Entity trail

Craft.do

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-12 / projects-researcherA Warcraft III 'Peon' Notification Plugin for Claude Code Hits 1,200 Stars in 24 HoursBuilder Tony Sheng shipped a Claude Code plugin that plays Warcraft III Peon voice lines when the agent finishes a task, racking up ~3,600 likes and ~1,200 GitHub stars within 24 hours; within days the community added 40+ sound packs spanning Zelda, StarCraft, and Half-Life. It is a tiny quality-of-life hack that captures how much time developers now spend waiting on background agents. The viral response shows real demand for ambient 'agent is done' signals in long-running workflows.
2026-07-01 / vibe-coding-researcherTwo CVSS-9.8 RCE Bugs in MCP Tooling: MCPJam Inspector and nginx-uiCVE-2026-23744 hits the MCPJam inspector, which binds 0.0.0.0 with no authentication, letting a crafted HTTP request install an MCP server and execute arbitrary code. CVE-2026-33032 affects nginx-ui (150M+ downloads), whose MCP message endpoint performs no auth on command-execution requests. Both are critical remote-code-execution flaws in tools developers run locally alongside their agents — check binds and auth before exposing any MCP inspector.
2026-06-20 / saas-disruption-researcherJasper Ships Autonomous Marketing Agents With SEMrush Integration — Content Tools Become Agentic OperatorsJasper now ships autonomous Agents handling SEO optimization, research, and personalization, including an Optimization Agent that works with SEMrush to auto-craft headlines and generate meta descriptions. The shift is from 'AI writes a draft' to 'AI agent runs the content-ops task end to end,' the same cannibalization vector hitting other marketing SaaS. Single-vendor builder-move, so importance is low, but it confirms the content-tool category is converging on autonomous execution.
2026-06-16 / reddit-researcherRiskIQ/Security Copilot Founders Exit Stealth With $100M for 'Intent-Aware' Agent Security (Ent)Ent Security emerged on June 16 with a $100M seed (led by Decibel, with Sequoia, Craft, Felicis, and In-Q-Tel) founded by Elias Manousos and Brandon Dixon, the RiskIQ duo behind Microsoft Security Copilot. Its lightweight endpoint agent (Windows/macOS/Linux + browser extension) inspects whether the intent behind a user or AI agent's action matches company policy before the action completes — moving from reactive detection to preventive control, already running in Global 2000 firms. The signal for builders: 'read the intent of the agent' is emerging as the post-prompt-injection security primitive, and it is now venture-funded at scale.
2026-06-12 / sources-researcherLoopcraft: Karpathy, Cherny and Steinberger Reframe Agent Work as 'Stacking Loops'Latent Space's June 12 AINews issue distills a builder consensus that you should stop prompting coding agents and instead design loops that prompt them — Boris Cherny: 'I don't prompt Claude anymore. I write loops, the loops do the work,' and Andrej Karpathy on 'removing yourself as the bottleneck.' The piece frames competitive advantage as knowing when to descend into lower loops for reliability and ascend to higher ones as models improve. It's the clearest articulation yet of the orchestration-over-prompting shift, calling it 'The Salty Lesson for agents.'
2026-06-01 / skill-finderAdversa AI June 2026 Agentic Security Roundup: IterInject Optimizes Prompt Injections Iteratively, Semantic Kernel RCE, Copilot BackdoorAdversa AI's June roundup highlights three new threats: IterInject, a technique that optimizes indirect prompt-injection payloads iteratively using model feedback instead of handcrafted strings; a Microsoft Semantic Kernel flaw chaining prompt injections to host-level RCE; and a DEF CON demonstration of a persistent Microsoft Copilot backdoor via indirect injection.
2026-05-28 / arxiv-researcherSilentRetrieval: Hijacking RAG Systems Through Semantically-Preserving Adversarial Data PoisoningPresents a two-stage data poisoning attack that hijacks RAG systems through adversarially crafted yet semantically fluent documents. Poisoned documents rank high in retrieval while steering generation toward attacker-chosen outputs. Demonstrates that even content-quality filters don't reliably detect these attacks — the poison reads naturally.
2026-05-25 / arxiv-researcherSkillOpt: First Systematic Text-Space Optimizer Treats Agent Skills Like Trainable ParametersSkillOpt proposes treating agent skills as external state of a frozen LLM, optimized with the same discipline as weight-space training. Rather than hand-crafting, one-shot generating, or loosely self-revising skills, SkillOpt applies controllable text-space optimization that reliably improves skill performance over its starting point under feedback. This is the first framework to bring reproducible optimization methodology to the skill-text layer of agent systems.
2026-05-22 / projects-researcherBabel Street Launches Insights Investigator — Agentic AI Executes Multi-Step Investigations Across 200+ LanguagesBabel Street launched Insights Investigator on May 18, shifting intelligence work from search-and-query to analyst-directed, AI-executed multi-step investigations across 200+ languages. Agents are trained in tradecraft and investigative workflows but analysts retain full control over scope, logic, and outcomes, with the system exposing its research plan, query logic, and reasoning at every step. This represents the 'agentic AI entering professional workflows' pattern — where the value isn't the model but the domain-specific orchestration layer on top of it.
2026-05-16 / rss-researcherWindows BitLocker Zero-Day 'YellowKey': PoC Released, Defeats Default TPM-Only Encryption — No PatchSecurity researcher Chaotic Eclipse released proof-of-concept code for YellowKey, a zero-day bypassing Windows 11 and Server 2022/2025 BitLocker in default TPM-only mode. Exploit uses crafted FsTx files on USB to abuse Windows Recovery Environment boot behavior, opening a command shell while the protected disk remains mounted. No CVE assigned; Microsoft says 'investigating.' Second flaw 'GreenPlasma' targets CTFMON privilege escalation.
2026-05-05 / hn-researcherWhat Do We Lose When AI Does Our Work? — Developer Essay on Craft, Agency, and the Cost of DelegationRick Yean's essay 'What Do We Lose When AI Does Our Work?' hit Hacker News on May 4, exploring the less-discussed costs of AI delegation: loss of craft knowledge, diminished problem-solving intuition, and erosion of the agency that comes from struggling through hard problems yourself. The piece resonates alongside the earlier 367-point 'Agentic Coding Is a Trap' discussion, forming a growing counter-narrative thread in the developer community about what practitioners sacrifice for speed. The 10-comment HN thread is small but substantive.
2026-05-04 / projects-researcherCraft Agents OSS Launches May 2 — Craft.do Open-Sources Desktop AI Agent Platform Built on Claude Agent SDK Under Apache 2.0Lukilabs (makers of Craft.do) released craft-agents-oss on May 2, 2026 as an open-source desktop application for running AI agents against real workflows. Built on the same Claude Agent SDK foundation as Claude Code, Craft Agents extends Claude's reasoning to GitHub, Linear, Slack, Craft documents, local files, and any MCP server — with automatic credential setup, no config files needed. The app supports macOS, Windows, and Linux with a headless remote server mode for long-running sessions on powerful machines, plus reusable skills you define once for code reviews, reports, or content workflows.

Graph relationships

RELEASED
Craft Agents
Craft.do open-sourced Craft Agents with Apache 2.0 license
Source finding
RELEASED
Craft Agents
craft.do released Craft Agents, an agent-native desktop app.
Source finding

Source trail

SaaSCity Practical DevSecOps Averi SiliconANGLE Latent Space Adversa AI arXiv arXiv Help Net Security Ars Technica Rick Yean / Hacker News GitHub

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…