Tag
11 pieces
SkillSpector gained 15,462 stars in five months scanning AI agent skills. It shredded our malicious test fixture at 100/100, then scored an eleven-line transcript exfiltrator 0/100 and marked it SAFE.
We probed a single MCP server installed with one line of npx config. It exposes 372 tools and 335,954 bytes of JSON schema, roughly 42 percent of a 200K context window.
We denied reads of one file and calls to curl, then tried eight ways around it. Six were blocked, including cat, sed and a chained command. The two that were not still stopped and asked.
Herdr is not a terminal, it is a multiplexer that runs inside one. Across 181 runs it consumed 4.4MB of output in 0.059s, faster than the Ghostty window hosting it.
Tailcat drops Tailscale's control plane entirely, and 675 points of Hacker News noticed it still depends on Tailscale's DERP relays, which Tailscale discourages self-hosting.
A three-token headless prompt sent 44,137 tokens of preamble and cost 31 cents. The identical command four seconds later cost 2.2 cents.
A PreToolUse hook that blocks rm -rf took ten minutes to write and caught 2 of 6 ways to delete a directory. Worse, it failed open: broken, it exited 0 and let the delete through.
An audit of 77 Claude Code rule files found 22 loading on every session, and 10 of those were Chinese translations of the other 10. That is 4,265 tokens of duplicate instruction per session.
DoltLite reached beta on about 2,000 AI agent pull requests. We counted its divergence files ourselves: 4,705 classified entries, and exactly one is a real bug.