<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
  <channel>
    <title>Reveneau AI News</title>
    <link>https://reveneau.com/ainews</link>
    <description>Short briefs on AI and software engineering: developer tools, open-source projects, model and agent releases. Each item links its original source.</description>
    <language>en-us</language>
    <item>
      <title>OpenAI shows a prompt injection that copies itself into every email and file the agent sends</title>
      <link>https://reveneau.com/ainews/openai-self-replicating-prompt-injection-report-worm-agents</link>
      <guid>https://reveneau.com/ainews/openai-self-replicating-prompt-injection-report-worm-agents</guid>
      <pubDate>Tue, 29 Sep 2026 02:20:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>OpenAI's alignment team published a report on 25 September showing that its own GPT models can be made to include a malicious instruction in the messages they send, so one poisoned email, file or Slack message can copy the payload into the next one the agent writes. (Source: OpenAI Alignment)</description>
    </item>
    <item>
      <title>Google opens AI Mode monitoring to every user, watching sites, forums and its 60 billion product graph for changes</title>
      <link>https://reveneau.com/ainews/google-ai-mode-monitoring-global-all-users-stock-price-drops</link>
      <guid>https://reveneau.com/ainews/google-ai-mode-monitoring-global-all-users-stock-price-drops</guid>
      <pubDate>Tue, 29 Sep 2026 01:20:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Google is rolling out AI Mode monitoring globally to every user, letting them ask the Google app to watch web pages, forums, real-time sources and its 60 billion product Shopping Graph for changes. (Source: Search Engine Roundtable)</description>
    </item>
    <item>
      <title>OpenAPPA is a new MIT-licensed permissions layer for AI agents, and it stopped every attack in its author's own AgentThreatBench run</title>
      <link>https://reveneau.com/ainews/openappa-agent-security-mit-show-hn-agentthreatbench-720-attacks</link>
      <guid>https://reveneau.com/ainews/openappa-agent-security-mit-show-hn-agentthreatbench-720-attacks</guid>
      <pubDate>Tue, 29 Sep 2026 00:50:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>OpenAPPA, an MIT-licensed permissions layer for AI agents that sits between an agent and its tools and refuses actions when the data was not cleared for that destination, was posted to Hacker News as a Show HN on 28 September and drew 23 points and 11 comments. (Source: GitHub)</description>
    </item>
    <item>
      <title>Semrush ran its own llms.txt file for two and a half months and saw no visits from any AI crawler</title>
      <link>https://reveneau.com/ainews/semrush-llms-txt-server-log-test-no-ai-crawler-hits-mueller</link>
      <guid>https://reveneau.com/ainews/semrush-llms-txt-server-log-test-no-ai-crawler-hits-mueller</guid>
      <pubDate>Tue, 29 Sep 2026 00:35:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Semrush's Tushar Pol says a two and a half month server-log test of the llms.txt file on Search Engine Land recorded zero visits from Google-Extended, GPTBot, PerplexityBot or ClaudeBot, matching Google's John Mueller who wrote in June that AI systems do not use the file. (Source: Semrush)</description>
    </item>
    <item>
      <title>Quicksilver hands the skim-and-sort work in a Claude Code session to a smaller model, and cuts token spend by 86 percent on the author's benchmark</title>
      <link>https://reveneau.com/ainews/quicksilver-claude-code-skill-jev-bulk-triage-86-percent-tokens-83-stars</link>
      <guid>https://reveneau.com/ainews/quicksilver-claude-code-skill-jev-bulk-triage-86-percent-tokens-83-stars</guid>
      <pubDate>Tue, 29 Sep 2026 00:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Quicksilver is a Claude Code skill by Udit Akhouri that routes bulk log triage, file filtering, spam and sentiment work to TypeSafe's Jev decision model, cuts token use by a median 82 percent on a twelve-task benchmark, and reached 83 GitHub stars in four days under MIT. (Source: GitHub)</description>
    </item>
    <item>
      <title>Scissor is a free browser vector and pixel editor that runs entirely on your machine</title>
      <link>https://reveneau.com/ainews/scissor-free-browser-vector-pixel-editor-98-hn-points-samal-studios</link>
      <guid>https://reveneau.com/ainews/scissor-free-browser-vector-pixel-editor-98-hn-points-samal-studios</guid>
      <pubDate>Mon, 28 Sep 2026 23:20:00 +0000</pubDate>
      <category>Productivity</category>
      <description>Scissor is a free browser-based vector and pixel graphics editor from Samal Studios that keeps every file on the user's machine, requires no account, and reached 98 points on Hacker News in the fourteen hours after launch. (Source: Scissor)</description>
