GitHub Repo

GitHub 熱門專案、開源工具、框架、runtime 與重要 release。

AI 安全

OWASP Agentic Skills Top 10 Completes Public Review for v1, Treating the Skill Supply Chain as a Distinct Attack Surface

The public review of the OWASP Agentic Skills Top 10 v1 draft has concluded. The framework organizes malicious skills, excessive permissions, dependency confusion, and cross-platform portability risks into ten control categories. It treats skills as the behavioral layer between models and MCP tools and proposes a universal format for declaring permissions, provenance, and integrity.

基準與基礎設施

MLPerf Endpoints v0.7 Launches, Adding Continuous Submissions and a Comparable Results Pipeline for Agentic Inference

MLCommons has released Endpoints v0.7, transforming inference testing from fixed-batch submissions into endpoint benchmarking infrastructure with automated review and continuous updates. The upcoming multi-turn agentic workloads will measure both per-user progress and aggregate throughput, rather than counting only tokens/s for isolated requests.

AI 安全

DFOT Quantifies LLM Over-Trust in Derived Sensor Values; Cross-Modal Distillation Improves Correction Rates by Up to 6.69 Points

A new framework breaks down “model over-trust in derived values” into metrics covering conflict acceptance, contextual misdirection, error correction, and utility harm. In a PPG-based rhythm interpretation case study, a reliability model that uses ECG during training but requires only PPG at deployment improves four endpoints, although the data and weights were not released with the code.

代理工具

GRSD Assigns Rewards by Comparing an Agent’s Own Success and Failure Trajectories; ALFWorld Unseen Task Success Rate Reaches 83.6%

Group-Reflective Self-Distillation no longer extracts fixed skills from an external teacher. Instead, it compares successful and failed rollouts from the same policy and converts their differences into turn-level training signals. It delivers overall improvements across three agent environments, but increases training time by 17% over GRPO and still requires an external model to score reflection text.