Reading up on Goose
3 deep · digging since jan 29
- GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold Security
Researchers reveal that CLI AI coding agents automatically run git commands that can execute arbitrary code from a repository’s .git/config, allowing remote code execution via malicious repos.
- Block - Introducing Buzz: where humans and agents work together
Block launches Buzz, an open‑source Nostr‑based workspace where humans and AI agents collaborate as peers with shared context and flexible tooling.
- AI-Assisted Development at Block
Block Engineering's AI Champions program and repo readiness initiatives boosted AI-authored code by 69% and time savings by 37% in three months.