Theo open-sourced his daily agent skills. tstack works in Claude Code and Codex.
- full-send: change to merged PR, nobody watching
- council: three models from different providers review until they agree
- takeover: finishes someone else's PR
MIT.
xitter.cf/theo/status/2114623574…
Ridiculous!!!
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
Browser agents click through the same website on every run.
Pomerado (YC) builds an API for the site instead. YC's Aaron Epstein: 2-4x faster, 10-1000x cheaper, 30% more reliable than browser agents. Open source.
Will agents still click buttons in 2027?
xitter.cf/akshay_manglik/status/…
Andrew Wilkinson: "Claude and ChatGPT plugins are the death of software."
His playbook: get your app into their chat, train users there, then cut you out.
This came right after CapCut's ChatGPT plugin.
If chat is the interface, what's your app worth?
xitter.cf/awilkinson/status/2114…
Claude and ChatGPT plugins are the death of software.
1. Integrate your software into their interface
2. Get everyone used to using it in that way (because it’s a better experience).
3. Eventually cut you out of the equation.
CapCut doesn’t need to exist 😂 It’s an interface for something that doesn’t need an interface anymore.
Lambs to the slaughter. They are going to eat effectively all software this way.
And APIs aren’t going to save everyone.
APIs are just software that computers use.