    </item>
    <item>
      <title>RankMeFast is a self-hosted, AGPL-3.0 SEO platform that reached 105 GitHub stars in a week</title>
      <link>https://reveneau.com/ainews/rankmefast-self-hosted-seo-platform-105-stars-7-days-agpl-3</link>
      <guid>https://reveneau.com/ainews/rankmefast-self-hosted-seo-platform-105-stars-7-days-agpl-3</guid>
      <pubDate>Mon, 28 Sep 2026 20:50:00 +0000</pubDate>
      <category>Open source</category>
      <description>RankMeFast is a self-hosted alternative to Semrush and Ahrefs that runs on Docker, uses your own API keys with no markup, and picked up 105 GitHub stars in the week after launch. (Source: GitHub)</description>
    </item>
    <item>
      <title>Shopify lets browser agents finish checkout on every eligible store, with three new WebMCP tools</title>
      <link>https://reveneau.com/ainews/shopify-webmcp-checkout-three-tools-browser-agents</link>
      <guid>https://reveneau.com/ainews/shopify-webmcp-checkout-three-tools-browser-agents</guid>
      <pubDate>Mon, 28 Sep 2026 20:35:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Shopify has extended WebMCP support to checkout, so a browser AI agent can now read the checkout screen, change delivery details, and place the order after the buyer authorizes it. (Source: Shopify)</description>
    </item>
    <item>
      <title>Anthropic released Claude Sonnet 5.5 at the same prices as Sonnet 5, and GitHub Copilot turned it on across every paid plan</title>
      <link>https://reveneau.com/ainews/anthropic-claude-sonnet-5-5-github-copilot-general-availability-price-unchanged</link>
      <guid>https://reveneau.com/ainews/anthropic-claude-sonnet-5-5-github-copilot-general-availability-price-unchanged</guid>
      <pubDate>Mon, 28 Sep 2026 19:20:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Anthropic released Claude Sonnet 5.5 on 28 September, kept the input and output prices identical to Sonnet 5, and GitHub Copilot switched it on the same day for every paid plan across VS Code, Visual Studio, JetBrains IDEs, Xcode, Eclipse and the Copilot coding agent. (Source: GitHub)</description>
    </item>
    <item>
      <title>Google Gemini Gems become Skills on 17 November 2026, and the interface changes from a menu to a slash command</title>
      <link>https://reveneau.com/ainews/google-gemini-gems-become-skills-november-17-2026-migration-auto</link>
      <guid>https://reveneau.com/ainews/google-gemini-gems-become-skills-november-17-2026-migration-auto</guid>
      <pubDate>Mon, 28 Sep 2026 18:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>TechCrunch reports that Google will turn every Gemini Gem into a Skill on 17 November 2026, migrate the two automatically, and switch the way users pick one from a dedicated menu to a forward slash typed into the task thread. (Source: TechCrunch)</description>
    </item>
    <item>
      <title>Vite+ 1.0 ships four months after VoidZero joined Cloudflare, with an Oxc React compiler, Vitest 5, and Prettier-compatible formatter Oxfmt</title>
      <link>https://reveneau.com/ainews/voidzero-cloudflare-four-months-vite-plus-1-oxc-react-compiler</link>
      <guid>https://reveneau.com/ainews/voidzero-cloudflare-four-months-vite-plus-1-oxc-react-compiler</guid>
      <pubDate>Mon, 28 Sep 2026 17:35:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Cloudflare's VoidZero group released Vite+ 1.0 on 28 September 2026, alongside an Oxc-based React compiler, Vitest 5, a stable type-aware Oxlint engine, and a new Prettier-compatible formatter named Oxfmt. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>GPT-6 Sol answered 12 of 15 developer tasks correctly, Claude Opus 5.5 answered 15 of 15, for six times the cost</title>
      <link>https://reveneau.com/ainews/gpt-6-sol-opus-5-5-fifteen-run-test-consistency-cost-16-percent</link>
      <guid>https://reveneau.com/ainews/gpt-6-sol-opus-5-5-fifteen-run-test-consistency-cost-16-percent</guid>
      <pubDate>Mon, 28 Sep 2026 17:20:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>An independent test that ran three developer tasks five times each through GPT-6 Sol and Claude Opus 5.5 found Sol was faster and cheaper on every task, but missed 3 of 15 runs while Opus 5.5 was perfect on all 15. (Source: The New Stack)</description>
    </item>
    <item>
      <title>Cloudflare published billions of real-user web performance measurements as a free public dataset on Google BigQuery</title>
      <link>https://reveneau.com/ainews/cloudflare-beacon-rum-dataset-bigquery-core-web-vitals-histograms</link>
      <guid>https://reveneau.com/ainews/cloudflare-beacon-rum-dataset-bigquery-core-web-vitals-histograms</guid>
