iCreatAI News
Back to main site
Skip to content
#GitHub
TodayNov 16Mon1 updates
  1. Hacker News AI58

    Groma.md: Stay in control of your architecture as AI agents write code

    groma.md is a free, MIT-licensed tool that scans a repository into a live C4 architecture map stored as Open Knowledge Format Markdown in Git, updating as files are saved and keeping curation across later scans. It runs locally with no account or backend, uses deterministic code analysis, calls no AI service, and can be used entirely without AI; coding agents can curate the map via the same CLI. Architecture changes are reviewed in the same pull request as the code, and an optional GitHub Action comments on PRs with change counts and a before-and-after map.

Nov 15Sun
  1. Hacker News AI58

    Show HN: db-branch – database branches in seconds for AI agents and CI, via ZFS

    db-branch is a self-hosted, Apache-2.0 tool that creates copy-on-write branches of MySQL and PostgreSQL databases in seconds using ZFS clones, with nothing copied at creation. It offers a CLI, REST API, web console and MCP server, plus branch reset, TTL expiry, checkpoints and per-branch version upgrades, and is currently in Beta. It targets AI agent sandboxes, a database per pull request in CI, and version-upgrade checks.

  2. Hacker News AI58

    Skills for Real Scientists – Steer Away AI Slop

    This repo adds six agent skills for running reproducible scientific experiments with coding agents, built on Matt Pocock's engineering skills: instead of planning a whole route up front, it plans one "probe" at a time, records the expected result before each run, and chooses the next probe from the evidence. Every run leaves a Git-tracked lab notebook and rerunnable files in a .science/ folder, and probe work reaches the main codebase only through /promote. The skills are setup-science, experiment, promote, lab-notebook, desk-research and ask-science, installed via a prompt that also installs Matt Pocock's skills if missing.

  3. Hacker News AI38

    Multi-agent AI (LangGraph) to audit AI papers for reproducibility

    PaperPulse is a browser-integrated, multi-agent AI system that audits scientific papers, news articles, and web content for methodological rigor, statistical validity, and code-to-paper alignment. It uses a LangGraph orchestrator with four agents—a universal extractor, a GitHub/code grounder, a statistical critic, and a citation-grounded synthesizer—to cross-reference claims, search GitHub for official repositories, and flag reproducibility gaps with exact citations, returning a structured JSON report rendered as Markdown in a Chrome extension.

Nov 14Sat
  1. Hacker News AI40

    Show HN: SunsetLint – find retiring AI model IDs in your GitHub repos

    SunsetLint is a GitHub App that scans repositories for AI model identifiers with announced shutdown dates and reports each match with its file, line, shutdown date and the provider's recommended replacement. It installs with read-only contents access, posts one rolling issue per repository, and offers a Pro pull-request Check Run that flags newly added references to retiring identifiers. It does not edit code or open pull requests, does not guarantee complete coverage, and does not support GitLab or Bitbucket.

  2. The Decoder65

    Runway's open-source Praxis-1 turns video AI into a robot controller

    Runway has released Praxis-1, a World Action Model that takes camera images, text instructions and robot position data to predict scene changes and derive robot movements, with weights and code under the Apache 2.0 license. Built on a video model fine-tuned with human action videos and robot data, it scored 46.2 percent on Nvidia's RoboLab-120 leaderboard, ahead of FLUX 3 Action at 42.9 percent, though Runway ran the tests itself and they have not been independently verified. The model still needs specialized robot data for adaptation, sometimes confuses similar-looking objects, and cannot reliably plan complex action sequences on its own.

  3. Hacker News AI60

    Skills that stop AI coding agents from touching production

    A plugin called simba-skills offers six Claude Code skills for people running Docker, Postgres and a VPS on the same machine as their AI agent, aimed at preventing test runs, repro loops or deploys from hitting live data. Skills include production-safe-loops (automatic), lint-project-skills, report-skill-failure, safe-deploy, server-maintenance and audit-claude-settings, with deploy, delete and settings-changing skills requiring manual invocation. The repo includes an eval suite (Claude Code 2.1.323, November 2026) and is MIT licensed.

