Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-09-26 · source-backed
PR #48176 adds .aws to the protected metadata paths next to .git, .agents and .codex, covering workspace roots and extra writable roots. The reasoning in the PR is exact: an AWS profile can name a credential helper that the application executes, so write access to .aws is code execution. Tests cover deletion, replacement and symlink targets on macOS and Linux. PR #48155 does the companion fix, keeping explicit read denials in force when a user approves a command with broader write access, and masking Linux cases where binding the root writable shadowed standard devices or reopened denied symlink targets.
Each link below shares sources, entities, or timing with this story.
+7,546 stars this week for an "Application Development Environment" running each concurrent agent in its own worktree. Works with any terminal CLI agent — Claude Code, Codex, OpenCode, Pi, Cursor, Copilot, Grok, 30+ others — across macOS, Windows, Linux, iOS via App Store/Test...
Roughly 245 commits, adding session forking, archive/restore from the TUI resume picker, full conversation export to Markdown or clipboard, and Amazon Bedrock Runtime as a built-in provider with AWS profile and region support. Hooks can now run commands asynchronously and invo...
Each project gets a throwaway VM where the agent has full tool access to Docker, git, compilers and package managers with no path back to the host (GitHub). coop setup installs Firecracker and a guest kernel on Linux; macOS goes through Lima via Homebrew. Usage is coop up then...
msitarzewski/agency-agents added 446 stars today, packaging personas across "divisions" (frontend specialists, community experts, fact-checkers, reality checkers), each defined with a voice, a process, and concrete deliverables rather than a generic prompt template (GitHub). I...
The Agent Toolkit for the AWS CLI equips third-party coding agents with AWS-specific knowledge and secure API access through the AWS MCP Server in a single command, naming three competitors alongside its own Kiro (AWS). AWS listing its rivals is the tell: the company is optimi...
Three things happened this month that only make sense together. Agent Plugins 1.0 shipped co-signed by six competitors: AWS, Anysphere, Microsoft, OpenAI, Vercel and Google (GitHub Changelog). It makes skills-plus-MCP bundles portable across clients. OpenAI's August 11 Codex c...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.