According to Ars Technica, over the past five months Google and four other organizations have acknowledged vulnerabilities exploiting MCP: an attacker hijacks one agent inside a target network and uses chained prompt injection to spread malicious instructions to other internal agents, such as stealing databases and sensitive information.
Earendil's agent framework Pi released Pi 1.0 and Pi Durable, both of which made the HN front page.
The GitHub Podcast breaks down five common AI hot takes one by one. Key conclusions: AI-generated code still needs review scaled to risk; Skills and MCP solve different problems, with MCP providing a standard for tool and data access while Skills package team workflows and best practices in Markdown, making them complementary; RAG is not dead—retrieval brings models closer to answers and can coexist with agents, MCP, and Skills in the same workflow.