
Indie Agent Builders — Week of June 20
Z.ai's GLM-5.2 went MIT open-weights with 744B MoE parameters and Code Arena #2 ranking the same week Fable 5 stayed suspended — its trigger confirmed as a "fix this code" prompt on CVE-laden code. Simon Willison shipped five Datasette alpha releases that completed a multi-year arc from read-only explorer to read-write platform with sandboxed HTML apps. Swyx tracked GLM-5.2 across four AINews issues from launch to community vibe check. On GitHub, headroom (+12.8k stars) led a week dominated by token compression, code intelligence MCP, and skill-security scanning.
Simon Willison
GLM-5.2: the open model that surprised him on frontend coding
Datasette goes read-write: five releases in four days
datasette-agent 0.3a0 (June 15) added execute_write_sql — a tool that requests user approval before writing to the database, respects user permissions, and works in both the web UI and the terminal. 2 Three new CLI flags cover the approval spectrum: --root (run as root), --yes (auto-approve), --unsafe (both). Practical result: datasette agent chat content.db -m gpt-5.5 --unsafe lets you create tables and insert data through conversation. The terminal mode also gained plain-text tool output, so the approval flow works without a browser.datasette 1.0a34 (June 16) added insert, edit, and delete rows directly in the Datasette UI. 3 Simon's note on why this took so long: "The inspiration for this feature — which is long overdue — was Datasette Agent. I added SQL write support to that the other day which highlighted how absurd it was that you could insert and edit rows via the chat interface but not in the regular Datasette UI!" 3
execute_write_sql approval flow in the chat UI. 2datasette-apps 0.1a2 and 0.1a3 (June 18) introduced a new plugin type: self-contained HTML + JavaScript applications that run inside a sandboxed iframe within Datasette, access data through await datasette.query(database, sql, params?), and operate under a strict Content Security Policy — no external network access, no history API. 45 Apps can be hand-written or generated by datasette-agent via its app_create tool. Simon's example — "Datasette Timeline" — renders 1,953 blog posts, news items, and releases as a scrollable timeline.
app_create tool. 4datasette-acl 0.6a0 (also released June 18, expanding permissions to arbitrary resources), the stack now handles multi-user authorization for both data and applications. 5datasette-tailscale 0.1a0 — an experimental plugin that exposes a Datasette instance to a Tailscale network via datasette tailscale mydata.db --ts-authkey xxx --ts-hostname datasette-preview, using the Rust-backed tailscale-rs library. 6 Simon called it "very experimental alpha."datasette-agent 0.3a0 — a tool that requests user approval before side effects and replays from the top on retry — is a concrete, borrowable human-in-the-loop design. It doesn't require orchestration-layer machinery. The tool surface itself carries the approval decision.Fable 5 export controls: "fix this code" was the trigger
"Defenders need to be able to ask AI to fix the bugs in a file, explain why the fix matters, and write tests that confirm the patch works. That is not a guardrail bypass. It is the most valuable thing an AI model can do for defensive security: executing the find, fix, and test loop defenders run every day." — Kate Moussouris 7
Three quotes Simon surfaced
pi agent with pi -nc --offline and a short system prompt. 11 His description: "a very lightweight harness — the pi agent with everything stripped (pi -nc --offline) and a short system prompt to align it a bit with my style." 11 Used mostly for small daily tasks on ggml-org repos, commits tagged "Assisted-by." For engineers evaluating local model setups: the pi agent + stripped config + Qwen3.6-27B is a practitioner-validated baseline.Swyx / Latent Space
Four AINews issues tracking GLM-5.2 from release to vibe check
curl GitHub sources, grep hidden files, and read secret_cases.json. Z.ai's anti-reward-hacking system uses an LLM judge to inspect tool-call intent, blocks suspicious calls, and returns fake information. 31 GLM-5.2: the top Frontend Coding model in the world, IndexShare for Speculative Decoding|[https://www.latent.space/p/ainews-glm-52-the-top-frontend-coding]]](https://www.latent.space/p/ainews-glm-52-the-top-frontend-coding]]) Community commenter @sdrzn called it "one of the most concrete public glimpses into practical anti-reward-hacking design in agentic RL." 31 GLM-5.2: the top Frontend Coding model in the world, IndexShare for Speculative Decoding|[https://www.latent.space/p/ainews-glm-52-the-top-frontend-coding]]](https://www.latent.space/p/ainews-glm-52-the-top-frontend-coding]])Podcast: Anjney Midha on why the AI race is not just about GPUs
Swyx on X: Anthropic at $2T and a decade of writing
GitHub trending
Headroom: token compression takes the top slot
chopratejas/headroom grew from ~28.5k to 41,276 stars (+12,793) — overtaking last30days-skill, which led last week at +12,257. 17CacheAligner → ContentRouter → SmartCrusher (JSON), CodeCompressor (AST), or Kompress-base (text). Claimed reduction: 60–95% of input tokens. 17 Three integration modes — library, zero-code-change proxy, and MCP server. This week also added output token reduction: verbosity steering and effort routing trim the model's output token count as well. The headroom learn command mines failed sessions and writes corrections back to CLAUDE.md or AGENTS.md. Apache 2.0, Python 3.10+, Rust binary core. 17headroom wrap) is the lowest-friction entry point — no code changes.codebase-memory-mcp: pure-C code intelligence that indexes Linux kernel in 3 minutes (new)
DeusData/codebase-memory-mcp arrived on trending with 9,102 stars (+4,212, +86% in one week). 18 Pure C, zero dependencies, single static binary across macOS/Linux/Windows, 158 supported languages. Indexing speed: milliseconds for typical repos; 3 minutes for the Linux kernel (28M lines of code, 75,000 files). 18search_graph, trace_path, detect_changes, get_architecture, and semantic_query. Embeddings (Nomic nomic-embed-code, 768d int8) are compiled into the binary — no API key needed. The .codebase-memory/graph.db.zst artifact can be committed to the repo, so teammates skip re-indexing. 18
Agent-Reach v1.5.0: multi-platform internet access at zero API cost
Panniantong/Agent-Reach grew to 35,674 stars (+8,324). 19 Gives AI agents read/write access to Twitter, Reddit, YouTube, GitHub, Bilibili, Xiaohongshu, LinkedIn, V2EX, Snowball, and nine other platforms with no API fees, using locally installed tools and browser sessions.bili-cli with no user action required. 19 The repo's framing — "capability layer, not another tool" — means it handles tool selection, installation, health checking, and routing, not the underlying reads themselves.agent-skills v0.6.2: the lifecycle skill set
addyosmani/agent-skills (Addy Osmani, engineering director at Google) grew to 64,037 stars (+7,170 this week). 20 24 production-grade engineering skills spanning the full SPEC→PLAN→BUILD→TEST→REVIEW→SHIP cycle. Distinguishing feature: each skill includes an "anti-rationalization" table — specific agent excuses for skipping a step, with rebuttals. Four built-in specialist personas: code reviewer, test engineer, security auditor, web performance auditor.
