vibehacker
News
GitHub / OpenAI ·

Codex CLI 0.162.0-alpha.12: tools stay visible when envs fail; MCP approval routing

OpenAI’s Oct 4 prerelease keeps command/patch tools advertised when execution environments are starting or failed (model told to wait), tightens MCP approval routing so unrelated threads can’t surface prompts, and hardens Windows socket ACLs plus managed-daemon install retries. Pin @openai/[email protected]; npm latest is still 0.160.0.

More news

View all

NVIDIA SkillSpector: scan agent skills for 71 vuln patterns before install

NVIDIA’s Apache 2.0 SkillSpector checks Claude Code, Codex, and Gemini skills (plus MCP) for prompt injection, exfil, supply chain, and tool poisoning risks—71 patterns across 17 categories, with optional LLM analysis and an MCP scan skill install gate. A 31k skill study found 26.1% vulnerable; install via uv tool install 'skillspector[mcp] @ git+https://github.com/NVIDIA/skillspector.git'…

NVIDIA / GitHub

Baseten: Claude Code vibe-built VibeQwen beats vLLM by up to 90%

Baseten used Claude Code (Fable 5) plus MetaInfer skills to vibe build VibeQwen—a Qwen 3.6 35B A3B NVFP4 engine on one B200 that beat tuned vLLM 0.25.1 by up to 90% single stream decode (1,792 vs 943 TPS) and cut TTFT 28→12ms; a follow on SAM 3.1 server gained 50% throughput. Experimental only—not serving production yet…

Baseten

Spotted something we missed? Start a thread.