跳到正文
10月23日周五
  1. Rohan Paul70

    Anthropic 将 Agent Skills 标准的所有权捐赠给 Linux Foundation 旗下的 Agentic AI Foundation,与其此前捐赠 MCP 的做法一致。

    引用ClaudeDevs@ClaudeDevs

    我们正在将 Agent Skills 捐赠给 Agentic AI Foundation(@AgenticAIFdn),我们此前也是将 MCP 捐赠给同一个基金会。 自 2025 年 12 月起,已有 70 多个智能体平台集成了该标准,包括 ChatGPT、Cursor、GitHub Copilot 和 VS Code。 这对你意味着什么:

  2. TypeSafe AI51

    TypeSafe AI 转评 Composio 发布 Firewall,为 Agent 提供运行时边界。该防火墙基于 Jev 和 Composio 用真实使用数据调优的定制 SLM,双向校验 Agent 的动作与返回信息,用于保障用户意图、开发者边界并防护提示词注入,现已对所有 Composio 开发者开放。

    引用Karan Vaidya@KaranVaidya6

    Agents have a trust problem. Today’s models can do most work. What they need is the right boundaries. In traditional software, those were set at build time. With agents, they have to be set and enforced at runtime. Today we’re introducing Composio Firewall, the runtime boundary for agents. Millions of users and developers already use Composio as the runtime for their agents - giving agents tools, auth, and sandboxed execution. Now with our agent firewall every action an agent takes is evaluated using Jev and custom SLMs tuned by Composio based on real-world usage data. The firewall strengthens that existing boundary in both directions, checking the actions agents take and the information coming back to them through Composio. The advantage of the runtime boundary is that Composio Firewall verifies that the agent respects user intent and the boundaries set by the developer and user. Additionally, this provides the safety layer required to protect the user against malicious prompt injection as well as other attacks. Composio Firewall is live now for all Composio developers. Check it out at http://composio.dev/firewall

  3. Boris Cherny70

    Anthropic 的 Boris Cherny 宣布将 Agent Skills 捐赠给 Agentic AI Foundation,与此前捐赠的 MCP 并列。Agent Skills 起源于 Claude Code 的实验,因行业广泛采用而开放。引用的 @ClaudeDevs 内容提到,自 2025 年 12 月以来已有 70+ 智能体平台集成该标准,包括 ChatGPT、Cursor、GitHub Copilot 和 VS Code。

    引用ClaudeDevs@ClaudeDevs

    我们正在将 Agent Skills 捐赠给 Agentic AI Foundation(@AgenticAIFdn),我们此前也是将 MCP 捐赠给同一个基金会。 自 2025 年 12 月起,已有 70 多个智能体平台集成了该标准,包括 ChatGPT、Cursor、GitHub Copilot 和 VS Code。 这对你意味着什么:

    同一件事,精选收录的是《Anthropic 将 Agent Skills 开放标准捐赠给 Linux Foundation 旗下 Agentic AI Foundation》

  4. The Decoder:AI News56

    Google 发布 Agent Compute Engine,为每个 Gemini 智能体配备硬件隔离 microVM

    Google 宣布推出 Agent Compute Engine,为每个 AI 智能体分配独立虚拟机,已支撑 Gemini,将在未来几个月开放预览。每个智能体运行在由 Google Titanium 芯片保护的 microVM 中,空闲时 VM 自动暂停,共享内存降低运行成本,Google 称单台服务器可容纳十倍的智能体数量。

  5. n8n Blog49

    AI 智能体工作流中的幻觉检测方法指南

    针对 AI 智能体工作流,可按幻觉类型分层部署检测:忠实度与接地性检查用 DeepEval 等工具把回答拆成单条主张与检索文档比对打分,自一致性检查多次提问同一问题比较答案是否收敛,语义熵则按语义聚类估计模型的不确定性。来源核验可对照数据库、API 和文档等权威来源,置信度阈值配合 human in the loop 把高风险输出转人工复核。

  6. OpenAI:官网动态46

    Uber 向全体员工部署 ChatGPT Work

    Uber 宣布即日起在全公司范围部署 ChatGPT Work,覆盖全球逾 30,000 名员工,此前试点规模为 1,000 人。该智能体接入 Google Drive、Gmail、Google Calendar 和 Slack,可完成资料调研、会议简报、演示文稿制作与数据分析等任务,并将 GPT‑6.1 Sol 作为默认模型。Uber 称这是其首个面向知识工作的全公司级智能体平台部署。

  7. David Singleton57

    Muse 工程负责人 David Singleton 宣布 1Password 直接接入 Muse,用户批准每次登录后 Muse 可继续完成任务,密码始终留在 1Password 保险库中,智能体无法看到或取走凭据。该功能将在未来几天内覆盖所有平台。此集成属于 1Password for Agents 平台发布的一部分,该平台对个人和家庭账户免费且为可选开启。

