coding agents

GitHub says it discovered 24 vulnerabilities in Android using its open-source AI security agent, describing it as automated vulnerability discovery at scale on real production software. The company published details in a blog post, and the report is drawing attention as a notable demonstration of AI agents doing practical security research on widely used code.

GitHub says its AI agent identified 24 vulnerabilities in Android applications, adding to growing evidence that autonomous coding assistants can take on security research tasks. The finding, reported by Help Net Security, highlights both the potential of AI-driven bug hunting and the questions it raises about verifying machine-discovered flaws. Security teams are watching closely as AI agents move into vulnerability discovery.

Google Research has open-sourced RRSI, a framework allowing AI agents to refine their own evaluation harness while guarding against overfitting. Announced via MarkTechPost, the release lets developers inspect and build on the underlying code. The announcement is drawing attention from AI practitioners interested in agent self-improvement methods that remain reliable rather than gaming their own benchmarks.

JetBrains has introduced Air, described by the company as a system of products built around agentic software development, where AI agents take on coding tasks alongside developers. The announcement is drawing attention from developers debating what it means for the future of IDEs and how JetBrains plans to compete in the fast-moving market for AI-assisted programming tools.

GitHub researchers report that an open source AI security agent they built uncovered 24 vulnerabilities in Android. The company says the tool was used to scan Android code at scale, flagging security flaws automatically. The disclosure highlights a growing trend of using AI agents to find real bugs in widely used software, and the work is being discussed as an example of AI-assisted security research.

Developer Dietrich Gebert has released Ponytail, an open-source JavaScript tool described as making AI coding agents think like 'the laziest senior dev in the room'. Its philosophy: the best code is code you never write, pushing agents toward minimal changes instead of over-engineering. The project is drawing attention among developers experimenting with AI pair-programming workflows.

Engineering teams using AI coding agents are finding that continuous integration pipelines have become their biggest constraint, according to a report circulating among developers. As agents generate far more code and commits than human programmers, test suites and CI infrastructure struggle to keep up, forcing teams to rethink how they validate machine-written code at scale.

Developers working with AI agents are separating an agent's decision-making logic from the component that generates code or text, a pattern being discussed under the name Jev. The split lets a reasoning model plan while a writing model executes, and people in the field are debating whether this two-brain architecture improves reliability or just adds complexity to agent workflows.

Anthropic has introduced new modding features for Claude Code, its AI coding tool, letting developers customize how the agent behaves in their workflows. The update gives users more control over the assistant's configuration and output. Developers are discussing how the change could make AI coding assistants more adaptable to individual projects and team preferences.

A developer known as mksglu has released context-mode, an open-source TypeScript tool for optimizing how AI coding agents use their context windows. It claims to sandbox tool output with a 98 percent reduction, persist session memory, and enforce routing across 17 platforms through MCP and hooks. The project is drawing attention from developers tracking agent efficiency tooling.

Developer Paul Bakaus has released 'Impeccable', an open-source project described as a design language that helps AI coding tools produce better visual and interface design. Written in JavaScript, the project provides guidance that an AI harness can follow when generating designs. It is drawing attention among developers experimenting with AI-assisted coding workflows.

Earendil Works has released pi, an open-source AI agent toolkit written in TypeScript. The project offers a unified API for large language models, a ready-made agent loop, a terminal user interface, and a command-line coding agent. It is trending on GitHub, drawing attention from developers building their own AI agents and coding assistants.

A developer has released Corral, an open-source tool designed to kill every command started by an AI coding agent, giving users a way to contain runaway processes. The project was shared on Hacker News and drew early attention from the community. Discussion is focused on controlling what autonomous agents are allowed to execute on a machine.

A widely watched tech commentary item examines GitHub's most-starred repositories, arguing that repo fame now translates into real traffic, career visibility and adoption for developer tools, with AI coding agents increasingly driving which projects rise. Viewers are debating whether star counts still measure quality or are being inflated by agent-driven activity and trend-chasing.

A developer has released an Agent Development Environment (ADE) with a built-in orchestrator designed to work alongside coding agents. The tool, available at cezar.run, aims to give developers a dedicated environment for running and coordinating AI coding assistants. Discussion is drawing interest from developers tracking how tooling around coding agents is maturing beyond simple editors and plugins.

The MLC team has published TIRx Harness, an open-source compiler harness designed for agentic GPU programming, letting AI agents generate and test GPU kernel code through a structured compiler interface. The announcement is drawing attention from developers interested in combining large language models with low-level GPU code generation and performance tuning.

A developer has built what they describe as a company of bots, arguing that most AI agent demos rely on a single clever prompt. Instead of a one-off demo, the project organizes multiple agents in a structured way, using Python and open source tools, and shares the work with the inclusive coding community.

OpenAI's Codex Cloud is in the spotlight as a cloud-based coding agent that can work on software tasks in parallel from OpenAI's servers. Developers are discussing how it integrates with their workflows, its usefulness for automating coding work, and how it compares with rival AI coding tools.

OpenAI has updated its Codex coding agent with reusable cloud environments that follow developers across devices, according to SiliconANGLE. The feature lets workspaces persist between sessions and machines, so developers can pick up projects without reconfiguring setups. It is being discussed as part of OpenAI's broader push to make its developer tools more practical for ongoing software work.

A developer has shared an open-source project on Hacker News that provides model routing for coding agents, claiming it reaches Astra-level performance. The tool routes requests between AI models to balance quality and cost for coding tasks. It is being showcased to the developer community, where feedback on the benchmark claims is likely to follow.

Legit Security has announced an AI agent that automatically fixes vulnerabilities in open-source dependencies. The tool is designed to detect problematic packages in software projects and patch them without manual intervention. The announcement is circulating among developers and security practitioners, who are weighing the promise of automated dependency remediation against concerns about trusting AI agents to modify production code.

Software testers are discussing a workflow where an AI agent runs plain-language test cases in a headless browser, using self-healing to keep scripts working as applications change, while only scenarios worth keeping long-term get promoted into maintained code. Supporters say it cuts maintenance burden on QA teams; others caution that AI-run tests still need human review before being trusted in release pipelines.

DeepKeep has announced AI Lens, a product providing guardrails for AI coding agents, aimed at monitoring and controlling what agentic tools do when writing code. The news is circulating among developers and AI safety watchers interested in securing autonomous coding workflows. Details beyond the announcement, such as pricing and adoption, are limited so far.