AI agents are getting wallets, and a permission prompt is already lying to one. Claude Code's VS Code plugin shows a symlinked path as inside your workspace when it resolves outside it, so a prompt-injected agent could reach ~/.ssh. Reported unpatched as of v2.1.322 (UltraStrike). The CLI shows the real location. https://ultrastrike.io/2026/11/claude-code-vscode-plugin-workspace-escape-via-misleading-permission-prompt/ Brave Search API now takes x402 payments: no account, no API key, an agent pays $0.005 per request in USDC. https://brave.com/blog/search-api-agentic-payments/ LibreAGI is a private torrent tracker for keeping copies of open models alive if their hosts vanish. https://libreagi.com/ Daily reads like this: t.me/kazanireads

Claude Code VSCode Plugin: Workspace Escape Via Misleading Permission PromptImagine an AI coding tool asks you for permission to access a file. You look at the approval prompt and notice the file path appears to land in the current workspace. You shrug, wondering why the agent asked for access to the current workspace, and you click to approve. But without realizing it, youultrastrike.ioThe Brave Search API now accepts agentic payments via the x402 protocol | BraveDevelopers and AI agents can now pay for the Brave Search API on demand with USDC via the open x402 protocol, settling each query in real time without an account or API key.brave.comLibreAGIA private BitTorrent tracker where members keep copies of the open models most likely to disappear.libreagi.comt.met.me