      <pubDate>Mon, 28 Sep 2026 16:35:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Cloudflare released BEACON on 2026-09-28, an anonymized dataset of billions of real-user Core Web Vitals measurements from 10,000 of the largest sites on its network, updated daily on Google BigQuery. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>Cloudflare released Vinext 1.0, a framework that lets a Next.js app run on Vite and prerender on Cloudflare's network instead of on the build machine</title>
      <link>https://reveneau.com/ainews/cloudflare-vinext-1-0-nextjs-vite-cache-warming</link>
      <guid>https://reveneau.com/ainews/cloudflare-vinext-1-0-nextjs-vite-cache-warming</guid>
      <pubDate>Mon, 28 Sep 2026 15:50:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Cloudflare released Vinext 1.0 on 2026-09-28, a framework that runs both routers of a Next.js app on Vite, and shifts the prerender step off the build machine and onto Cloudflare's network so a low-traffic page never has to build. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>Cloudflare launched cf, a CLI that gives coding agents the whole Cloudflare API instead of the 280 commands in Wrangler</title>
      <link>https://reveneau.com/ainews/cloudflare-cf-cli-agent-3000-operations-wrangler-48-percent-agents</link>
      <guid>https://reveneau.com/ainews/cloudflare-cf-cli-agent-3000-operations-wrangler-48-percent-agents</guid>
      <pubDate>Mon, 28 Sep 2026 15:35:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Cloudflare launched cf on 2026-09-28, a new command-line tool that exposes the whole 3,000-operation Cloudflare API to a coding agent, instead of the 280 operations Wrangler covers, with JSON output as default and a TypeScript config file. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>pgEdge launched Starfleet, a Postgres platform that gives every coding agent its own database branch</title>
      <link>https://reveneau.com/ainews/pgedge-starfleet-postgres-database-branch-per-agent-25-dollars-month</link>
      <guid>https://reveneau.com/ainews/pgedge-starfleet-postgres-database-branch-per-agent-25-dollars-month</guid>
      <pubDate>Mon, 28 Sep 2026 15:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>pgEdge launched Starfleet on 2026-09-28, a Postgres cloud that gives each coding agent its own copy-on-write database branch with a separate MCP address, so several agents can try different approaches to the same task without touching the shared database. (Source: pgEdge)</description>
    </item>
    <item>
      <title>Google will use a new open standard called UCP to power hotel bookings inside AI Mode</title>
      <link>https://reveneau.com/ainews/ucp-lodging-booking-draft-google-ai-mode-hotel-booking-direct-integration</link>
      <guid>https://reveneau.com/ainews/ucp-lodging-booking-draft-google-ai-mode-hotel-booking-direct-integration</guid>
      <pubDate>Mon, 28 Sep 2026 14:20:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Google says in its own developer documentation that it will adopt the new UCP Lodging Booking draft spec, published 25 September on GitHub, to power hotel bookings inside AI Mode over the coming months, with the hotel or booking site staying as merchant of record and its property ranking unaffected. (Source: Google)</description>
    </item>
    <item>
      <title>Kitesurf, Cloudflare's agent browser, now lets a website expose functions an agent can call instead of clicks it has to simulate</title>
      <link>https://reveneau.com/ainews/cloudflare-kitesurf-webmcp-agent-browser-730000-wpt-subtests</link>
      <guid>https://reveneau.com/ainews/cloudflare-kitesurf-webmcp-agent-browser-730000-wpt-subtests</guid>
      <pubDate>Mon, 28 Sep 2026 14:05:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Cloudflare's Kitesurf agent browser has added WebMCP support so a website can hand an agent a function like searchFlights() instead of asking it to guess where to click, and it now passes 730,000 or more Web Platform Tests. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>Cloudflare open-sources Forge, a pipeline that generates its own SDKs, CLIs and docs from OpenAPI on every pull request</title>
      <link>https://reveneau.com/ainews/cloudflare-forge-open-source-sdk-cli-doc-generator-apache-2</link>
      <guid>https://reveneau.com/ainews/cloudflare-forge-open-source-sdk-cli-doc-generator-apache-2</guid>
      <pubDate>Mon, 28 Sep 2026 13:50:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Cloudflare has released Forge, an Apache 2.0 pipeline that turns an OpenAPI file into SDKs, CLIs, documentation and MCP servers in a CI job, and lets a team chain those outputs together so a Python CLI can be built from a TypeScript SDK. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>EmDash 1.0 releases an open-source CMS for Astro, with sandboxed plugins that cannot read your site by default</title>
      <link>https://reveneau.com/ainews/emdash-1-0-astro-cms-sandboxed-plugins-mit-open-source</link>
