Your AI stack just got new landlords

Security Review Skills Your Agent Can Actually Run - Google shipped a modular, stack agnostic toolkit of security review skills for coding agents, so the thing writing your auth flow can also audit it. Point it at your repo this week and let it flag the injection and secrets handling your reviewer skims past. It is the rare skill pack from a team whose day job is being attacked at scale.

Turn Any Technical Book Into a Claude Skill - Feed it a PDF and it produces a ready to load Claude Code skill, so your agent studies the book you never finished.

Give Your Agent a Disposable Linux VM - Agents get a throwaway machine instead of your laptop, which is the correct answer to "should I let it run that command."

One Hub, Many Specialist Agents - Keeps specialists in a hub and spins up a temporary orchestrator per task, instead of one bloated agent that forgets its job.

Coding Tools for Any Agent, via MCP - Drops real code editing and navigation into whatever agent you are running, no bespoke harness required.

GLM-5.3 Puts Frontier Coding on a Cheaper Base - Z.ai claims a genuine coding leap from scaled post training rather than a bigger base model, and the 574 comment HN thread is mostly people checking whether the benchmarks survive contact with a real repo. If it holds, your coding spend has another serious bidder.

Qwen 3.8 27B Lands, and It Overthinks - Strong open weights you can actually self host, though Simon Willison found it burns tokens reasoning about trivial prompts.

DeepSeek V4 Pro Shows Up on OpenRouter - The price per token is the story, as usual, and it is worth a side by side on your own evals before you commit.

Gemini 3.7 Flash Goes for the Cheap and Fast Slot - Google's volume model gets another bump, which is the tier most production apps actually run on.

Grok 4.6 Arrives Right on Cue - Landing the same week SpaceX closed the Cursor deal is not a coincidence, and it tells you where that editor is heading.

Claude's Invisible Watermarks Get Specific - Anthropic detailed how SynthID style text watermarking will work to satisfy EU transparency rules, including what survives editing and how it treats code. If you ship AI written content or code, assume provenance is now detectable by default and plan your disclosure before a customer asks.

Meta Swings Back to Open Weights - Zuckerberg is attacking closed rivals again as Meta returns to open models. Signal: the free tier of capable weights is not going away, so self hosting stays a real option.

Google Lets You Turn the Visible Watermark Off - The badge on Gemini images and video can be toggled away, the invisible marker stays. Cosmetic freedom, not deniability.

Someone Is Stealing Reasoning Traces From LLM APIs - A demonstration that hidden reasoning can be extracted through the API surface. If your product's value is in the prompt chain, that is a leak path you have not modeled.

A Mac Screen Recorder Crossed $50k in Revenue - The builder published the receipts and the retrospective, and the copyable move is unglamorous: one narrow desktop tool, priced from day one, sold to people who already had the problem. No funnel gymnastics, just a paid product where free alternatives are annoying.

Three Years of No Sales, Then 500 in a Week - A founder who nearly quit describes what changed, starting with a first payment of 47 euros. Worth reading before you kill something at month eight.

5.2k Stars and 80k Downloads Turned Into a Job Exit - Open source as distribution, not charity. The thread walks through how the traction converted into income.

Hunting a 16-Year-Old SQLite Bug - Tailscale's writeup of tracking down a WAL reset bug that survived since 2010 is the best debugging read of the week, and a useful reminder that your agent cannot do this for you yet. Read it for the method, not the fix.

Claude's System Prompts, Published - Anthropic now publishes the system prompts in release notes. Free lesson in how a production prompt is structured, from people who tune it for a living.

Ten Weeks to Understanding Inference Serving - A 30 minutes a day roadmap through LLM inference and optimization, for when your infra bill stops being a rounding error.

Build a Nano Coding Agent From Zero - A stripped down agent harness built from scratch, the fastest way to stop treating your coding agent as magic.

The Code Reviewer That Runs Your Code - Ito executes the change instead of just reading the diff, which is the only way to catch the confident nonsense that type checks and still breaks. 446 upvotes, and the obvious next step for anyone whose AI reviewer keeps approving broken PRs.

Browser and Mobile Tests From Plain English - Kane CLI turns a sentence into a runnable end to end test from your terminal.

A Receipt for Every LLM API Call - Inferock Bench independently verifies what you were served and charged for, useful the day your bill stops matching your logs.

Spotify Open Sourced Its Agentic Dev Environment - Xirp is what a large engineering org built for itself, which makes the defaults worth stealing.

One Interface Over Every Agent Harness - HarnessRouter's community edition abstracts the harness layer, which is timely given who owns what this week.

Is AI Removing the Middle Class of Software Engineering? - 935 comments on the argument that juniors and mid levels are getting squeezed while seniors get leverage. The disagreement is the useful part: half the thread says the ladder is broken, the other half says the ladder always looked broken from the bottom rung.

Why Does Opus 5 Feel Worse to Work With? - 860 comments arguing over whether models degrade or expectations inflate. Nobody has receipts, which is itself the lesson about running your own evals.

An Intern Replaced Two Months of Backend in an Afternoon - The demo worked. The comments are about everything that happens after the demo.

The Web's Collective Memory Is Disappearing - As AI answers replace clicks, the incentive to publish erodes. Relevant if your distribution depends on search.

A Company Copied Their Code After Refusing to License It - How they proved it, and what recourse actually exists for a solo dev.

YC May Have Already Peaked - A data driven argument that the accelerator's outcomes are flattening. Whether or not you buy it, the underlying shift is real: batch size went up, the AI wrapper density went up, and the signal a YC logo sends to your customers is worth less than it was three years ago.

Kog Is Squeezing More Inference Out of the Same GPUs - Every efficiency layer between you and the metal eventually shows up as a lower per token price.

Anthropic's CEO Calls the Backlash a Crisis of Trust - Trust is becoming a product requirement, not a comms problem. Price that into what you ship.

An Agent That Builds Real Apps in a Sandbox - Self hosted, open source app builder where the agent works in an isolated environment instead of your machine. This is the shape most "AI builds your app" products should have had from the start, and you can run it on your own box tonight.

The SQLite of Agent Sandboxes - E2B compatible sandboxing that runs on one machine, no cluster required.

See What Your Apple Silicon Is Actually Doing - Sudoless system monitor with ANE and Media Engine visibility, handy when local inference gets slow and you cannot tell why.

A Terminal Workbench in Pure Rust - Shells, persistent sessions, SSH, and coding agents in one place, which is roughly what everyone keeps rebuilding badly with tmux.

A Spec for Websites in the Agent Era - HTML, accessibility, security, SEO, and agent readiness in one checklist worth running your marketing site through.

Every AI Security Tool, Catalogued - Research and commercial tooling for testing AI systems, a good map before you pick one.