
Skill Files Are the New Supply Chain Attack Surface
Skill files are a supply chain attack surface: adversarial skills exploit a mainstream coding agent in over 95% of runs. The fix is admission engineering.
57 articles - page 2 of 5

Skill files are a supply chain attack surface: adversarial skills exploit a mainstream coding agent in over 95% of runs. The fix is admission engineering.

ACE vs ALTK-Evolve for agent memory: both turn trajectories into lessons, but calibrated delivery matches accuracy on AppWorld at a fraction of the tokens.

Encrypted chain-of-thought from Anthropic, OpenAI and Google APIs can be replayed into weaker models and read verbatim. How the attack works and what leaked.

A new arXiv paper probes six widely used open-source agent frameworks and finds the barrier semantics of approval gates, cancellation, and timeouts hold on none of them. A sibling branch can execute while the user is rejecting another one, and replay can double-execute. The fix is a verified external gate called SoundGate.

AgentChaos injects server errors, truncated responses and corrupted tool calls into live agents. Pass@1 drops up to 50 points: robustness is a systems problem.

LivePlan monitors SWE-agent runs and calls an advisor LLM only on drift, raising resolution rates up to 15.2 points for an extra $0.08 per instance.

WeatherNext Cyclones, DeepMind's open-source tropical cyclone model, adds a day of forecast lead time. What the Nature paper shows and how to run the weights.

Fine-tuned coding agents collapse when you switch scaffolds, from 52.6% to 8.4% on SWE-bench Verified. DCAS shows how to train planning into the model.

TutorMoments, AI2's replay-based benchmark for LLM tutors, finds models over-help by default. How it scores scaffolding and rigor in real tutoring transcripts.

SkillSV is a Shapley framework that values the rules, examples and scripts inside an agent skill, cutting skills to 69% of tokens without significant loss.

A benchmark plateau can be a broken yardstick: a SciCode audit found 263 defects, and corrected scores jump to 84-98 percent. How to read flat leaderboards.

Kill your agent runs early: production traces show context goes stale at turn boundaries, and the fixes that moved numbers are kill, carry the state, restart.
Showing 13-24 of 56 articles

New tutorials, open-source projects, and deep dives on coding agents - delivered weekly.
Explore 840 topics
Browse All Topics