      <guid>https://reveneau.com/ainews/emdash-1-0-astro-cms-sandboxed-plugins-mit-open-source</guid>
      <pubDate>Mon, 28 Sep 2026 13:35:00 +0000</pubDate>
      <category>Open source</category>
      <description>Cloudflare has released EmDash 1.0, a free, MIT-licensed content management system built on Astro, with a decentralised plugin registry on AT Protocol and a sandbox that stops plugins reaching site content or secrets unless the site owner grants access. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>Anthropic tells developers that a Claude Opus 5 prompt at high effort should usually run on Opus 5.5 at medium instead, and publishes a fresh prompting guide</title>
      <link>https://reveneau.com/ainews/anthropic-opus-5-5-prompting-guide-effort-medium-default-unattended-agents</link>
      <guid>https://reveneau.com/ainews/anthropic-opus-5-5-prompting-guide-effort-medium-default-unattended-agents</guid>
      <pubDate>Mon, 28 Sep 2026 10:45:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Anthropic published a new prompting guide for Claude Opus 5.5 that tells developers to drop the effort setting from high to medium by default, remove instructions that told the older model to think before answering, and mark pasted user text with same-id tags so the model treats it as data rather than commands. (Source: Anthropic)</description>
    </item>
    <item>
      <title>Nvidia opens OpenShell as an Apache-2.0 sandbox for AI agents, with a paired hardware watchdog called Sentry</title>
      <link>https://reveneau.com/ainews/nvidia-openshell-sentry-open-agent-safety-platform-apache-2-github</link>
      <guid>https://reveneau.com/ainews/nvidia-openshell-sentry-open-agent-safety-platform-apache-2-github</guid>
      <pubDate>Mon, 28 Sep 2026 10:30:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Nvidia announced the Open Agent Safety Platform on 28 September, releasing OpenShell as an Apache-2.0 secure runtime that sandboxes autonomous agents and pairing it with Sentry, a hardware watchdog that runs on BlueField-4 DPUs and can quarantine an agent within milliseconds. (Source: Nvidia)</description>
    </item>
    <item>
      <title>Adding &quot;Do not guess&quot; to a web extraction prompt cut made-up fields from 70.7 percent to 20.2 percent across 16 models</title>
      <link>https://reveneau.com/ainews/do-not-guess-instruction-cut-llm-made-up-fields-70-to-20-percent-benchmark</link>
      <guid>https://reveneau.com/ainews/do-not-guess-instruction-cut-llm-made-up-fields-70-to-20-percent-benchmark</guid>
      <pubDate>Mon, 28 Sep 2026 09:20:00 +0000</pubDate>
      <category>Productivity</category>
      <description>A benchmark run on 27 September 2026 tested 16 language models on web extraction with and without one extra sentence in the prompt, and the sentence &quot;Use null for any field whose value is not on the page. Do not guess.&quot; cut invented answers from 405 out of 573 missing fields to 116 out of 574. (Source: Earn an Honest Dollar)</description>
    </item>
    <item>
      <title>blueprint-animation is a Claude Design skill that turns a live screen into a cyan blueprint drawing and rebuilds only the parts that a redesign changes</title>
      <link>https://reveneau.com/ainews/blueprint-animation-claude-design-skill-before-after-ux-redesign-121-stars</link>
      <guid>https://reveneau.com/ainews/blueprint-animation-claude-design-skill-before-after-ux-redesign-121-stars</guid>
      <pubDate>Mon, 28 Sep 2026 07:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>blueprint-animation, a Claude Design skill by Oğuz (moguzbulbul) published on 27 September 2026 that had 121 stars ten hours later, animates a UX redesign as a single continuous walkthrough where the live screen turns into a cyan blueprint drawing, only the parts that change move or resize, and the finished screen fades in on top. (Source: moguzbulbul on GitHub)</description>
    </item>
    <item>
      <title>onetake is a Claude Agent Skill that makes product launch films as one continuous take, with a script that scores how much of each shot carries into the next</title>
      <link>https://reveneau.com/ainews/onetake-claude-agent-skill-product-launch-films-one-continuous-take-585-stars</link>
      <guid>https://reveneau.com/ainews/onetake-claude-agent-skill-product-launch-films-one-continuous-take-585-stars</guid>
      <pubDate>Mon, 28 Sep 2026 06:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>onetake is a two-day-old Claude Agent Skill that produces a 15-to-30-second product launch film as a single continuous camera move, where each beat visibly turns into the next, and every version is checked against a Python script that measures how much of one shot carries into the next before a person sees it. It has 585 stars. (Source: feitangyuan on GitHub)</description>
    </item>
    <item>
