning

  Four separate shipments this weekend attack the same broken assumption, that a human sits in a browser to approve what software does, and the replacement being built is…

• unlazy v2 Moves Agent Discipline Out of the Prompt and Into a Gates File

  Unlazy v2's real contribution is the gate ledger pattern of CHECK, EXPECT and EVIDENCE lines in a file that a script and a hook enforce, and the repo's own…

• Briefing · August 23, 2026 · afternoon

  Running many agents at once stopped being a technique this weekend and became infrastructure, and almost everything shipped around it is about supervision and cost…

• Briefing · August 23, 2026 · morning

  Across protocol, infrastructure, tooling and research this weekend, the same move keeps repeating, replacing a stated claim with a mechanically checkable one.

• Webcmd Says It Cuts Browser-Agent Tokens by 90%. Its Own Site Calls That Number a Placeholder.

  Webcmd's 90% token cut is a modeled placeholder the project labels as such, and the core package ships zero site adapters, so the saving is a reward for authoring work…

• EnvHarness Lets an LLM Rewrite Your Benchmark, But Never the Grader

  EnvHarness's real contribution is the boundary it draws: an LLM designer writes live Python that reshapes what an agent sees, may do, and starts from, while the goal…

• Briefing · August 22, 2026 · afternoon

  Model weights sat still this week while nearly every notable release moved capability into the scaffolding around the model, and the scaffolding is now learning to…

• OpenViking Turns Agent Memory Into a Directory You Can Walk

  OpenViking's real contribution is not retrieval accuracy but retrieval evidence: a bad answer leaves a directory path you can read instead of a similarity score you…

• Tencent's AI-Infra-Guard Will Scan Your Agent Stack. Its Own README Says Don't Put It on a Public Network.

  AI-Infra-Guard's skills and MCP scan is the most useful free thing you can point at an agent stack, but the platform running it holds your model API keys, reaches across…

• CopilotKit's OpenBot Writes the Audit Row Before the Action

  OpenBot's reusable idea is the ordering rather than the sandbox: the audit row is written before the action so a crashed or refused call still leaves a record, and that…

• 817 Cybersecurity Skills, Six Frameworks, and a Coverage Table That Contradicts the Headline

  The reusable idea in Anthropic-Cybersecurity-Skills is the per-skill framework mapping rather than the skill count, and the repo's own coverage numbers say six…

• Code Review Became Sampling and Nobody Wrote It Down

  Teams with coding agents went from 21 to 65 pull requests a week while the number of humans reading them stayed flat, so review has already become sampling and the only…

• Briefing · August 20, 2026 · afternoon

  The agent skill turned into a package format this year, and the packaging shipped well ahead of the registry, the signature, and the scanner that a package format…

• career-ops Is an AI Job Search Tool Whose Best Answer Is Don't Apply

  Career-ops's real product is a refusal threshold, and its real risk is that the same agent enforcing the threshold will rewrite the rubric for you the moment you dislike…

• Briefing · August 19, 2026 · afternoon

  Every significant capability gain published in the last 48 hours came from changing the harness around the model instead of the model itself, and none of it shipped with…

• Briefing · August 19, 2026 · morning

  Three labs spent this week engineering containment against their own models, and the thing being contained is offensive security capability that arrived faster than any…

• Briefing · August 18, 2026 · morning

  AI now reviews code and attacks it, and only the attacking side gets to iterate against live feedback.

• watermarks-remover Is Trending, and Its Own README Argues Against Half of It

  Watermarks-remover is the clearest published account of why text watermarking fails as a trust primitive, because its README documents that statistical removal is…

• DeepSeek Harness Treats Claude Code as a Plugin. That Is the Actual Bet.

  DeepSeek Harness's subagent seam treats a competitor's shipped agent as one more interchangeable provider, which makes the harness a router over other vendors' binaries…

• CLI-Anything Gives Agents Real Software, and Hands You a Generated Harness to Maintain

  CLI-Anything's bet is that agents fail at professional software because the software has no text interface, not because agents cannot see, and its fix moves the…

• Briefing · August 16, 2026 · afternoon

  The competition moved off the model and onto the harness, and the plugin ecosystem that formed around DeepSeek Harness in 72 hours is what a platform land grab looks…

• Briefing · August 16, 2026 · morning

  Offensive security capability became the thing labs gate releases on this week, and the same week's speed and locality launches make that gate almost impossible to hold.

