Fetching from the wire…
OSS2026-08-11 · source-backed
The agent-security topic holds 42 repos above 100 stars, four from large companies rather than startups: NVIDIA/SkillSpector (14,498 stars, scanning Claude Code/Codex/MCP skills for prompt injection), Tencent/AI-Infra-Guard (4,467, red-teaming with Many-Shot/PAIR/GOAT/ActorAttack), uber/ADR (1,351, "deployed at Uber"), and perplexityai/numbat (886, created July 24). Numbat is the most EDR-shaped: a cgo-free single binary for macOS/Linux/Windows normalizing agent hooks, plugins, and OTLP logs into one event model, evaluated by a CEL rule engine, detecting cloud-metadata probing, secret-file access paired with exfiltration, and SSH key persistence. All shipped rules are monitor-only with blocking off by default.
Each link below shares sources, entities, or timing with this story.
Uber uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Uber uses Claude Code); both cover CEL, Claude Code, Codex, July; reported by the same outlet (github.com).
Uber uses Cursor / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Uber uses Cursor); both cover ADR, Claude Code, Linux, MCP; reported by the same outlet (github.com).
Uber uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Uber uses Claude Code); both cover Claude Code, Codex, Linux, NVIDIA; reported by the same outlet (github.com).
Uber uses Cursor / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Uber uses Cursor); both cover Claude Code, Codex, July, OTLP; reported by the same outlet (github.com).
Linked by a graph relationship (Uber uses Cursor); both cover Claude Code, Codex, Linux, Windows; reported by the same outlet (github.com).
Uber uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Uber uses Claude Code); both cover Claude Code, Codex, July, Linux; reported by the same outlet (github.com).
Databricks partners with Uber / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Databricks partners with Uber); both cover Claude Code, Codex, July, MCP; reported by the same outlet (github.com).
Uber uses Cursor / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Uber uses Cursor); both cover Claude Code, Codex, July, MCP; reported by the same outlet (github.com).