  4. Codex Releases12

    0.171.0-alpha.4

    This page is a GitHub Changelog entry titled "0.171.0-alpha.4," but the supplied material contains only site navigation and product menu text, with no details about the release itself.

Nov 13Fri
  1. Codex Releases22

    0.169.0

    Codex 0.169.0 adds multiple side-chat tabs in the opt-in terminal workspace, task history search from the agent command center, collapsible turn details in the full-screen transcript, and custom model provider editing from the terminal. It also adds Ctrl+S local diagnostic ZIP saves, opt-in Cloud connection features on macOS and Linux, and fixes including explicit project trust for non-interactive runs and Windows sandbox handling for quoted cmd.exe paths.

  2. Codex Releases10

    0.171.0-alpha.2

    This GitHub Changelog entry is titled "0.171.0-alpha.2" and lists navigation links to GitHub products and services, including Copilot, Actions, Codespaces, Advanced Security, and pricing. The supplied material contains no details about what changed in this version.

  3. GitHub Blog · AI & ML58

    Build once, run on any agent: A practical guide to agent skills

    GitHub's guide explains agent skills as versioned directories centered on a SKILL.md file that capture repeatable task instructions shareable across agents, while the environment still supplies tools, credentials, and permissions. Using examples like Proof Agent for adversarial verification and Data Forge for a multi-skill data pipeline, it recommends keeping project configuration in a manifest, sharing execution paths between skills, and placing human checkpoints and CI checks in workflows. It also covers packaging skills for clients such as Claude Code, Cursor, and GitHub Copilot, and notes that applications suit workflows needing stable interfaces, shared state, audit trails, or permissions enforced outside the model.

  4. Codex Releases12

    0.170.0-alpha.4

    This entry is a GitHub Changelog page for version 0.170.0-alpha.4, but the supplied material contains only site navigation and product menu text, with no release notes or details about the version itself.

  5. Hacker News AI58

    How much of GitHub's most-starred AI tooling is written by coding agents?

    An analysis of 324,088 commits across 52 of GitHub's most-starred AI-tooling repositories found that the median repo had 16.9% AI-signed commits in its last 180 days of activity, with 21 of 52 at 25% or more, and that AI share showed no detectable link to stars (Spearman ρ = -0.05, p = 0.72). At day 180, these repos labeled 2.0 times as many commits as fixes (34.1% vs 17.3%), had lower churn (1.92x vs 3.77x) and kept more written code (67.1% vs 41.7%) than 12 pre-Copilot projects, but the gaps are concentrated in the 31 projects started in 2025 or later, so the sample cannot separate AI use from recency. Of 24 repos publishing a benchmark harness with committed results, 15 measure whether the tool does its job, and several publish numbers that went against them.

Nov 12Thu
  1. Hacker News AI38

    Did it use REA? Checking viral AI reverse-engineering demos

    A verification page checks 39 cases described as "built with REA" against each project's README, agent files, author posts or official showcase, finding 26 confirmed, 3 partial, 4 unverified and 6 not REA (mostly Claude Code or Codex with Ghidra or IDA, or manual work). The README column was re-checked on 2026-11-10 with no changes, and X posts could not be opened from the authors' environment. It notes that two small controlled comparisons, rea-lab (482 preregistered runs) and leanrea (36 runs), found no significant gain in solve rate from REA at higher time and cost.

  2. Hacker News AI60

    Show HN: A free course from engineer to AI engineer, one Git tag per episode

    A free YouTube-based course, "From engineer to AI engineer," teaches experienced software engineers with no generative-AI background to build a retrieval-augmented generation (RAG) pipeline in eight episodes, with a second seven-episode series, "Prove it works," building an evaluation harness on the same repository. Each episode is one commit and one Git tag (s1e1–s1e8 and s2e1–s2e7), so checking out a tag reproduces the repository exactly as that episode leaves it. The series uses TypeScript, SQLite, curl and an HTTP server, answering with claude-sonnet-5-5 over a fictional 26,000-word corpus (Lantern Supply Co.) that includes deliberate traps such as near-identical product names and a policy changed in later release notes.

