Researchers scanned 3,171 public GitHub repositories: 2,660 assembled agent "setups" and 511 published skill collections. They looked for defects in the instruction files, skills, hooks, and MCP server declarations that make up an agent's…
In the News: September 9, 2026
A validated audit of 3,171 repositories finds 16.0% of AI coding-agent harness configurations carry a confirmed security defect, mostly unpinned MCP servers.
Morning edition
Machine-readable
Download Markdown
Story
A validated audit of 3,171 repositories finds 16.0% of agent-harness configurations carry a confirmed security defect
Read story →
Research acceleration: The view inside OpenAI
September 6, 2026. By mid-August, OpenAI reports, its median researcher spent more than $600 a day on agent inference. The research organization used the equivalent of 3.1 agent-workdays for every human workday, up from parity in June. More than half of successful four-to-eight-hour tasks still required at least one human intervention. Following a security incident, Astra-class compute allocation fell sharply, and other model classes absorbed most of the difference.
I vibe-coded a C compiler that can build SQLite
blog.fsck.com, August 21, 2026. Vincent instructed his agentic harness to build a standards-compliant ARM64 C compiler in Swift, then compile SQLite and pass SQLite's own tests. The harness ran unsupervised with recursive subagents for about 21 hours and finished the job, verified against a public commit. "It did exactly what I asked."