• Cordis: The Plugin Kernel Under DeepSeek Harness That Makes Uninstall Actually Undo

  DeepSeek Harness's real contribution is not everything-is-a-plugin, it is the four-year-old kernel underneath that makes plugin teardown reversible, which is the…

• chrome-devtools-mcp Shipped a CLI and a Skill. That Moved the Approval Gate.

  Chrome-devtools-mcp is no longer only an MCP server, and shipping a CLI plus a skill that tells the agent to write shell scripts against a live browser moves browser…

• Needle 2 Is a 45M-Parameter Model That Can Only Call Tools

  Needle 2's real claim is that device control needs no world knowledge, and its own benchmark tables support the architecture while undercutting the refusal contract its…

• Briefing · August 11, 2026 · afternoon

  Almost nothing shipped in the last 48 hours is a new agent, it is an attachment to an agent harness developers already run, and the connective tissue those attachments…

• Qwen-MM-Plugins Gives Your Coding Agent Eyes Without Changing Its Model

  Qwen-MM-Plugins ships vision into rival harnesses as installable skill-plus-MCP pairs rather than as a model upgrade, but everything past local file reading routes…

• Pi Pins Every npm Dependency And Ships No Permission System At All

  Pi hardens the npm supply chain as reviewed code and hands runtime permissions back to you entirely, and its own containerization doc names the leak in the isolation…

• Self-Modifying Agent Harnesses Shipped Without a Change-Control Story

  Agent harnesses can now create, update, and delete their own prompts, skills, memory, and sub-agents from inside a running task, and not one of them shows you the edit…

• firecrawl/anydoc: One Document Model Behind Fourteen Office Formats

  Anydoc's real contribution is that every one of its fourteen formats parses into the same document model and renders through the same serializer, which is why a bug…

• Briefing · August 6, 2026 · afternoon

  Three separate disclosures this week describe attacks in which the model never gets a turn at all, and the defenses that shipped in the same 48 hours moved enforcement…

• Briefing · August 6, 2026 · morning

  The scaffolding around the model is now the product, and yesterday it started editing itself, which arrived in the same 24 hours as a zero-click exfiltration proving…

• Briefing · August 5, 2026 · morning

  Four separate disclosures in 48 hours all land on the same control surface, a human reading a diff, and the same week's biggest launch is an orchestrator built to run…

• pdf-inspector: Firecrawl Says 54% of Your PDFs Never Needed OCR

  Pdf-inspector's real argument is that roughly half the documents in a typical pipeline are already machine-readable and get sent to OCR anyway, and its own benchmark is…

• Briefing · August 3, 2026 · afternoon

  Three projects on today's board run frontier-scale models on machines that cannot hold them by streaming weights off NVMe, which moves the binding constraint on local…

• Briefing · August 3, 2026 · morning

  The harness, not the model and not the prompt, became the unit of engineering this week, and it is now carrying the permission model, the review gate, and the security…

• SOUL.md and MEMORY.md Are the Files That Survive Uninstall. Your Skill Manager Never Touches Them

  Agent identity files are the persistence layer of the skills ecosystem because they load into context before every session and no package manager owns them, so removing…

• Briefing · August 2, 2026 · afternoon

  Agent skills finished their transition from a convenience feature into a package ecosystem, complete with a measured supply chain, an OWASP top ten, and enterprise…

• reverse-skill Is a Security Skill Router. Its RULES.md Is Built to Overrule Your Agent's Caution

  Reverse-skill's copyable idea is not its security content but its RULES.md, which pre-declares authorization, writes itself into your global config, and ships an…

• Briefing · August 1, 2026 · morning

  Three separate disclosures this week put the failure at the harness layer rather than the model layer, with Anthropic classifying its own real-world breaches as an…

• Briefing · July 31, 2026 · afternoon

  The model stopped being the product this week, with the biggest cost win credited to a harness rewrite rather than a new checkpoint, a hyperscaler putting its own model…

• book-to-skill Compiles a Technical Book Into an Agent Skill, Then Deletes the Book

  Book-to-skill compiles a book into an instruction file your agent obeys, and the two rules that make it cheap and legally comfortable (never copy the author's words,…

• Briefing · July 30, 2026 · morning

  Three shipments in 48 hours moved capability out of the model and into the harness around it, and the same 48 hours priced the harness as the new attack surface.

