Eric Michaud at Easy Machine AI released 'Pimp My Vault', a free prompt pack that turns a single visual reference into a coordinated Obsidian theme and matching custom dashboard skin. The workflow use…
GitHub's open-source Spec Kit turns specifications into executable source-of-truth documents for AI coding agents, enforcing a four-phase loop of constitution, specification, planning, and implementat…
Shell history and AI coding assistant transcripts are a major source of leaked credentials, according to developer Panayotis Vrypanis, who created shg (the shell guard) v0.2.6 to scan shell/REPL histo…
A developer released a high-performance hook tool called dcg that blocks dangerous Git and shell commands from being executed by AI coding agents, protecting against accidental data loss from commands…
A developer created PerformanceAgent, an open-source AI strength and conditioning coach that runs inside AI agent CLIs like Claude Code. The tool uses a deterministic Python engine for calculations an…
Developer Dan published a critical review of Overplane, an AI coding harness that uses LLMs and SMT solvers to generate verified code from Markdown specs. Dan argues the tool is redundant for experien…
Alibaba Group launched OpenSandbox, an open-source universal sandbox infrastructure for AI applications, providing isolated environments for running code, browsers, and developer tools. The platform s…
A developer is building Kitbash, an open standard for portable AI skills that works across multiple AI coding assistants. The project aims to solve the problem of having to rewrite and maintain skills…
JetBrains launched AI for Teams and Organizations on July 7, 2026, a governance and management layer that provides visibility, cost tracking, and policy enforcement for AI coding tools like Claude Cod…
Google's May 19, 2026 announcement of Antigravity CLI as the successor to Gemini CLI, followed by a June 18 cutoff of free individual access, has raised adoption concerns, but Gemini CLI's existing co…
A security researcher disclosed a pull-based prompt-injection attack called HalluSquatting that targets coding assistants and agentic tools including Cursor, Gemini CLI, Windsurf, and GitHub Copilot. …
A developer created web-reverse-engineer, a portable SKILL.md workflow that extracts design and motion principles from running web pages to guide AI coding agents. The tool captures runtime behavior l…
Researchers reported in July 2026 that nine widely used AI coding tools, including Cursor, GitHub Copilot, Gemini CLI, and Windsurf, share a common failure mode called HalluSquatting. Attackers exploi…
A developer built SkillSpector Report, an open-source Python CLI that converts NVIDIA SkillSpector security scan output into PDF reports for easier sharing and review. The tool addresses the need for …
Dreamer, a new open-source tool, mines coding-agent session history to identify recurring corrections and proposes updates to context files like AGENTS.md or CLAUDE.md, requiring user approval before …
A developer released gui-tool, a zero-dependency Rust CLI for desktop GUI automation that uses a labeled grid overlay to let AI agents click on any screen element by naming a cell, bypassing pixel coo…
Researchers have devised a new prompt-injection attack called HalluSquatting that exploits AI coding assistants' tendency to hallucinate resource identifiers, enabling the assembly of massive botnets …
Researchers introduced agent data injection attacks (ADI), a new category of indirect prompt injection that disguises malicious data as trusted data to trick AI agents into executing unintended action…
Google shut down Gemini CLI on June 18, 2026, replacing it with Antigravity CLI, causing individual-tier users to receive HTTP 410 errors and breaking scripts, CI pipelines, and automation. Enterprise…
Tokdash, a local dashboard for tracking AI token usage and costs across coding tools like Claude Code and Gemini CLI, launched with performance improvements of up to 30x over previous versions. The op…