Garuda / Madhusudhan Vasanth Kumar · Oct 13, 2026 · 2:25 AM

Garuda: open-source coding agent with an OS sandbox (Seatbelt / bubblewrap)

Madhusudhan Vasanth Kumar’s Apache-2.0 terminal, VS Code, and Zed agent runs commands in Seatbelt (macOS) or bubblewrap (Linux) so they write only in the project, temp folders, and package caches, with home secrets unreadable and no network by default; edits show a diff first, and a hash-chained audit log records every permission decision. Install with npm install -g @garuda-agent/garuda; it works with Claude, OpenRouter, and local OpenAI-compatible models.

Read at madhu-sv.github.io

More news

View all

OpenCode 2.0 ships: one shared background service, Code Mode for MCP, and background subagents

TUI, web, and desktop now talk to a single local background service, every MCP server is wrapped as script functions in Code Mode so the agent can chain tool calls in one round trip, and subagents and shell commands can run in the background. Upgrade with opencode upgrade major from the latest 1.x; 1.0 plugins and the old server API no longer work…

Anomaly 34 minutes ago

Repeat-After-Me: six agent frameworks run attacker tool calls the model only echoed

Penn State, Montpellier, and Dartmouth showed LangGraph, AutoGen, Google ADK 2.0, AWS Strands, Microsoft Agent Framework, and CrewAI will execute a structured tool call if the model is prompted to echo it—even when the model later refuses. Their ToFu fuzzer also confirmed 253 bugs across 118 open source MCP servers, including 64 path traversal and three command injection flaws…

CSO Online 3 hours ago

ProgramGym: 1,648 training envs for agents that rebuild programs from scratch

Xiamen University et al. open ProgramGym: 1,648 verifiable C/C++/Go/Rust environments built from GitHub repos for agents that rebuild programs from black box behavior, plus a role isolated Program Agent harness. Fine tuning Qwen3.8 27B on its trajectories raised ProgramBench from 34.87% to 42.84%; with Program Agent the SFT model hit 56.25%…

arXiv 3 hours ago

CVE-2026-108953: mac-shell-mcp whitelist bypassed with shell metacharacters before 2.0.0

NVD published CVE 2026 108953 on Oct 12 for cfdude's mac shell mcp: before 2.0.0, clients (or malicious prompts) can call a whitelisted command like pwd with a semicolon in the arguments and run forbidden shell as the server user without approval. Upgrade to 2.0.0 or later…

NVD 4 hours ago

Codex GitHub code review is GA: @codex review, auto reviews, and Security Review

After you connect a GitHub repo and enable code review, comment @codex review (or turn on Automatic review) and Codex posts a P0/P1 review that follows AGENTS.md Code Review Rules; research preview Security Review uses @codex security review . You can then ask @codex fix the P1 issue to push a follow up fix to the branch when it has permission…

OpenAI / ChatGPT Learn 5 hours ago

Spotted something we missed? Start a thread.