代理工具

Agent、MCP、coding agent、工作流自動化與評測。

Attack Agent Funnels 379 Stolen LLM Upstreams Into a Single Gateway, Creating a Self-Reinforcing Inference Supply Chain

A SANS honeypot captured a semi-automated workflow in which an agent searches for LLM resellers with weak authentication, obtains keys, then tests and aggregates them behind a unified API. This is not fully autonomous replication, but it shows that stolen inference resources can be used to support the next round of scanning and intrusion.

2026-09-13

代理工具

Google Cloud API Gateway Can Map Existing REST APIs Directly to Remote MCP Tools

The public preview launched on September 11 uses OpenAPI 3.x extensions to let agents access existing backends through `tools/list` and `tools/call`, without requiring a separate MCP server. The initial release supports tools only, with no streaming, long-running calls, or binary responses, so authentication and protocol compatibility still need to be reviewed before production migration.

2026-09-13

Ling-3.0-flash-VL Adds Low-Precision Weights, but Its Independent Evaluation Is Not Directly Comparable to the Official Score of 42

InclusionAI’s 124B multimodal MoE now offers FP8, FP4, and INT4 weights as well as a working SGLang recipe, bringing image, video, and tool calling capabilities into a single model. The latest independent test by Artificial Analysis produced a score of 25, but it used a different evaluation version from the model card’s claimed score of 42, so deployers should not treat the two as being on the same scale.

2026-09-13

AI 安全

Hermes Agent 0.21.2 Patches Cross-Profile Data Leaks and SQLite WAL Races

Nous Research’s patch release re-separates shared state from user databases and closes pathways that allowed sessions, MCP credentials, and attachments to flow across profiles. Docker images are available, but given the patch’s broad scope and the absence of a standalone security advisory, deployers should still back up and validate their environments first.

2026-09-13

代理工具

Google Releases autofinetune: An Agent That Automatically Searches SFT and GRPO Training Configurations on TPUs

autofinetune lets an agent modify Tunix training code according to a Markdown specification, run evaluations, and retain only Git commits that improve the target metric. Its initial experiments cover SFT for FunctionGemma and GRPO for Gemma 3 1B, but the workflow remains a small-scale, single-metric exploration.

2026-09-13

AI 安全

Gemini CLI Nightly Adds Execution Confirmation for Untrusted Arguments and Build File Changes, Isolates Sandbox Credentials

The September 12 nightly of Gemini CLI 0.61.0 tracks command arguments derived from external content and requires renewed user approval after build configuration changes. A separate set of patches prevents sandboxes from mounting home directories, credentials, and `.env` files, but a stable release is not yet available.

2026-09-13

SenseNova-U1.5 Publishes Report on Its Native Unified Vision Architecture, but the Full Training Pipeline Has Yet to Be Released

SenseNova-U1.5 uses a Mixture-of-Transformers (MoT) architecture that does not rely on a separate vision encoder or VAE, enabling a single model to handle understanding, reasoning, generation, and editing. The technical report added on September 11 details its training methods and evaluations. Existing weights and inference code are available, but the SFT, RL, and multi-expert distillation code has not yet been fully released.

2026-08-24

代理工具

Docs7 Exposes Read-Only Document Search via WebMCP and Separately Tracks Agent and Human Queries

Context7’s Docs7 now lets agents in compatible browsers call `search_docs` directly, while administrators can view agent sources, query content, and popular pages. This gives documentation teams their first visibility into how agents look for information, but the metrics cannot prove that citations or answers are correct, and WebMCP itself remains only a community draft.

2026-09-13

代理工具

Claude Code 2.1.269 Adds Plugin A/B Evaluation, but Automated Scores Still Lack Quality Benchmarks

The new `claude plugin eval` command compares performance with a plugin enabled and disabled, producing JSON and HTML evaluation reports. Initial testing suggests that automatically generated criteria are better at verifying instruction following than proving that a plugin genuinely improves task quality.

2026-09-13

代理工具

Jira Turns Backlog Scanning, Coding Agents, and PR Review Into a Persistent Loop as Permission Controls Move Into the Context Layer

Atlassian is expanding Jira from an agent launch point into a control plane that continuously scans backlogs, assigns implementation work, and creates PRs, while using Teamwork Graph to provide organizational context to multi-repository agents. Most core features remain in open beta or private preview, making this more of an architectural direction that teams can evaluate than a mature pipeline ready for broad deployment.

2026-09-12

TinyDiT Releases a Single-GPU Training Recipe: Registers Absorb 90% of Cross-Attention in a 210M-Parameter Image Model

TinyDiT trains a 210M-parameter DiT from scratch on a single RTX PRO 6000 in 400,000 steps over 3.5 days, while releasing its code, weights, and stage-by-stage measurements. The results show that flow-matching loss is a poor proxy for image-generation progress, whereas registers, timestep shifting, and compiled training provide more actionable signals.

2026-09-12

代理工具

Codex Python SDK 0.154 Lets External Events Enter Active Turns While Explicitly Limiting Their Instruction Authority

The new `ExternalMessage` can deliver events from tools, other agents, or applications to a Codex turn already in progress, while marking them as having tool-level authority—below user and developer instructions. The release also adds history-loading and per-turn service-tier controls, but upgrading involves compatibility changes to event streams and hook structures.

2026-09-12