Tag
Devin 推出 Security Swarm，一个基于 Agentic MapReduce 编排多个 Devin 并行工作的安全扫描与修复产品，可构建定制威胁模型、检测并验证漏洞，并通过 Pull Request 协助修复。
OASM is an AI-powered, open-source platform (GPL-3.0) that consolidates external attack surface inventory and scanning, running tools like nuclei, subfinder, httpx, naabu, and dnsx via pluggable connectors, with scheduled workflows and an MCP endpoint for natural-language querying of asset data.
开源项目ECC将AI编程流程（规划、测试、代码审查）整理成可复用的技能、规则、Hooks和记忆机制，支持Claude Code、Codex、Cursor等工具，并附带AgentShield安全扫描。
A developer building apps with AI coding agents (Cursor, Claude) discovered that agents often write Supabase RLS policies that look secure but aren't, prompting them to build a small CLI security scanner that found 95 findings (12 high severity) in their own repo—including a live service-role key in public HTML and stale policies exposing an access-key table.
The user is frustrated with existing methods for scanning AI agent skills for security risks due to high false positives and ineffective reviews, and is seeking recommendations for more reliable approaches that can distinguish between safe and unsafe behaviors.
This article introduces claude-browser-stack and agent-pods, a tool that automates browser development loops by enabling AI agents to debug APIs, scan for vulnerabilities, record user flows, and provide visual context to Claude, closing the loop between coding and verification.
AI-based security scanning has discovered 17 bugs in Perfetto's trace processor over 10 weeks, highlighting the potential for AI to uncover vulnerabilities in long-tail code that previously received little attention.
The article warns that the MCP ecosystem is repeating the same supply chain security pattern seen in npm, Docker, and PyPI, with minimal vetting and growing risks. It highlights that a scan of 500 Smithery servers found 18.8% with security issues and that existing security tooling cannot handle malicious agent instructions, and introduces a new static scanner called bawbel.
HermesHub is a curated skills registry for Hermes Agent by Nous Research, enabling installation and sharing of verified skills with automated security scanning and a creator marketplace.