coding agents

GitHub says it discovered 24 vulnerabilities in Android using its open-source AI security agent, describing it as automated vulnerability discovery at scale on real production software. The company published details in a blog post, and the report is drawing attention as a notable demonstration of AI agents doing practical security research on widely used code.

GitHub says its AI agent identified 24 vulnerabilities in Android applications, adding to growing evidence that autonomous coding assistants can take on security research tasks. The finding, reported by Help Net Security, highlights both the potential of AI-driven bug hunting and the questions it raises about verifying machine-discovered flaws. Security teams are watching closely as AI agents move into vulnerability discovery.

Google Research has open-sourced RRSI, a framework allowing AI agents to refine their own evaluation harness while guarding against overfitting. Announced via MarkTechPost, the release lets developers inspect and build on the underlying code. The announcement is drawing attention from AI practitioners interested in agent self-improvement methods that remain reliable rather than gaming their own benchmarks.

JetBrains has introduced Air, described by the company as a system of products built around agentic software development, where AI agents take on coding tasks alongside developers. The announcement is drawing attention from developers debating what it means for the future of IDEs and how JetBrains plans to compete in the fast-moving market for AI-assisted programming tools.

GitHub researchers report that an open source AI security agent they built uncovered 24 vulnerabilities in Android. The company says the tool was used to scan Android code at scale, flagging security flaws automatically. The disclosure highlights a growing trend of using AI agents to find real bugs in widely used software, and the work is being discussed as an example of AI-assisted security research.

Engineering teams using AI coding agents are finding that continuous integration pipelines have become their biggest constraint, according to a report circulating among developers. As agents generate far more code and commits than human programmers, test suites and CI infrastructure struggle to keep up, forcing teams to rethink how they validate machine-written code at scale.

Developers working with AI agents are separating an agent's decision-making logic from the component that generates code or text, a pattern being discussed under the name Jev. The split lets a reasoning model plan while a writing model executes, and people in the field are debating whether this two-brain architecture improves reliability or just adds complexity to agent workflows.

A JavaScript project called Ponytail by developer Dietrich Gebert is circulating among coders. It is designed to make AI coding agents behave like 'the laziest senior dev in the room', pushing them to write as little code as possible. The pitch is that the best code is the code you never wrote, a philosophy that is drawing attention and engagement from developers tracking new AI coding tools.

Developer JuliusBrussee has released an open-source project called caveman, a skill and proxy for coding agents written in Go. It prompts AI coding assistants to write in a stripped-down, 'caveman' style, which the project says cuts token consumption by around 65 percent while keeping the code output intact. The project is drawing attention among developers looking to reduce costs on popular coding agents.

A developer has released an open-source tool that routes requests between AI models for coding agents, claiming performance on par with Astra-level systems. The launch invites developers to test whether smart routing across cheaper models can match premium single-model results. Early discussion centers on benchmarks, reliability, and whether routing adds real gains for coding workflows.

Anthropic has introduced new modding features for Claude Code, its AI coding tool, letting developers customize how the agent behaves in their workflows. The update gives users more control over the assistant's configuration and output. Developers are discussing how the change could make AI coding assistants more adaptable to individual projects and team preferences.

A discussion thread on Hacker News asks whether developers are actually producing good code with AI coding agents. The question invites engineers to share firsthand experiences on whether these tools deliver production-quality results or mostly generate code that needs heavy review and rework.

Developer Cezar, known as cezar.run, has released an Agent Development Environment (ADE) together with an orchestrator designed to work alongside coding agents. The tool bundles an environment for building and running agents with a layer that coordinates multiple coding agents. Discussion is centred on developers evaluating whether this setup improves how they run and manage AI coding agents day to day.

A developer has released Corral, an open-source tool shared on Hacker News that can kill every command started by an AI coding agent. The tool is aimed at giving users a way to stop runaway processes or unwanted commands launched by autonomous agents. It is available on GitHub, and early engagement on Hacker News suggests interest in agent safety and control tooling.

A new essay examines the leading tools and approaches in agentic coding, where AI agents autonomously write and manage code. It lays out four dominant players or paradigms shaping this fast-moving field and weighs their strengths and drawbacks. Developer interest in AI-driven coding workflows remains intense, and pieces that compare the main contenders are drawing close attention.

A new open-source project called Graphene has been released, offering a data analysis toolkit designed to work with AI coding agents such as coding assistants that write and run code. The toolkit is available on GitHub, where developers can try it and contribute. Early reactions on Hacker News are modest but curious, with the community discussing whether agent-focused data tools will become a standard part of developer workflows.

A widely watched tech commentary item examines GitHub's most-starred repositories, arguing that repo fame now translates into real traffic, career visibility and adoption for developer tools, with AI coding agents increasingly driving which projects rise. Viewers are debating whether star counts still measure quality or are being inflated by agent-driven activity and trend-chasing.

The MLC team has introduced TIRx Harness, an open compiler harness aimed at agentic GPU programming, allowing AI agents to write and optimize GPU code through a compiler-driven workflow. The announcement, published on the MLC blog, is drawing attention from developers interested in combining large language model agents with low-level performance engineering and GPU kernel development.

A widely shared essay argues that in the era of AI agents, the harness—the scaffolding of tools, prompts, evaluation and workflow code wrapped around a model—is where a company's actual value sits, not the underlying model itself. As models become commoditised and interchangeable, the author contends the harness is the durable product, and effectively the company's true identity.

oh-my-agent (OMA), an open-source AI agent tool, now reruns a configured test script whenever an active workflow attempts to stop, returning details on what failed when its test gate blocks completion. The feature targets developers using AI coding agents, aiming to prevent unfinished or broken changes from slipping through by forcing automated checks before a workflow ends.

A developer newly active in technical writing has raised concerns about security gaps in AI development workflows, arguing that teams are increasingly handing control to autonomous coding agents such as Claude without adequate safeguards. The post argues agent security is a critical blind spot as autonomous tools gain access to codebases, credentials and infrastructure. Other developers are engaging with the warning as adoption of AI coding assistants accelerates.