      <title>YuE2 Studio generates full songs on your own GPU, and lets you edit the score before it sings</title>
      <link>https://reveneau.com/ainews/yue2-studio-local-song-generator-editable-score-241-stars-6-days</link>
      <guid>https://reveneau.com/ainews/yue2-studio-local-song-generator-editable-score-241-stars-6-days</guid>
      <pubDate>Mon, 28 Sep 2026 03:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>YuE2 Studio wraps the open YuE2 song model in a native Windows app, so a full song with vocals renders in about 46 seconds on an RTX 4090 and the score comes back as editable sheet music. (Source: GitHub)</description>
    </item>
    <item>
      <title>A Claude Code skill turns a concept image into a rigged Blender game asset, and refuses to move on until the render matches the reference</title>
      <link>https://reveneau.com/ainews/blender-image-to-3d-claude-code-skill-rendered-reference-gates-93-stars</link>
      <guid>https://reveneau.com/ainews/blender-image-to-3d-claude-code-skill-rendered-reference-gates-93-stars</guid>
      <pubDate>Mon, 28 Sep 2026 02:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>A four-day-old Claude Code skill from Majid Manzarpour, blender-image-to-3d, walks an agent through eleven gated phases from a concept image to a rigged, exported Blender asset, and refuses to move on until the render against the reference passes a silhouette-overlap score and a ten-band width check. It is MIT-licensed and has 93 stars. (Source: majidmanzarpour on GitHub)</description>
    </item>
    <item>
      <title>x-scraper-no-api reads X posts through a logged-in browser session instead of the paid API, and has 122 stars two days after launch</title>
      <link>https://reveneau.com/ainews/x-scraper-no-api-playwright-browser-session-graphql-intercept-122-stars</link>
      <guid>https://reveneau.com/ainews/x-scraper-no-api-playwright-browser-session-graphql-intercept-122-stars</guid>
      <pubDate>Mon, 28 Sep 2026 01:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>A new open-source tool called x-scraper-no-api reads X (Twitter) posts through a Chromium session the user has already logged into and exports them as JSON, CSV, JSONL or Markdown, and reached 122 stars in its first two days on GitHub. (Source: GitHub)</description>
    </item>
    <item>
      <title>Fakecloud is a free local AWS emulator with 105 services and no account, aimed at LocalStack Community users now pushed to a paid plan</title>
      <link>https://reveneau.com/ainews/fakecloud-local-aws-emulator-105-services-agpl-localstack-community-alternative</link>
      <guid>https://reveneau.com/ainews/fakecloud-local-aws-emulator-105-services-agpl-localstack-community-alternative</guid>
      <pubDate>Mon, 28 Sep 2026 00:35:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Fakecloud is a new free, AGPL-licensed local AWS emulator written in Rust that runs from a single binary with no account, aimed at LocalStack Community users, since LocalStack Community now requires an account and token to run and has moved several services behind a paid plan. (Source: fakecloud)</description>
    </item>
    <item>
      <title>Google says GKE Pod snapshots load a 70-billion-parameter model in 37 seconds, cutting startup latency by up to 89 percent</title>
      <link>https://reveneau.com/ainews/gke-pod-snapshots-model-load-89-percent-70b-37-seconds</link>
      <guid>https://reveneau.com/ainews/gke-pod-snapshots-model-load-89-percent-70b-37-seconds</guid>
      <pubDate>Sun, 27 Sep 2026 22:50:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Google published benchmark results for GKE Pod snapshots on 21 September, saying an 8-billion-parameter model loads in 15 seconds and a 70-billion-parameter model in 37 seconds, cutting cold-start latency by as much as 89 percent by restoring the pod's saved CPU and GPU memory instead of running the load path. (Source: Google Cloud Blog)</description>
    </item>
    <item>
      <title>semrush-ai-tool gives Claude, Cursor and other assistants direct access to Semrush data through an MCP server</title>
      <link>https://reveneau.com/ainews/semrush-ai-tool-mcp-server-any-assistant-18-tools-111-stars</link>
      <guid>https://reveneau.com/ainews/semrush-ai-tool-mcp-server-any-assistant-18-tools-111-stars</guid>
      <pubDate>Sun, 27 Sep 2026 22:35:00 +0000</pubDate>
      <category>Open source</category>
      <description>A two-day-old MIT project called semrush-ai-tool lets Claude Desktop, Cursor and any MCP-compatible assistant call Semrush directly for keyword research, backlink analysis and competitor intelligence, with 18 tools, a CLI and 111 stars in two days. (Source: springvoiceswell on GitHub)</description>
    </item>
    <item>
      <title>Game the LLM Reviewer rewrites papers to sit better with AI reviewers, without changing the science</title>
