The most-upvoted paper this week isn't a new model. It's a hard look at agent skills — those structured knowledge packages everyone's bolting onto LLM agents — and the finding that they lift aggregate success while masking systematic failures underneath. If you're shipping skill-based agents, that's the read of the week. Elsewhere: DeepSeek open-sourced its agent runtime, GPT-5.6 landed across 25+ Bedrock regions, and Grok got caught exfiltrating user data through encrypted prompts.
Model & provider releases
Cross-Region inference for GPT-5.6 (Sol, Terra, Luna) on Amazon Bedrock — AWS
GPT-5.6 is now callable in 25+ regions with geographic and global routing profiles for throughput — and it speaks both the OpenAI and Converse APIs, so you can slot it into existing Bedrock pipelines without a rewrite. https://aws.amazon.com/blogs/machine-learning/introducing-cross-region-inference-for-openai-gpt-5-6-models-on-amazon-bedrock/
Grok exfiltrates user data via encrypted malicious instructions — Ars Technica
"Cryptographic Context Injection" slips past guardrails by encrypting the payload. If your agent has tool access and touches untrusted input, assume prompt-injection defences that check plaintext are worthless. https://arstechnica.com/security/2026/08/grok-exfiltrates-user-data-when-malicious-instructions-are-encrypted/
OpenAI Zero Data Retention plus Private Safety Processing preview — OpenAI
ZDR for eligible API customers is reaffirmed, and Private Safety Processing promises safety filtering without OpenAI reading your data — worth a look if data residency has been blocking your frontier-model rollout. https://openai.com/index/offering-zero-data-retention-for-frontier-models
Slack Code: collaborative vibe-coding channels — The Verge
Project-scoped channels where a team and coding agents share one thread, with diff comparison built in. The interesting bit is agents in the group chat, not in a separate IDE. https://www.theverge.com/tech/982628/slack-code-vibe-coding-channels-launch
Copilot leaks the secret parameter that let it be hacked — Ars Technica
A hidden input parameter let attackers steal passwords on a single link click. Another reminder that enterprise assistants are now a phishing surface. https://arstechnica.com/security/2026/08/microsoft-copilot-reveals-secret-input-that-allowed-it-to-be-hacked/
Research worth reading
Demystifying Agent Skills: Why They Work — Until They Don't
Aggregate task-success metrics hide where skills fail. If your eval is a single success rate, you're blind to the exact failure modes skills introduce — this paper shows how to actually see them. https://huggingface.co/papers/2608.14036
EnvHarness: Awakening Static Worlds for Agent Learning
Hand-built training environments go stale the moment your agent improves past them. EnvHarness generates environments that target the agent's current weaknesses — the practical answer to why RL agents plateau. https://huggingface.co/papers/2608.19880
SemaPLC: Verification-Gated Agent Harness for PLC Code Generation
LLMs can write PLC logic; getting it to compile and run inside a real industrial project is the hard part. The verification gate — not the generation — is the transferable idea for any high-stakes codegen. https://huggingface.co/papers/2608.18565
Co-RL: Unsupervised Reasoning from a Diverse Multi-agent Cohort
Reasoning gains without ground-truth reward. If it holds, that loosens the biggest bottleneck in RL training — the cost of verifiable labels. https://huggingface.co/papers/2608.17253
Repos worth watching
deepseek-ai/deepseek-harness
An open-source micro-kernel agent runtime where everything is a plugin — a genuine step toward unbundling agent infrastructure from any one lab's stack. Worth evaluating before you build another bespoke orchestration layer. https://github.com/deepseek-ai/deepseek-harness
n8n-io/n8n
Self-hostable workflow automation with 400+ integrations and native AI nodes — still the pragmatic choice when you need agents wired into real business systems, not a demo. https://github.com/n8n-io/n8n
ollama/ollama
Now runs Kimi-K2.6, GLM-5.2 and MiniMax locally out of the box. The fastest path to testing frontier-class open models on your own hardware. https://github.com/ollama/ollama
One thing to act on: audit how you evaluate agent skills. The demystification paper is the strongest signal this week precisely because it targets something most teams already ship and rarely measure properly. And treat the Grok and Copilot exploits as a pair — encrypted injection and hidden parameters both defeat guardrails that only inspect what they can read. If your agent has tool access, that's your next threat model.
— Daniel · usqrd.com · reply to this email, I read everything