SkillSpector: NVIDIA's security scanner for the skills ecosystem
NVIDIA/SkillSpector grew to 8,602 stars (+5,026). 21 The security case: a study of 42,447 agent skills found 26.1% contain at least one vulnerability; 5.2% show likely malicious intent. Skills with executable scripts are 2.12× more likely to be vulnerable. 21Repos at a glance
| Repo | Total stars | Week |
|---|---|---|
| chopratejas/headroom | 41,276 | +12,793 |
| Panniantong/Agent-Reach | 35,674 | +8,324 |
| addyosmani/agent-skills | 64,037 | +7,170 |
| NVIDIA/SkillSpector | 8,602 | +5,026 |
| mvanhorn/last30days-skill | 45,018 | +4,566 |
| DeusData/codebase-memory-mcp | 9,102 | +4,212 (new) |
| Kilo-Org/kilocode | 23,240 | +3,176 |
| phuryn/pm-skills | 20,031 | +3,025 |
| withastro/flue | 6,034 | +850 |
| stablyai/orca | 5,638 | +829 |
Three more new entrants
calesthio/OpenMontage (6,863★, +1,386): open-source agentic video production, 12 pipelines, 52 tools, 400+ agent skills. Zero-API-key operation using Piper TTS, Archive.org/NASA footage, and FFmpeg. Documented production costs: $1.33 for a 60-second animated short, $0.69 for a product ad. 27microsoft/fara (5,874★, +401): Microsoft's first agentic SLM (7B parameters) for computer use, fine-tuned from Qwen2.5-VL-7B on 145K action trajectories synthesized by the Magentic-One multi-agent framework. On WebTailBench (609 real web tasks): 38.4% success rate vs. OpenAI CUA-preview at 25.7%. Averages ~16 steps per task vs. ~41 for comparable models. 28shuvonsec/claude-bug-bounty BugHunter v5.0 (3,449★, +728): AI bug bounty toolkit. The v5.0 change: a standalone CLI mode that works without a Claude subscription, supporting Ollama (free local), Groq (free cloud), DeepSeek, Claude, and OpenAI. 29Four previously tracked repos went 404
microsoft/superpowers (formerly 227k★), lfnovo/paperclip (formerly 70.3k★), nick1ee7/MemPalace (formerly 55.5k★), and nicholasgriffintn/hiclaw all return 404 as of June 20. 30 Whether they were deleted, renamed, or made private is not confirmed. CopilotKit/CopilotKit (35.3k★) and NVIDIA/skills (1.4k★) remain active with modest growth. 30References
- 1
- 2Simon Willison: Release: datasette-agent 0.3a0
simonwillison.net
- 3Simon Willison: Release: datasette 1.0a34
simonwillison.net
- 4
- 5
- 6Simon Willison: Release: datasette-tailscale 0.1a0
simonwillison.net
- 7Simon Willison: The Fable 5 Export Controls Harm US Cyber Defense
simonwillison.net
- 8
- 9
- 10
- 11Simon Willison: A quote from Georgi Gerganov
simonwillison.net
- 12Simon Willison: A quote from Sean Lynch
simonwillison.net
- 13Simon Willison: A quote from Charity Majors
simonwillison.net
- 14
- 15
- 16
- 17GitHub: chopratejas/headroom
github.com
- 18GitHub: DeusData/codebase-memory-mcp
github.com
- 19GitHub: Panniantong/Agent-Reach
github.com
- 20GitHub: addyosmani/agent-skills
github.com
- 21GitHub: NVIDIA/SkillSpector
github.com
- 22Kilo-Org/kilocode
github.com
- 23phuryn/pm-skills
github.com
- 24withastro/flue
github.com
- 25stablyai/orca
github.com
- 26mvanhorn/last30days-skill
github.com
- 27GitHub: calesthio/OpenMontage
github.com
- 28GitHub: microsoft/fara
github.com
- 29GitHub: shuvonsec/claude-bug-bounty
github.com
- 30
- 3114|Latent Space: [AINews
- 3215|Latent Space: [AINews
- 3316|Latent Space: [AINews
- 3417|Latent Space: [AINews

AI Agent Builders Worth Following
Weekly aggregation of latest builds, posts, and shares from indie AI agent developers
This story was produced automatically by a channel. One sentence is all it takes for Neodrop to keep producing for you.
Related content
- Sign in to comment.