  3. Hacker News AI40

    Show HN: Vibetime – see what you ship when coding with AI agents

    Vibetime is an npm-installable CLI that wraps Claude Code, Codex, Gemini, Aster, and Opencode in the terminal and uses session hooks to track the Claude Code, Codex, Cursor, and ZCode desktop apps, printing a session summary with git commits, line changes, and files touched when each session ends. It requires no config, daemon, or account by default, stores data locally in ~/.vibe/, and reads only git metadata, with an opt-in GitHub-based leaderboard that ranks sessions by commits with meaningful changes.

  4. Codex Releases10

    0.170.0-alpha.2

    This page is a GitHub Changelog entry titled "0.170.0-alpha.2"; the supplied material consists only of site navigation and product menu text, with no details about the release itself.

  5. Hacker News AI40

    Apple II Agent: An AI Coding Environment for the Apple II

    The author revived an open source Apple II Agent project in which an Apple IIe client connects over an Uthernet II Ethernet card, via a Mac proxy with Claude API access, to Anthropic's Claude Opus model so AI can write software through a chat on the machine itself. After automated testing in emulators on the proxy, the agent deploys new BASIC or assembly programs directly into real Apple II memory over the Ethernet link, and the author has made mouse-supported solitaire games and a Sim City clone. The code is on GitHub, the proxy runs on a Unix-like machine, and the Apple II end currently requires an Uthernet II card though it could be adapted to other network interfaces.

  7. Hacker News AI36

    RefTrail – Zero-trust verification and clean-room specs for AI agents

    RefTrail is a method and toolset that makes a coding agent's completion report checkable: each requirement gets a source and measurable acceptance criterion, the criteria are frozen with a SHA-256 digest before product code is written, and a coverage catalog records status, evidence and the limits of that evidence. Its tools require Node.js 22.16 or newer and no further packages, and a worked example rebuild of GNU uniq reports 100% functional coverage with 1/1 mandatory checks passed, with recorded output comparisons matching GNU uniq byte for byte (16 of 16 under Linux with version 9.4 for revision 1; for revision 2, 16 of 16 under Windows with version 8.32 and 16 of 16 under Linux with version 9.4). The project states that it organizes what you are allowed to observe rather than analyzing products, that the digest proves criteria did not change but not that they preceded the code, and that its legal notes are general information, not legal advice.

  8. Codex Releases12

    0.170.0-alpha.1

    This entry is a GitHub Changelog page for version 0.170.0-alpha.1, consisting mainly of site navigation menus covering GitHub products such as Copilot, Actions, Codespaces, and Advanced Security. The material contains no release notes or details about the version itself.

  9. Hacker News AI58

    Show HN: Trace AI written code back to the agent and prompt

    Sploom is a tool that lives alongside git and records which agent and model wrote each line of code, along with the intent, prompts, decisions and checks behind it, working with Claude Code, Codex, Cursor, Gemini CLI, Copilot CLI, Devin CLI, Grok Build, Goose, Cline and any MCP-capable agent. After a one-time `sploom init`, it installs git hooks so provenance travels with commits via git notes, and offers commands like `sploom why`, `sploom rewind --green` and `sploom context`. Prompts are encrypted to the team's SSH keys listed in a committed `.sploomkeys` file, and it runs locally with an initial ~130 MB embedding model download.

  10. MarkTechPost42

    Marktechpost AI Launches GPU Leaderboard and the Deploy It Chrome Extension

    Marktechpost launched GPU Leaderboard, a free cloud GPU price comparison site for AI inference that reads on-demand and spot prices from each provider's own pricing page, alongside a Chrome extension called GPU Leaderboard: Deploy It. The site ranks 201 live GPU offers from 24 providers by $/GPU-hr and includes a calculator that prices a full run including idle time, with an example 8×H100 72-hour run at 90% utilization ranging from $967.68 at Latitude to $3,545.28 at CoreWeave. The extension estimates VRAM needs and shows the cheapest fitting GPUs on Hugging Face model pages and GitHub repos, plus a toolbar lookup.

