Aug 24–30, 2026

One plugin directory now feeds both ChatGPT and Codex, bundling skills, connectors and MCP tools — and the Apple Messages plugin shows how far that reach extends into a user's own machine.

Cursor's cloud agents now subscribe to PRs, Slack threads and schedules, waking on events and holding a goal — which moves the unit of work from a prompt to a standing subscription.

Exa publishes one hosted MCP endpoint that drops its web search, code search and agent tools into Cursor, VS Code, Codex, Claude Code, Grok Build, OpenCode and more.

Firecrawl's Developer Index puts 70M+ docs, READMEs, issues and merged pull requests behind one query surface, indexing the bug threads where runtime symptoms are actually explained.

GitHub's Slack integration now starts Copilot agent sessions that triage issues, fix failures in a cloud sandbox and open pull requests, with GitHub as a launch partner for Slack Code.

Antigravity 2.0 adds first-class custom agents to the IDE and CLI, betting that specialised agents that act, verify and run in parallel beat one general-purpose assistant.

OpenAI previewed Private Safety Processing so abuse patterns can be detected across related interactions without staff reading customer content, keeping Zero Data Retention available.

An unattributed model called ox-alpha took the top of OpenCode usage with 36T tokens at zero recorded spend, showing that free access plus a 94% cache ratio moves usage before provenance does.

Vercel Agent now answers in Slack threads with deployment, log and metric context already loaded, turning an incident conversation directly into changes a human approves.

A practical routing contract for loading agent skills only when measured task evidence predicts a net benefit.

A leaderboard needs isolation, path evidence, contamination checks, adversarial audits, and versioned corrections around every score.

Claude Enterprise admins can now authorize MCP connectors once through an identity provider, so users inherit connector access from IdP groups instead of granting it themselves.

The MCP maintainers published an updated roadmap whose groundwork has already shipped, putting stateless servers, pre-connection discovery and agent identity at the centre of protocol work.

Vercel is paying up to $1M over two weeks to anyone who escapes its Sandbox, on the argument that a microVM without host-side network controls is only half an isolation boundary.

Anthropic moved Mythos-class cyber capability into Claude Security behind safety classifiers, turning a model's offensive potential into an access-control decision rather than a release note.

A real assessment shows why agent containment must extend beyond a disposable virtual machine.

Google DeepMind's pilot uses confidential computing so evaluators keep prompts private while the model owner keeps proprietary weights private.

Benchmark integrity requires runtime enforcement even when explicit instructions reduce some reward-hacking behavior.

Current evidence supports longer bounded agent runs, but not reliable unattended work across weeks.

Two similarly named document benchmarks use different datasets and metrics, so their scores do not form one leaderboard.

Portable Computer keeps orchestration, models, search state, and private work on device, escalating selected tasks to cloud services only with permission.

LangChain separates world knowledge, task specifications, environments, and graders so teams can continuously build representative agent evaluations.

MHS proposes a model-agnostic interface for agents to operate programmable laboratory and manufacturing equipment under explicit safety constraints.

Figure is building a global human-contributed video pipeline as a proprietary training-data layer for its Helix humanoid system.

GitHub's maintainer account shows how agent-generated contribution volume changes review, trust, and supply-chain work for a fast-growing project.