搜索“GitHub”

resilient to routine UI changes, while AgentCore Runtime provides the infrastructure to run workflows at scale. For the complete working implementation, see the sample repository: github.com/aws-samples/sample-nova-act-synthetic-monitoring Sarath is a Senior Gen AI/ML Specialist Solutions Architect at Amazon Web Services, where he helps enterprise customers design and deploy generative AI and machine learning solutions that deliver measurable business outcomes. He brings deep expertise in Agenti

匹配字段正文

自执行破坏性操作。4月，搭载Claude的Cursor编程智能体被曝删除软件企业PocketOS的生产数据库及相关备份，造成客户业务混乱，数据随后得到恢复。 数据与访问凭证外泄也是一种风险。OpenAI于9月披露，多个智能体在协作制作工作簿时，因无法互相读取本地文件，擅自将文件上传至公共托管平台。另一起案例中，内部模型为获取其他团队的数学证明材料，将研究员的GitHub访问令牌写入公开仓库，并拆分令牌以躲避密钥扫描。 还有一些行为涉及造假、欺骗与规避监督。OpenAI披露，部分模型会在用于延续任务的摘要中留下指令，要求编造缺失数据或隐瞒错误。 提示注入及恶意指令传播，则是另一条风险路径。6月公开的GitInject研究验证，恶意代码提交或配置文件可能诱导智能体泄露凭证、操纵审查判断。OpenAI于9月披露的信息也显示，恶意指令可以诱使智能体将其复制到后续邮件、文件或代码注释中。 独立网络安全研究机构DARKNAVY的AI安全研究员李忠睿对澎湃新闻记者表示，这一轮智能体安全事件与过去的大模型安全问题最大的区别，是风险正在从“看错东西、说错话”转变为“做错事”。 “过去的大模型安全，主要是

匹配字段正文

ect the rules. Agents write and run their own code, and when one path is blocked they look for another. In one of NVIDIA's tests, an agent that wasn't allowed to push code through GitHub's API simply switched to git instead. We've now seen countless examples of this behavior. For now, safety can't live only inside the agent. It has to be built around it. That's the concept behind OpenShell (open source, Apache 2.0): - the agent runs in a Linux sandbox (Landlock + seccomp): no root, no direct net

匹配字段正文

Anthropic integrated Claude Managed Agents with OpenShell and BlueField. SpaceXAI uses it for Cursor coding agents and Grok models. Salesforce connected OpenShell to Slack for approving agent permission requests. SAP is embedding OpenShell in the Joule Studio runtime. Red Hat, SUSE and Canonical are integrating it into their operating systems. The effort feeds the Open Secure AI Alliance , governed by the Linux Foundation. OpenShell and its skills are available on GitHub and the OpenShell docs .

匹配字段正文

r Docker and Kubernetes, and trusted middleware for identity services. Next Steps Start the quickstart to run an agent with OpenShell and configure its service access. Explore the GitHub repository to examine the code and contribute. Join the CNCF Slack openshell-dev channel to ask questions and connect with other developers. Powered by NVIDIA Nemotron. AI-generated content may summarize information incompletely. Verify important information. Learn more AI agents can be given a goal, write code,

匹配字段正文

Stop building environment registries Every RL paper or framework uses its own way to find environments. Custom hubs, runtime registries, independent task datasets, or a GitHub list of tasks with a custom loader. This means that many of the published environments are siloed: if you publish an environment for one framework, users of the other three can’t load it. If you want to train on an environment from another framework or a new paper, you’ll need to port it by hand. We think this is the wrong

匹配字段正文

has its own leaderboard page: CWE-Bench-AA, DeepsecBench-AA, and CyberGym-E2E-AA; Stirrup, the open-source agent harness used for every Artificial Analysis Cyber Index task, is on GitHub Our development roadmap Security teams are already choosing models to support their defensive work, so we are launching the Artificial Analysis Cyber Index and the Cyber Index Alliance now, with three evaluations, rather than waiting to cover every capability. We will review the Index as models improve and add e

匹配字段正文

e state of the art for November. Claude still couldn’t really draw a bicycle! The GPT-5.1 bicycle frame is pretty crap too. Also in November, we had the first commit to an obscure GitHub repository called “Warelay”. We’ll come back to this repository shortly. And then there were the December holidays, and individual developers took some time off and many started tinkering with these new coding agent model combinations... and it began to dawn on us quite how much they could do that they couldn’t

匹配字段正文

needs no access to model internals. A Global Selection step picks the best video across all iterations, not simply the last one. Google built 3 new benchmarks. GenAD-Bench has 400 ad scenarios across 200 fictional products from 50 brands. HardContinuityBench stresses scene reappearances and prop state changes. LVBench-C has 120 scenarios where key assets vanish for at least 10 segments before returning. Sources: linked papers, project pages, and GitHub repositories. Verified September 27, 2026.