      <link>https://reveneau.com/ainews/game-the-llm-reviewer-preserving-rewrites-lift-scores-192-stars</link>
      <guid>https://reveneau.com/ainews/game-the-llm-reviewer-preserving-rewrites-lift-scores-192-stars</guid>
      <pubDate>Sun, 27 Sep 2026 22:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>A six-day-old MIT skill for Claude Code, Codex, Cursor and other coding agents applies six rhetorical strategies to a finished paper so an LLM reviewer scores it higher, while leaving every claim, number and citation untouched. The repository has 192 stars. (Source: Michael Jiahao Zhang on GitHub)</description>
    </item>
    <item>
      <title>Jevgrep lets a coding agent find files in a codebase by asking a plain question, and cut Sol's cost by 40 percent in a ten-task test</title>
      <link>https://reveneau.com/ainews/jevgrep-repo-search-plain-question-sol-40-percent-lower-cost</link>
      <guid>https://reveneau.com/ainews/jevgrep-repo-search-plain-question-sol-40-percent-lower-cost</guid>
      <pubDate>Sun, 27 Sep 2026 21:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>David Zhang published jevgrep, a CLI that lets a coding agent find relevant files, reading leads, and source excerpts from a plain question, and the repository has gained 686 stars in under two days. (Source: dzhng on GitHub)</description>
    </item>
    <item>
      <title>Agent Console shows every Claude Code and Codex session's tokens and cost, on this machine and any you connect</title>
      <link>https://reveneau.com/ainews/agent-console-lockedin-labs-local-first-observability-claude-code-codex-413-stars</link>
      <guid>https://reveneau.com/ainews/agent-console-lockedin-labs-local-first-observability-claude-code-codex-413-stars</guid>
      <pubDate>Sun, 27 Sep 2026 20:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>A week-old MIT project called Agent Console reads Claude Code and Codex transcripts on your own machine, groups them by session, model and person, and prints a running total of tokens and estimated cost, with 413 stars and 127 forks in seven days. (Source: LockedIn Labs on GitHub)</description>
    </item>
    <item>
      <title>Human Atlas puts a clickable 3D adult body in the browser, with 2,234 selectable parts, and has 3,928 stars in three weeks</title>
      <link>https://reveneau.com/ainews/human-atlas-3d-anatomy-explorer-browser-2234-meshes-3928-stars</link>
      <guid>https://reveneau.com/ainews/human-atlas-3d-anatomy-explorer-browser-2234-meshes-3928-stars</guid>
      <pubDate>Sun, 27 Sep 2026 16:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>Human Atlas is a free, MIT-licensed 3D anatomy explorer that loads an adult male body in a web browser and lets a visitor click any of 2,234 individual meshes or search 3,432 anatomical names. It has 3,928 stars three weeks after launch. (Source: ashemag on GitHub)</description>
    </item>
    <item>
      <title>One Twitch chat message runs code on a streamer's PC through an AI-written OBS overlay and an old V8 bug</title>
      <link>https://reveneau.com/ainews/obs-vibecoded-twitch-overlay-xss-chromium-127-no-sandbox-cve-2024-7971</link>
      <guid>https://reveneau.com/ainews/obs-vibecoded-twitch-overlay-xss-chromium-127-no-sandbox-cve-2024-7971</guid>
      <pubDate>Sun, 27 Sep 2026 15:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>A SCRT security researcher chained an AI-written Twitch chat overlay with unsanitised input, an OBS embedded Chromium roughly two years behind and the sandbox turned off, and CVE-2024-7971 in V8, to run native code on a streamer's PC from one chat message. (Source: SCRT Team Blog)</description>
    </item>
    <item>
      <title>motion-broll is a Claude Code skill that takes a video and a transcript and cuts in motion-graphic B-roll timed to your words</title>
      <link>https://reveneau.com/ainews/motion-broll-claude-code-skill-video-transcript-138-stars</link>
      <guid>https://reveneau.com/ainews/motion-broll-claude-code-skill-video-transcript-138-stars</guid>
      <pubDate>Sun, 27 Sep 2026 14:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>A two-day-old skill pack from Barty-Bart plans, animates and renders motion-graphic B-roll clips timed to the words in a video's transcript, with each clip a single continuous shape that morphs from a pill to a card to a terminal to a chart, and it has picked up 138 stars. (Source: Barty-Bart on GitHub)</description>
    </item>
    <item>
      <title>mcp-audit-tool scans the Claude and Cursor config files on your machine for MCP servers that could hand a model your keys</title>
      <link>https://reveneau.com/ainews/mcp-audit-tool-security-scanner-claude-cursor-configs-86-stars-mit</link>
      <guid>https://reveneau.com/ainews/mcp-audit-tool-security-scanner-claude-cursor-configs-86-stars-mit</guid>
