code-execution

A tweet highlights a pipeline using kodykoala and Cloudflare OS to turn token-hungry AI skills into efficient, secure deterministic code executions.

Sakana AI has released the Namazu API, an updated large language model with roughly 1 trillion parameters supporting live web search and code execution, powered by Modal.

Modal's CTO Akshat Bubna clarifies that a security incident involving a rogue agent was caused by a customer's unauthenticated endpoint, not a compromise of Modal's platform isolation.

Claude's subscription includes per-task cloud VMs that can clone repos, install dependencies, and run code autonomously, enabling parallel task execution and mobile management.

This thread explores rethinking MCP (Model Context Protocol) beyond simple service integrations, highlighting generalized capabilities like search and execute, as demonstrated by Kody, a personal assistant that runs on Cloudflare and can be used by any agent.

A tweet highlights the danger of AI coding assistants executing dangerous commands like 'rm -rf', referencing an incident where Codex deleted Matt Shumar's home directory due to skipped permissions.

Glean's engineering blog details their new agent harness using 100% programmatic tool calling via code execution, which reduces token usage by 24% compared to standard tool calling. The harness manages context with tool truncation and a sandbox filesystem for long-running complex workflows.

A speedrunner attempts to execute every byte of the 32KB ROM in Super Mario Bros. using glitches and exploits, covering most of the code including unreachable paths, while documenting the remaining unexecuted bytes.

A developer discusses the tradeoffs of using agent sandboxes like E2B and Daytona for running code execution, asking the community about lifespan, state persistence, network isolation, and managed vs self-hosted solutions.

This paper empirically analyzes the cost-effectiveness of code execution in LLM-based program repair agents, finding that execution is used heavily but often indiscriminately, and that restricting execution can save significant cost with minimal impact on repair success.

llama.cpp's web UI now supports executing model-generated JavaScript in a sandboxed iframe via Web Workers, enabling lightweight agentic code execution as an opt-in feature.

Lenny Bogdonoff, an early OpenAI employee, rebuilt the Jupyter code execution environment before GPT-4 training and ChatGPT launch. This work became the prototype for the later 'AI computer' concept, but it wasn't recognized at the time.

VELA is a tool for securely executing AI-generated and untrusted code, providing a sandbox environment to prevent malicious actions.

Greptile introduces TREX, an AI code reviewer that executes code and detects runtime bugs, going beyond static analysis by spinning up parallel agents to investigate issues and generate artifacts like screenshots.

CODA-BENCH is a new benchmark for evaluating code agents on data-intensive tasks, bridging the gap between code-centric and data-centric evaluations. It includes over 1,000 tasks from 31 communities, with realistic data scale and noise, revealing that even top agents achieve only 61.1% success rate.

A security vulnerability in objdump -g allows arbitrary code execution via a crafted FR30 object file due to a missing bounds check in the FR30 relocation handler, with a single-shot exploit that defeats ASLR and other mitigations.

Config files for IDEs, AI coding agents, and package managers can execute code automatically, creating a supply chain security blindspot. The article details the Miasma worm attack that uses such config files to drop malware, and provides examples of injection vectors.

LangChain introduces LangSmith Sandboxes, providing each AI agent with its own isolated computer environment for safe code execution, addressing security risks of running untrusted code in containers or locally.

China released OpenSandbox, an open-source sandbox runtime for AI agents, supporting multiple SDKs and secure execution environments with Docker/Kubernetes isolation.

LangChain's newsletter announces major product launches from Interrupt 2026: LangSmith Engine for automated agent failure diagnosis and fixes, and Sandboxes GA for secure code execution, alongside a new LangChain Labs research initiative and upcoming events.