匹配字段正文

lse positives under our monitor’s scope of real-world harm. These involve: Attempting to tamper with a task’s scorer (9/10 and 6/10 suspicion); Attempting (and failing) to push to GitHub from a sandbox with no credentials (9/10 suspicion); Printing synthetic credentials given by the task into the transcript (10/10 and 9/10 suspicion) We also looked at the most concerning cases rated below our 3/10 threshold (i.e. presumed true negatives) by filtering to capable agents (opus-4.7 / gpt-5.4 and abo

匹配字段正文

。 04 没有「简单问题」 对大多数人来说，OpenAI的训练沙箱很遥远。但这几起事件真正指向的，是一个离每个人都很近的问题，你交给AI的那句话，到底授权了多少。 越来越多人把邮箱、网盘、代码仓库和API密钥交给各种智能体，然后说一句「帮我查一下」「帮我处理一下」。在OpenAI的实验室里，这句话之外还有监控系统、红队、值班的审核员。而在个人电脑和手机上，通常只有这句话本身。 对开发者来说还有一层更直接的风险。过去推到GitHub上的密钥，要等专门的扫描工具来捡；现在，任何一个在执行普通任务的智能体，都可能把它当成「公开可用的资源」顺手用掉。 当然，没有必要把这些读成末日预言。那个查博主的模型最终没有找到答案，它从外面拿回的，只是一句「巴黎」。 危险不在它拿到了什么，而在它愿意走多远。 本文为极客公园原创文章，转载请联系极客君微信geekparkGO 极客一问 已在虎嗅发表 1045 篇文章 本内容来源于网络 原文链接，观点仅代表作者本人，不代表虎嗅立场。 如涉及版权问题请联系 hezuo@huxiu.com，我们将及时核实并处理。正在改变与想要改变世界的人，都在 虎嗅APP[ ]]]

匹配字段正文

の利用状況の分析も行える。 Build plugins for Claude - Anthropic プラグインには、外部ツールやデータにつなぐMCPコネクター、作業手順などをまとめたAgent Skills、またはその両方を含められる。申請ポータルでは、単体のMCPコネクターならリモートMCPサーバーを指定し、MCPサーバーとスキルをまとめたプラグインならGitHubリポジトリを提出する。 申請時には自動検証と安全性スキャンが行われ、開発者は審査の進み具合や修正の提案を確認できる。承認後は自分で公開時期を決め、公開後には製品別・バージョン別のインストール数、掲載ページの閲覧数、どの検索から閲覧につながったかを把握できる。 今後数週間で、ClaudeとClaude Codeでプラグインを探す仕組みも統一する予定。既存のスキルやMCPコネクターは引き続きディレクトリに掲載され、掲載済みのスキル、コネクター、プラグインを変更する必要はないとしている。 SlackのClaude Tagが個人コネクターに対応 Anthropicは9月24日、SlackのチャンネルにClaudeを参加させるCl

匹配字段正文

思決定の背景を調べたり、部門をまたぐ検討事項や担当者、未解決の課題を整理したりする。 Codeで業務アプリを作成⁠、組織の管理下で実行 Codeは、作りたいアプリやダッシュボード、自動化の仕組みを自然言語で伝えると、Copilotが作成する機能。デスクトップに常駐するウィジェットから、チームで共有するクラウド上の社内アプリまでを想定する。AI開発支援ツールのGitHub Copilotと共通の基盤技術を使い、他の環境から隔離した実行環境（サンドボックス）で動作する。 作成したアプリの運用を支える仕組みとして、Microsoftは「Copilot Managed Runtime」のパブリックプレビューも開始した。組織専用のMicrosoft 365環境（テナント）内でコードを実行するための基盤で、Microsoftがホスティングを担い、IT部門がアプリを利用できる人や、接続できるデータ・サービス、運用状況を管理する。 この基盤では、CoworkやCode、Copilot Studioで作成したアプリを実行できる。Copilot StudioはAIエージェントや業務フローを作成・管理するツ

