Policy dependency / Stack layer
Appending a Security-Requirements Section to a Vibe-Coding Prompt Cut Confirmed Findings From 51 to 24 Across Six Web Apps
arXiv 2608.20963
Stack layer / Threat pattern
CROSS-CATEGORY: The Guardrail Layer Around Coding Agents Shipped at Four Different Points in the Lifecycle in 48 Hours
Hacker News Show HN and Product Hunt (2026-08-24 and 2026-08-25)
Stack layer / Contrast
Microsoft's Agent Lightning v1.0.1 ships an agent skill whose job is optimizing other agents, installed through gh skill
GitHub
Stack layer / Threat pattern
CROSS-CATEGORY: The Agent Control Plane Is Now a Priced Category, Selling Governance Over Agents Employees Already Built
Product Hunt (Decawork and Kastra product pages)
Stack layer / Threat pattern
Decawork Launched at Product Hunt #2 Managing Employee-Built Claude Code and Cursor Agents as Company Assets
Product Hunt
Stack layer / Threat pattern
SkillBloat turns a poisoned agent skill into a 5.4x to 10.1x token bill, with no data exfiltration involved
arXiv
Stack layer / Threat pattern
SkillPreflight Publishes a 100-Point Scorecard for Agent Skills and a Benchmark of 40 Public Ones
GitHub (via Show HN, 2026-08-25)
Stack layer / Threat pattern
aiXamine Runs 5,000+ Test Runs Across 120 LLMs and Names a Quantifiable Safety Tax Plus a Distillation-Induced Robustness Collapse From 56.9 to 2.6
arXiv 2608.20554