GitHub Repo

GitHub 熱門專案、開源工具、框架、runtime 與重要 release。

AI 安全

GitSpawn Exploits Repository-Local Git Configuration to Bypass Execution Approvals in Seven Coding Agents

Malicious projects can place commands in `.git/config` under `core.fsmonitor`, then wait for an agent to run `git status` or `git diff` in the background to execute them on the host. Some products have been patched, but the incident shows that tool approvals can still be bypassed by underlying programs if an agent’s sandbox does not cover startup and version-control processes.

GitHub Repo

Paddock Open-Sources Rust/CUDA Inference Engine Targeting Concurrent AI Agents on a Single NVIDIA GPU

Truespar has released Paddock’s scheduler, paged KV cache, memory management, and custom CUDA kernels, along with OpenAI- and Anthropic-compatible interfaces. The authors’ benchmarks show it outperforming vLLM and SGLang on some single-GPU workloads, but the results have not been independently reproduced, and Paddock does not support tensor parallelism, ROCm, or Metal.

代理工具

DRACO Assigns Reinforcement Learning Credit to Each Agent Step Using Dynamic Rubrics—Without Accessing Task Answers During Training

A team from IBM Research and Carnegie Mellon University enables a judge model to generate rubrics for each set of trajectories, then redistributes the overall reward to the relevant steps. The method improves performance on AppWorld by 15.9 percentage points, although its correctness still depends on model judgments that have not been manually validated.

AI research

One-Shot OPD Captures Most Full-Data Distillation Gains With a Single Query, Shifting the Bottleneck to Teacher-Signal Absorption

Researchers found that repeatedly sampling from a single query while giving the student model token-level teacher supervision can, after 300 steps, cover 71.5% of the state reached by full-data training. Adding 16 semantically diverse queries raises coverage to 98.9%, though the findings remain limited to the specified small models, teachers, and benchmarks.