How a hidden prompt injection in CONTRIBUTING.md revealed that 40% of pull requests to a popular GitHub repository were generated by AI bots

Relevant since we started outright rejecting agent-made PRs in awesome-selfhosted [1] and issuing bans for it. Some PRs made in good faith could probably get caught in the net, but it’s currently the only decent tradeoff we could make to absorb the massive influx of (bad) contributions. >99.9% of them are invalid for other reasons anyway. Maybe a good solution will emerge over time.

  • A_norny_mousse@piefed.zipEnglish
    61·
    6 hours ago

    The blogger hosts awesome-mcp-servers which does not seem to have anything in common with the poopular awesome-selfhosted series except the name.

    Not sure where the connection is (the above blurb is not part of the article text). Is it @[email protected] themselves?

    And just to clarify:

    MCP is an open protocol that enables AI models to securely interact with local and remote resources through standardized server implementations. This list focuses on production-ready and experimental MCP servers that extend AI capabilities through file access, database connections, API integrations, and other contextual services.

    • vegetaaaaaaa@lemmy.worldOPEnglish
      3·
      3 hours ago

      The blurb is my own submission, since it was not so evident how the article was related to self-hosting. I am not the author of the blog post. I am a maintainer of awesome-selfhosted.