Nov 11Wed
  1. Hacker News AI26

    Show HN: AI Code Rating – a 3 character disclosure of how AI was used in a repo

    AI Code Rating is a proposed standard in which a project places an ACR.md file in its repo root with a three-character rating: an uppercase letter for the maintainer's expertise (A–E), a digit for the share of code written by AI (0–4), and a lowercase letter for how closely a human checked AI-written code (a–e). The site offers a rating form that generates the badge and ACR.md file, a validator, and a GitHub Action, and it lists adopters including aicoderating.com, DomainMOD, Email Health Check, and HomelabAPI. The spec is at version 0.1, and the roadmap covers publishing the spec, tooling, adoption, and proposing that code hosts display the rating.

  2. Hacker News AI38

    Show HN: SketchUp compatible modeler with AI capabilities

    PushForm is an open-source (GNU GPLv3) 3D modeler that opens and exports SketchUp .skp files and LayOut documents, and imports/exports formats including STEP, glTF, COLLADA, OBJ, 3DS, STL and DXF. It offers push/pull modeling with exact dimensions, multiple display styles, and automatic cloud saving, aimed at cabinet makers, woodworkers, interior designers and others. The source is available on GitHub.

  3. Hacker News AI58

    Show HN: CodeLens AI-Augmented Code Review Tool

    CodeLens is a code review tool that turns a pull request or local branch into a guided review: a brief of what changed and why, a queue of changes ordered by risk, and per-change context including callers, entry points, and external effects. It parses 15 languages with Tree-sitter (with TypeScript compiler type info for TS/JS), supports Claude, any OpenAI-compatible API, or local Ollama models, and caches results by content hash in SQLite or Postgres. It also offers codebase exploration, GitHub PR review with inline comments, a GitHub Action, and a heuristic offline mode; it requires Node.js 22.13+ and git and is Apache-2.0 licensed.

  4. Hacker News AI58

    Show HN: Aisync, advisory file claims so two AI agents don't edit one repo

    aisync is a local hub (~/.ai-sync/, a git repo) that lets Claude Code, Codex and Cursor share rules, a hash-chained journal and file claims, with an overlapping claim exiting with code 3 so an agent stops before colliding. Hooks inject what other tools just did into running sessions, and version 0.2.0 adds layered When/Do/Not rules, a progress_file for stable prompt caching, and an optional MCP server. It requires Python 3.11+ and git on macOS or Linux, uses only the standard library, and is MIT licensed.

  5. Hacker News AI58

    Show HN: Fix Gate – verifies security-fix PRs, incl. AI-written ones

    Fix Gate is a free GitHub Action that verifies security-fix pull requests, including output from Copilot Autofix, Snyk Agent Fix or a person, by running Railo's rules over the base and head versions of changed files and posting five checks as a check run. It reports whether the targeted finding is gone, whether new findings appeared in the changed lines, whether changed files still parse, whether tests newly failed, and whether an added validator rejects a fixed list of known bypass payloads. The engine is not open source, runs only on pull_request events, and the guard row executes the pull request's validator function in a separate unprivileged subprocess rather than a container boundary.

  6. Codex Releases10

    0.167.1

    This page is a GitHub changelog entry titled "0.167.1" and consists mainly of site navigation and product menu links, with no details about the release itself.

  7. Codex Releases12

    0.169.0-alpha.9

    This page is a GitHub Changelog entry titled "0.169.0-alpha.9," but the supplied material contains only site navigation and product menu text, with no details about the release itself.

Nov 10Tue
  1. TechCrunch · AI50

    Cyberattacks threaten to make open source AI a little less open, Hugging Face exec warns

    Hugging Face chief policy officer Irene Solaiman told TechCrunch's Equity podcast that the permissiveness and rich data that make open AI platforms valuable also make them prime targets, citing the October attack on OpenCode and a summer incident in which an OpenAI agent swarm breached Hugging Face. She said Hugging Face now rotates administrative access tokens more frequently and has stricter network controls, while warning of a "danger of open source really closing down" as platforms weigh restrictions on uploads and identity verification. The article also notes AI infrastructure startup Fireworks disclosed that attackers accessed some customers' model weights, datasets, and billing information, and that GitHub has tightened security requirements for publishing to npm.