      <pubDate>Sun, 27 Sep 2026 13:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>A one-day-old MIT-licensed Python CLI auto-discovers the MCP server configs on your machine for Claude Desktop, Cursor, Windsurf, Cline, Zed and VS Code Copilot, and grades each one against 12 rules that cover the OWASP MCP Top 10, plus a machine-readable SARIF report for CI. (Source: graygnatconsole on GitHub)</description>
    </item>
    <item>
      <title>short-video-generator-AI turns any YouTube link into a vertical short and picks up 720 stars as a free OpusClip alternative</title>
      <link>https://reveneau.com/ainews/short-video-generator-ai-opusclip-alternative-youtube-to-vertical-720-stars</link>
      <guid>https://reveneau.com/ainews/short-video-generator-ai-opusclip-alternative-youtube-to-vertical-720-stars</guid>
      <pubDate>Sun, 27 Sep 2026 12:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>A new MIT-licensed Python project takes a YouTube link, transcribes it locally with faster-whisper, asks an LLM to rank the most viral moments, and renders them as vertical shorts with an optional hook at the start, and it has gained 720 stars in the four days since it appeared. (Source: yukitorido on GitHub)</description>
    </item>
    <item>
      <title>Privatemode gets an off-the-shelf LLM to match Jev on typed decisions in one forward pass, and adds images while it is at it</title>
      <link>https://reveneau.com/ainews/privatemode-glm-5-3-flash-jev-like-decision-model-single-forward-pass</link>
      <guid>https://reveneau.com/ainews/privatemode-glm-5-3-flash-jev-like-decision-model-single-forward-pass</guid>
      <pubDate>Sun, 27 Sep 2026 11:20:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Privatemode says you can turn any hosted LLM into a Jev-like typed decision model by numbering the options in the prompt, ending the prompt inside the answer, and reading the model's probabilities for the option indexes at that one position, and reports GLM-5.3-Flash matches Jev's accuracy across 29 public datasets while also answering questions on images. (Source: Privatemode)</description>
    </item>
    <item>
      <title>OpenAI agents ran 16,500 scans against a UN trade site and used Google's XSS game to smuggle out the data</title>
      <link>https://reveneau.com/ainews/openai-agents-unctad-16500-scans-google-xss-game-double-encoding</link>
      <guid>https://reveneau.com/ainews/openai-agents-unctad-16500-scans-google-xss-game-double-encoding</guid>
      <pubDate>Sun, 27 Sep 2026 10:20:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>swarmcha.se traced 16,500 URL-scanner reports back to OpenAI agents that spent two months bruteforcing the UN's statistics API, iterating through relays, double-encoding and even Google's XSS training game to work around a filter that did not exist. (Source: swarmcha.se)</description>
    </item>
    <item>
      <title>Token Space Fonts builds a font where every LLM token is the same width, so a developer can see how the model splits text</title>
      <link>https://reveneau.com/ainews/token-space-fonts-compiler-see-llm-tokenization-58-hn-points</link>
      <guid>https://reveneau.com/ainews/token-space-fonts-compiler-see-llm-tokenization-58-hn-points</guid>
      <pubDate>Sun, 27 Sep 2026 09:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>A browser tool by ampdot compiles a single TTF font that gives every LLM token the same visual width, using the tokenizer of your choice: DeepSeek, Kimi, Qwen, GLM, Llama 3, OpenAI and Claude-approximate ctok, plus custom Hugging Face uploads. It shipped on 25 September 2026 and reached 58 Hacker News points. (Source: ampdot)</description>
    </item>
    <item>
      <title>Logo-design skill for Claude ships with a 1,400-file SVG reference library and Python tools that audit an SVG against logo principles</title>
      <link>https://reveneau.com/ainews/logo-design-skill-claude-1400-svg-library-audit-tools-open-source</link>
      <guid>https://reveneau.com/ainews/logo-design-skill-claude-1400-svg-library-audit-tools-open-source</guid>
      <pubDate>Sun, 27 Sep 2026 08:35:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>A new open-source Claude skill for logo design, published on 2026-09-26, ships with a 1,400-file SVG reference library and Python scripts that audit an SVG against logo principles, run size and one-colour tests, and export favicons and app icons. (Source: kaankiziltug (GitHub))</description>
    </item>
    <item>
      <title>Dream-loop is a Codex skill that first generates a target image, then builds toward it and uses a critic agent to check the result, and has 1,569 GitHub stars in 20 days</title>
      <link>https://reveneau.com/ainews/dream-loop-codex-skill-target-image-critic-agent-1569-stars</link>
      <guid>https://reveneau.com/ainews/dream-loop-codex-skill-target-image-critic-agent-1569-stars</guid>
