Your agent's attack surface is other people's MCP servers — and someone finally shipped a scanner for it.
Top Signal
Tencent open-sources a red-team scanner for MCP servers and agent skills
new tool
GitHub Trending
AI-Infra-Guard is an Apache-licensed red-teaming platform that scans the parts of an agent stack nobody audits: MCP servers, agent skill files, serving infrastructure, and jailbreak resistance. Most teams install MCP servers and skills the way they once installed npm packages — by pasting a config out of a README — and this week's pattern (Copilot's autofix as an exploit path, take-home tests as a malware channel) shows that is exactly where attackers are aiming. The useful thing here is that it's a scanner you can run against your own config today, not another threat model to worry about. Point it at your MCP server list and skills directory before the next deploy, then wire the scan into CI so a new server can't land unreviewed. Even if you skip the platform, its scan categories are a usable checklist of the agent attack surface you currently aren't covering.
Read more →
Fast Signals
Qwen3.8-27B: low/medium thinking beats high for agentic coding
workflow
r/LocalLLaMA
Three independent r/LocalLLaMA reports landed today: Q6 is strong for agentic coding, Low and Medium reasoning effort outperform High (which spirals), and Q3_XXS holds up on a 16GB 4060 Ti. This is the third angle on the same 'it overthinks' finding from earlier this week, now with a concrete fix. If output quality is bad, drop the effort tier before you drop the quant.
Link →
DeepSeek ships its own agent harness at v0.1.1
new tool
r/LocalLLaMA
DeepSeek released Harness v0.1.1, following its ecosystem index earlier this month — the model authors' own opinion of what the tool-calling loop should look like for V4. Worth reading as a reference implementation even if you stay on your current framework, since harness assumptions are where local models usually break.
Link →
DeepSeek-V4-Flash gets an experimental vision variant
new tool
r/LocalLLaMA
V4-Flash-Vision-Exp puts multimodal input on the Flash-speed model people were already running at ~100 tok/s prompt processing on 4x 3060. If you're paying per-image API rates for screenshot parsing, document extraction, or UI agents, this is the first local candidate worth benchmarking against that bill. Experimental tag means expect rough edges in serving support.
Link →
Ptacek: stop building TUIs, agents made real GUIs cheap
workflow
Simon Willison
The argument is that terminal UIs for personal and internal tools are now a habit rather than a cost constraint, because a coding agent will produce a usable native interface in the time you'd spend fighting a TUI layout library. Concrete move: on your next internal tool, ask for the desktop UI first and see what you get.
Link →
OpenAI's Python SDK dropped httpx and broke downstream installs
platform change
Simon Willison
Fresh installs of Simon Willison's LLM started failing because it relied on httpx transitively through the openai library, which stopped shipping it; 0.32.1 fixes it by declaring the dependency. Audit your own requirements for libraries you import but never declared — the openai SDK's dependency tree just proved it isn't a stable base. Separately, llm-openrouter 0.7 now handles reasoning-effort control properly on LLM 0.32.
Link →
FireRedTeam drops FireRedAudio and FireRedTTS3 open weights
new tool
r/LocalLLaMA
New open audio and TTS models on Hugging Face from a team that isn't in the usual Western newsletter rotation. Open TTS is one of the few categories where the local option now genuinely competes on quality with hosted APIs, so this is a direct swap candidate for voice features currently on ElevenLabs-class pricing.
Link →
Simulation as the next scaling law — Joon Sung Park on Latent Space
research to practice
Latent Space
The generative-agents author is now building simulated populations at Simile, framing simulation rather than parameters as the axis that scales next. For builders the near-term use is evaluation: run a product change against synthetic users before real ones, especially where you can't A/B fast enough. Bookmark for when your eval set stops predicting real behavior.
Link →
Radar
agent-substrate/substrate: an agent runtime, not a framework
Apache-2.0 project from Googlers, explicitly labeled not an official Google product, trending on GitHub today. The framing — a substrate agents run on rather than a library you import — is a different bet from LangGraph-style orchestration and worth tracking early.
Link →
Claudette/nobuzz: kill the BuzzFeed voice in Claude output
A single-dev repo of style rules that suppress LLM-ese in generated prose, at 173 points on HN. If you ship any LLM-written text, the anti-pattern list is worth stealing into your own system prompt even if you never install it.
Link →
Felony Bench tops HN with 457 points
A new public eval doing the rounds today; the site is the primary source and the write-up is thin, so read it before citing it. Relevant if you ship agents with real-world side effects and need an off-the-shelf test for criminal-conduct scenarios.
Link →
Abandoned ENUM zones logged calls to military bases
A researcher claimed unmaintained e164.arpa delegations and passively collected hundreds of thousands of call lookups. The transferable lesson: dead delegations in old standards are still live infrastructure, and the same applies to any DNS or webhook endpoint your stack inherited.
Link →
ChatGPT search now fans out site: queries at scale
Promptwatch data shows ChatGPT issuing site:-scoped searches broadly, which changes how your docs and product pages get retrieved rather than ranked. If any of your acquisition runs through chatbot answers, per-domain crawlability just became the lever.
Link →
Convergence Watch
qwen3.8
TRENDING
3 mentions across r/LocalLLaMA
Present six of the last seven days, but today all three mentions came from one source, so this is depth rather than breadth. The conversation has shifted from 'is it good' to tuning specifics — effort tier, temperature, quant floor — which is what adoption looks like. Treat the config advice as settled enough to apply.
deepseek v4
TRENDING
2 mentions across r/LocalLLaMA
Fourth appearance in a week, and today's two items are a vision variant plus an official harness on the same day. DeepSeek is building the surrounding tooling, not just shipping weights — that usually precedes a jump in real deployments.
reasoning effort control
TRENDING
4 mentions across Simon Willison, r/LocalLLaMA
Two independent sources today: llm-openrouter 0.7 exposing reasoning effort over OpenRouter, and three Qwen threads finding low/medium beats high. Effort level is becoming a first-class knob alongside temperature and quant. If your inference wrapper doesn't expose it per-call, that's now a real gap.