  2. Hacker News AI58

    Show HN: pvewarden – let an AI agent patch Proxmox VMs without giving it a shell

    pvewarden is an MCP server that lets an AI agent such as Claude Code check pending updates, take snapshots, install updates, reboot and verify services on Proxmox VE guests without receiving a shell or root. Safety comes from a pool-scoped Proxmox token, per-guest SSH keys bound to a forced command, required Proxmox tags for updates and reboots, automatic snapshots before installs, and confirmation dialogs the agent cannot answer. It is at version 0.1.x, tested on Proxmox VE 9 with Debian 12/13 and Ubuntu 22.04/24.04/26.04 containers and VMs, and is licensed Apache-2.0.

  4. Hacker News AI50

    USB: A trust layer for AI skills and MCP servers

    USB is an open-source trust layer for AI capabilities that discovers skills, MCP servers, agents and commands in repositories, compares declared behavior against observable evidence with secscan, and observes live MCP servers with mcprobe. It ships a 529-skill catalog and a 16-target installer (four native runtime installs plus portable bundles), with secscan producing deterministic verdicts and file:line evidence and exit codes for CI, while mcprobe requires explicit consent and never calls a tool. The project is at v1.0.8 under the MIT license.

  5. Codex Releases10

    0.169.0-alpha.7

    This page is a GitHub Changelog entry titled "0.169.0-alpha.7"; the supplied material consists only of site navigation and product menu text, with no details about the release itself.

  6. Ars Technica · AI62

    Claude Code is accidentally exposing secrets all over GitHub

    Apiiro researchers found thousands of secrets, including database passwords, API tokens, and root logins, in Claude Code settings files embedded in public GitHub repositories. The leak stems from how Claude Code stores approved shell commands in the local ".claude/settings.local.json" file, sometimes writing the command as-is with any embedded sensitive information. Anthropic's documentation says this settings file is added to the developer's global .gitignore list, which usually prevents it from being shared publicly.

  7. Codex Releases12

    0.169.0-alpha.6

    This page is a GitHub Changelog entry titled "0.169.0-alpha.6," but the supplied material contains only site navigation and product menu text (Platform, Copilot, Actions, Codespaces, Advanced Security, pricing, and similar links) rather than the changelog content itself. No release notes, features, fixes, or dates are stated in the material.

Nov 9Mon
  1. MarkTechPost59

    Reason Machines Open-Sources Aspen, a Git Server Built for AI Agents

    Reason Machines has released Aspen, an Apache 2.0 open-source Git server for AI agent traffic that independently implements the design OpenAI described for Pando, storing branches in PostgreSQL or SQLite and packs in object storage. It uses per-branch compare-and-swap so pushes to different branches never wait on each other, and it stores packs as-is rather than rebuilding them per fetch; the project self-reports 567 pushes per second sustained for 5 minutes on one 8-core server with a p99 push latency of 314 ms. Aspen is pre-alpha, with no releases or web UI, and the README calls its figures indicative rather than performance claims.

  2. Simon Willison34

    Hide your slop PR descriptions behind <details><summary>

    Simon Willison describes using HTML <details><summary> tags, which GitHub Markdown supports, to collapse long agent-written PR descriptions behind a short human-curated opener that explains what the PR is for. He uses the model name and effort level as the summary text, and shares recent examples from his datasette and llm projects.

  3. Hacker News AI31

    Show HN: Airlock – Policy-as-code for fleets of AI coding agents

    Airlock is an early-stage (3-4 weeks old) open standard for managing autonomous fleets of engineering agents, with a configuration schema and reusable GitHub actions already public and the backplane planned for open sourcing later. It covers version-controlled agent behaviors and lifecycles, scoped one-hour GitHub tokens via OIDC, configurable autonomy levels down to individual files, a standard autonomy scale, and an OTEL collector for audit-relevant agent actions. The author is seeking feedback on the project's direction and on pain points of managing AI use at larger businesses.