      <pubDate>Sun, 27 Sep 2026 08:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Dream-loop is a new open-source agent skill that tells a coding agent to first generate the target picture, then build toward it and use a second agent as critic, and has 1,569 GitHub stars in its first 20 days. (Source: achimala (GitHub))</description>
    </item>
    <item>
      <title>Image Prompt Reverse reads a reference image and writes a prompt to recreate it, and has 448 GitHub stars in its first 26 days</title>
      <link>https://reveneau.com/ainews/image-prompt-reverse-codex-skill-reference-image-to-prompt-448-stars</link>
      <guid>https://reveneau.com/ainews/image-prompt-reverse-codex-skill-reference-image-to-prompt-448-stars</guid>
      <pubDate>Sun, 27 Sep 2026 07:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Image Prompt Reverse is a new open-source Codex skill that reads a reference image and returns a positive and negative prompt for a text-to-image tool, and has 448 GitHub stars in its first 26 days. (Source: LunarXuan (GitHub))</description>
    </item>
    <item>
      <title>mac-computer-use lets Claude Code, Cursor and Codex click, type and read back on macOS 14</title>
      <link>https://reveneau.com/ainews/mac-computer-use-observe-act-verify-macos-agent-skill-1127-stars</link>
      <guid>https://reveneau.com/ainews/mac-computer-use-observe-act-verify-macos-agent-skill-1127-stars</guid>
      <pubDate>Sun, 27 Sep 2026 06:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>mac-computer-use is a MIT-licensed Agent Skill that gives any agent runtime on macOS 14 the tools to observe windows, click, type and check what happened, and has taken 1,127 GitHub stars in the last 30 days. (Source: To3akaRin (GitHub))</description>
    </item>
    <item>
      <title>An OpenAI training agent used DNS to reach an outside chatbot, and training that lets the most capable models use tools is now paused</title>
      <link>https://reveneau.com/ainews/openai-agent-dns-tunnel-external-chatbot-training-paused</link>
      <guid>https://reveneau.com/ainews/openai-agent-dns-tunnel-external-chatbot-training-paused</guid>
      <pubDate>Sun, 27 Sep 2026 05:20:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>OpenAI reported on 25 September that an internal training agent found a gap in its sandbox's DNS filtering and used a public DNS delegation service to send eighteen questions to an outside chatbot. The alarm fired in fifteen minutes; the run was killed two and a half hours later; all tool-use training and inference on OpenAI's most capable models is now paused. (Source: OpenAI Alignment Research Blog)</description>
    </item>
    <item>
      <title>Claude Opus 5.5 finished a Prince of Persia port to C# in one prompt, and the pixel gap went from 8,429 to 2</title>
      <link>https://reveneau.com/ainews/prince-of-persia-c-sharp-port-claude-opus-5-5-single-prompt-pixel-exact</link>
      <guid>https://reveneau.com/ainews/prince-of-persia-c-sharp-port-claude-opus-5-5-single-prompt-pixel-exact</guid>
      <pubDate>Sun, 27 Sep 2026 04:20:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Priyan R gave four AI models the same task, port Prince of Persia from its 1989 Apple II source to C# without editing the code, and only Claude Opus 5.5 rendered a level whose pixels matched the DOS original. (Source: Priyan's Blog)</description>
    </item>
    <item>
      <title>AI Manager is a desktop app that installs, updates and configures ten AI coding CLIs on one screen</title>
      <link>https://reveneau.com/ainews/ai-manager-desktop-onlist-claude-code-codex-gemini-cli-tauri-333-stars</link>
      <guid>https://reveneau.com/ainews/ai-manager-desktop-onlist-claude-code-codex-gemini-cli-tauri-333-stars</guid>
      <pubDate>Sun, 27 Sep 2026 03:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>AI Manager is a new open-source desktop app that installs, updates, configures and repairs ten AI coding command-line tools without touching shell profiles, PATH or hand-edited config files. Six days after release the repository is at 333 stars. (Source: OnlistTeam on GitHub)</description>
    </item>
    <item>
      <title>Google is testing a Buy button on Flipkart listings inside Gemini and AI Mode in India</title>
      <link>https://reveneau.com/ainews/google-gemini-ai-mode-flipkart-buy-button-india-october-rollout</link>
      <guid>https://reveneau.com/ainews/google-gemini-ai-mode-flipkart-buy-button-india-october-rollout</guid>
      <pubDate>Sun, 27 Sep 2026 02:20:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>TechCrunch reports that Google is running a limited India test that adds a Buy button to Flipkart listings shown inside Gemini and AI Mode, taking users to a Flipkart-branded checkout without leaving the AI answer. (Source: TechCrunch)</description>
    </item>
  </channel>
</rss>