匹配字段正文

js, Next.js. Alex Atallah [00:35:02]: Okay. Anjney Midha [00:35:03]: And yeah, built Window AI on top of it. The creator of Plasmo, like started contributing code to Window AI, in GitHub, and that turned out to be Louis Vicchi Alex Atallah [00:35:15]: Oh, you’ Anjney Midha [00:35:15]: Who is the founder of OpenRouter. Alex Atallah [00:35:17]: That’s right. You have told me this is how you met Louis. Yes. Anjney Midha [00:35:19]: Yeah. Alex Atallah [00:35:19]: Okay. Anjney Midha [00:35:20]: So, t

匹配字段正文

l for video demos /𝚟𝚒𝚍𝚎𝚘-𝚍𝚎𝚖𝚘 [𝚍𝚎𝚜𝚌𝚛𝚒𝚙𝚝𝚒𝚘𝚗] It records a video demo of your web app with zoom-ins and voiceover. You can keep asking for changes until you're happy with the video. github.com/nilbuild/video… Here's a one-shot video it generated 👇 9:48 AM · Sep 19, 2026 · 25.4K Views 7 Replies · 14 Reposts · 231 Likes Counts After the leaderboard went live the counts stopped updating. I asked what was going on, and how this would cope if a lot of people voted. i am seeing "Counts unavailable. Retr

匹配字段正文

ummary and a follow-up question. The next step depends on the answer to the last one, so there's no way to lay out the process in advance. The same goes for a support email, a new GitHub issue, or any request where you know the domain but not the task. For those jobs, you want to describe the goal in plain language, give the agent access to what it needs, and let it work out the steps as it goes. Until now, taking on a job like that in n8n meant fitting an open-ended conversation into a workflow

匹配字段正文

control plane, and the subnets must be private. Install the Qumulo CSI driver using your preferred installation method. This example uses Helm: helm repo add qumulo https://qumulo.github.io/qumulo-csi-driver helm repo update helm install qumulo-csi qumulo/qumulo-csi-driver --namespace kube-system Verify the CSI driver pods are running before proceeding to mount: kubectl get pods -n kube-system -l app=qumulo-csi All pods should report STATUS=Running. If any pod shows Pending or CrashLoopBackOff,

匹配字段正文

rt of that circle and, like, make projects with it would, immediately get, go viral. so like Swyx [00:16:55]: And you didn’t know who they are, right? They’re just some name on a, GitHub or Hugging Face somewhere. Anastasis [00:16:59]: Exactly, yeah. So I remember one of the first big viral moments of creative AI was, there was the neural style transfer paper Swyx [00:17:09]: Huh Anastasis [00:17:09]: That Swyx [00:17:10]: Something dreaming? Anastasis [00:17:11]: I think it was called neural st

匹配字段正文

ったからです。 冒頭でも話したようにgrasysはエンジニアの裁量が大きいことが特徴で、その結果として一人ひとりが良いと思ったことは気軽に提案し、自分を含めたリーダーを交え、フラットに議論して検討できる環境があります。これは、私が入社した当時から変わらない雰囲気、もっと言えば、grasysのエンジニア文化と言えます。 話を戻して、現在の運用では、エンジニアがGitHubなどのリポジトリにコードをプッシュすると、Terrakube上で自動的にterraform planが走り、その実行計画の差分結果がレビュアーに通知されます。権限を持った承認者が確認し、承認（Approve）して初めてクラウドリソースに変更が適用される、という統制のとれたデプロイメントパイプラインが完成しています。 Policy as Codeで心理的安全性というエンジニアのガードレールを整備 ――承認フローをシステムに組み込んだことで、統制は取れるようになった反面、新たな課題などは生まれましたか？ 泉水: 課題というほどではないですが、承認フローの仕組み化と厳格化を進めた結果、「⁠承認者（承認権限を持つシニアエンジニア

匹配字段正文

to submit and get your plugin published in the Claude directory: Single MCP connector: point to your remote MCP server; Plugin bundle: combine MCP servers and skills, host them on GitHub, and submit the repo. In Claude Code, plugins can also include LSPs, commands, hooks, and agents Whichever path you choose, the portal will guide you from submission to launch. You can: Auto-validate your plugin. Each submission is checked and safety-scanned as soon as you submit, so you catch issues early; Revi

匹配字段正文