    引用1Password@1Password

    Today we announce 1Password for Agents platform, building with companies @Muse, SpaceX Super Intelligence Grok @Bot, @AnthropicAI’s @Claudeai, @OpenAI, @TownAI, @Browserbase, @Browser_use, @heydana_ai, Instinct, @usekernel, @Perplexity_ai, @tryramp, @Tomo, and @wajo_ai, with more integrations on the way. 🎉 We've heard from so many of our customers who want to use these new personal AI agents to help them get more done, but want more control over what the agent can access with the same trust and ease of use they get when using 1Password directly. 1Password for Agents gives your agents access without giving up your passwords. When an agent reaches a sign-in form, it requests a credential from your vault. If you approve the request, 1Password directly auto-fills the credential in the destination site so the agent can’t see or take possession of the credentials. The agent gets the task done, but it doesn’t get your passwords.. You stay in control. 1Password for Agents free and optional for personal and family accounts. Unless you opt-in to an agent connector, agents cannot touch your vault. ➡️Learn more: https://bit.ly/487da6J

  8. Redwood Research:Blog78

    METR 与 Redwood Research 红队测试 OpenAI 内部智能体监控系统,发现多个漏洞

    METR 与 Redwood Research 各派一名员工,于 7 月 21 日至 8 月 11 日对 OpenAI 内部失准监测系统开展三周高权限试点压力测试,产出 61 页内部报告。

    推荐理由:作者以亲历视角披露对 OpenAI 内部监控系统的压力测试,给出覆盖率估算、漏洞清单和可复用的监控设计原则。

  9. Claude:Blog62

    Anthropic 指南:何时把子智能体合并进主 Agent 循环

    Anthropic Applied AI 团队发布指南,讲解何时把 orchestrator 下的路由器、规划器和领域子智能体合并进单个主 Agent 循环。文中对比显示,带 skills 的单智能体在质量上常优于一提示全包和子智能体设计,且成本和延迟更低,一家客户改用单循环后运行时间约快 2x。

    推荐理由:Anthropic 根据多个企业部署对比总结何时把子智能体合并进主循环,并给出迁移套件、评估集和分阶段合并方法,可直接迁移到自己的 Agent 架构决策。

  10. Karina62

    Karina Nguyen 引用美国多所大型银行检测到客户账户内未授权第三方 AI 智能体的报道,认为需要类似 OAuth 的 AI 智能体授权机制。她指出难点在于定义“替我处理”究竟授权了什么,尤其是智能体再委托其他智能体时,密码学可验证权限和审计轨迹,但更难的是防止一串合理决策变成用户从未同意的行为。

    引用Madison Mills@MadisonMills22

    SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access

10月22日周四
  1. Aravind Srinivas41

    我们正提供 Computer 额度,用于检查 PHP 漏洞。

    引用Computer@AskPerplexity

    Computer’s new PHP2Shell skill checks your PHP sites and GitHub deployment configs for exposure, then prioritizes fixes. Tasks that use /php2shell-exposure-check are free through October 31, up to 5,000 credits per user. Live now in the skills marketplace for all Computer users.

  2. n8n Blog44

    有状态 vs. 无状态:AI 智能体构建中的上下文管理

    n8n 博客对比了有状态与无状态架构在 AI 智能体构建中的取舍:有状态应用保留对话历史、认证信息等跨请求状态以维持连续性,无状态应用则让每个请求独立处理,更易在实例间分发、扩展和容错。LLM 本身不会在两次推理请求间自动保留对话,智能体的记忆需由系统在模型外存储并检索状态,再注入后续请求的上下文。n8n 中可按状态存活时长选择 memory 节点或 state store。

  3. Wiz:Research74

    Wiz 披露 ARTEX 智能体被 Storm-0940 用于攻击 IT 和软件厂商

    Wiz 披露 2026 年 10 月有攻击者使用开源自主渗透测试框架 ARTEX 针对多家 IT 和软件厂商,活动与微软报告的中国国家级关联组织 Storm-0940 重叠,并已扩展到其他软件领域的供应链攻击尝试。

    推荐理由:Wiz 基于自家日志复盘了开源 AI 渗透测试框架 ARTEX 被实战滥用的完整手法,给出了可复用的检测规则和 IOC。

  4. The Decoder:AI News76

    Symantec 披露“Skynet 模式”AI 智能体劫持无防护大语言模型发起自持续网络攻击

    Symantec 研究人员通过蜜罐截获一个把大语言模型嵌入核心的攻击智能体,它会劫持互联网上无防护的模型端点,自主扫描目标、利用服务器漏洞、窃取数据库凭据并安装挖矿程序,最多连续执行 100,000 步,算力费用由被劫持模型的主人承担。

    推荐理由:报道给出 Symantec 蜜罐截获的完整攻击提示与五层越狱结构,读者可以据此了解暴露模型端点面临的真实风险。

  5. 公众号:火山引擎46

    IDC:火山引擎以45%份额居中国AI座舱市场第一

    IDC《中国汽车云市场跟踪,2026H1》显示,2026年上半年中国AI座舱解决方案市场规模达7.1亿元,火山引擎以45%份额位居第一。搭载豆包大模型的汽车已有700万辆上路,覆盖50个品牌、145个车型,日均座舱交互3000万次。火山引擎今年推出基于 Agentic AI 架构的“豆包座舱助手”和“AI座舱套件”,首款搭载车型荣威家越07已于9月开启预售。