GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold Security

kept by noahw sep 05

Researchers reveal that CLI AI coding agents automatically run git commands that can execute arbitrary code from a repository’s .git/config, allowing remote code execution via malicious repos.

Using Local Coding Agents - by Sebastian Raschka, PhD
A tutorial demonstrates that local coding agents using open-weight models like Qwen3.6 and Ollama can match proprietary service speeds while offering privacy and cost benefits.
also on Qwen-Code, #ai-agents, #ai-coding, #developer-tools
Block - Introducing Buzz: where humans and agents work together
Block launches Buzz, an open‑source Nostr‑based workspace where humans and AI agents collaborate as peers with shared context and flexible tooling.
also on Goose, Claude Code, #ai-agents, #ai-coding, #developer-tools
AI-Assisted Development at Block
Block Engineering's AI Champions program and repo readiness initiatives boosted AI-authored code by 69% and time savings by 37% in three months.
also on Goose, Claude Code, #ai-coding, #developer-tools
Introducing Grok Build
xAI launches Grok Build, a coding agent and CLI with plan-approve workflow and parallel subagents, for SuperGrok and X Premium Plus subscribers.
also on Grok Build, #cli, #ai-coding, #developer-tools
Grok Build is open source
Grok Build, the build system from xAI, has been released as open source, allowing developers to inspect, modify, and contribute to its code.
also on Grok Build, #ai-coding, #developer-tools