2 links tagged with all of: open source + security + anthropic
Click any tag below to further narrow down your results
Links
Anthropic is offering free, fully model-generated security scans to eligible open source projects through a new program called OSS Scanner, with reports delivered without human triage. Early testers say the findings were mostly valid, though the company admits some reports will be wrong.
- Anthropic's models found over 29,000 candidate vulnerabilities in six months, but only about 6,000 have been manually reviewed, so human review is the bottleneck.
- OSS Scanner reports go out unverified, but in a pilot, 85 of 97 critical and high-severity findings (88%) met the bar for Anthropic's disclosure process, and only one was a false positive.
- Eligible projects get reports with a reproducer, an explanation, and often a candidate patch; several maintainers said the reports were high quality, and some chained bugs into unauthenticated remote code execution.
User feedback is highly valued and taken seriously by the team. For a comprehensive list of available qualifiers, users are directed to the documentation. An error occurred while loading the page, prompting a reload.
- The page failed to load properly, so the actual leaked Anthropic system prompt content isn't accessible in this summary
- The repository (x1xhlol/system-prompts-and-models-of-ai-tools) compiles system prompts from AI tools, positioning it as a reference resource rather than original commentary