
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@sapiom/agent-core
Advanced tools
Pure, stateless core functions for scaffolding, validating, and operating Sapiom agents — shared by the CLI and MCP packages.
A Sapiom agent, authored as code against @sapiom/agent.
npm install
Then open index.ts. The agent is defined with defineAgent({ steps }); each step is a defineStep({ name, next, run }). The run body is ordinary code — and inside it, the full Sapiom tool catalog is available, pre-auth'd and tenant-scoped, on ctx.sapiom:
const box = await ctx.sapiom.sandboxes.create({ name: "demo" });
const repo = await ctx.sapiom.repositories.create("my-repo");
No credentials to wire — a per-execution tenant credential is injected for each agent run.
Author and run this agent with the Sapiom dev tools:
ctx.sapiom.* calls resolved from stubs, iterating until completion without Sapiom capability spend. Ordinary code in the project can still make its own network or machine changes.npm run typecheck and npm run format are also available for editor-level checks.
See AGENTS.md for the full authoring loop.
FAQs
Pure, stateless core functions for scaffolding, validating, and operating Sapiom agents — shared by the CLI and MCP packages.
The npm package @sapiom/agent-core receives a total of 616 weekly downloads. As such, @sapiom/agent-core popularity was classified as not popular.
We found that @sapiom/agent-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.