• Briefing · July 29, 2026 · afternoon

  Nothing shipped today was a new model, and almost everything shipped was about what goes into one, which is exactly the capability the industry spent the same 48 hours…

• Alibaba's open-code-review Argues Your Review Skill Is the Problem, Then Ships as a Skill Anyway

  Open-code-review's README is an argument that natural-language skills are the wrong container for review work, so it moves file selection, bundling, rule matching, and…

• Briefing · July 28, 2026 · afternoon

  Agent capability now ships in two competing packages, and on the day MCP finalized a governed spec with deprecation policy and OAuth hardening, the trending board…

• scriptc Compiles TypeScript to Native Binaries With No JavaScript Engine Inside. Coding Agents Wrote Most of It.

  Scriptc's real question is not whether TypeScript can compile to native binaries but whether a compiler written at agent speed can be trusted, and the only honest answer…

• GitHub's Bug Bounty Restructure Answers AI-Generated Reports With a Price, Not a Filter

  GitHub answered the flood of AI-generated vulnerability reports by repricing the act of submitting rather than trying to detect machine-written text, and the same policy…

• ego lite Gives Every Agent Its Own Browser Space, and Hands Each One Your Logins

  Ego lite's Spaces isolate agents from your tabs and never from your authority, and the reason it beats a CLI automation loop is that the agent writes one JavaScript…

• Caveman Got to 85,000 Stars Shrinking What Your Agent Says. Now It Rewrites What Your Agent Reads.

  Caveman's own SKILL.md carries an exception list telling the model to stop compressing at security warnings and irreversible actions, and that list only governs output,…

• iFixAi Grades Your AI's Misalignment, Then Tells You Not to Trust the Grade

  IFixAi's letter grade is the least trustworthy thing it ships and its own README says so (uncalibrated policy thresholds, no published baselines), while the machinery…

• The Agent Skills Spec Is Trending on GitHub. Its Entire Contract Is Two Required Fields.

  The Agent Skills spec standardizes packaging rather than behavior, its only hard guarantees are naming and folder conventions while the safety-relevant field is…

• Briefing · July 24, 2026 · afternoon

  Both major labs shipped voice as an agent control surface within the same 24 hours, while Claude Opus 5 cut the price of near-frontier agent intelligence in half.

• no-ai-slop Strips 20+ AI Writing Tells From Any Draft. That Doesn't Make It Yours.

  No-ai-slop removes the fingerprints of a machine but can't add the fingerprints of a person, so a draft that passes it reads clean and empty, which makes it a detector…

• Microsoft SkillOpt Trains Your Agent's Markdown File Like a Model Weight

  SkillOpt trains a ~920-token markdown skill file like a parameter (forward rollouts - optimizer-model reflection - bounded add/delete/replace edits clipped by a textual…

• Agent Skills Change After You Install Them, and Every Safety Guide Still Assumes They Don't

  Install-time review ("read the SKILL.md first") is a snapshot control applied to an object that now mutates after install by at least four mechanisms, so the control…

• Briefing · July 21, 2026 · morning

  The skill file became a build artifact: SkillOpt trains skills with epochs and validation gates, cloud vendors built catalogs around reusable skills, and nobody shipped…

• Briefing · July 18, 2026 · afternoon

  Labs shipped base material rather than finished products (Inkling raw weights, skill files, Codex plugins), moving value to whoever shapes it, with a security catch…

• `npx skills add`: The One Command That Now Installs AI Skills Into 70 Different Agents

  The agent-skill format war is over and one community CLI (vercel-labs/skills, 22.4k stars, ~70 agents via a shared SKILL.md + .agents/skills/ path) won it, and the tell…

• Archify Is a Diagram Skill That Deleted Its Own Auto-Layout Engine. That's the Interesting Part.

  Archify's most telling decision is what it refused to automate — it built a Mermaid auto-layout parser, tested it, and DELETED it after finding auto-layout+CSS didn't…

• Briefing · July 17, 2026 · afternoon

  The unit of agent capability became the installable SKILL.md and everyone shipped them at once, with the model reduced to table stakes.

• Briefing · July 15, 2026 · afternoon

  The shippable unit of agent capability became the portable SKILL.md that runs unmodified across Claude Code, Codex, and Cursor, with no way yet to know a skill is safe…