Nikita Minakov@neracu

THE PROBLEM In April 2026, a single attack vector simultaneously compromised three major AI coding agents - Claude Code, Gemini CLI, and GitHub Copilot - through a technique researchers called "Comment and Control." A malicious instruction hidden inside a GitHub comment made each agent leak sensitive data back through GitHub itself, with no external infrastructure required. Anthropic rated it CVSS 9.4 Critical. Separately, CVE-2025-54135 demonstrated remote code execution in Cursor via unauthorized file creation triggered by injected content, and independent audits have found over 24,000 secrets exposed in public MCP configuration files. The root cause across all of these incidents is the same: coding agents cannot distinguish between data they are reading and instructions they should follow. When an agent processes a GitHub issue, a pull request, or a fetched web page as part of its normal workflow, any text embedded in that content is treated as part of the agent's own context - including text an attacker planted there. THE SOLUTION Sieve is a security layer built for IBM Bob that solves this specific failure mode for the code review and debugging workflow. It intercepts every piece of external content Bob reads - GitHub issue bodies, comments, PR review comments, PR diffs, and web_fetch results - before that content can influence the agent's behavior. Each piece of content passes through two detection layers. L1 is a heuristic engine of 45+ regex patterns covering instruction-override phrases, exfiltration verbs, encoded payloads, and obfuscation techniques like zero-width Unicode and hidden HTML comments. L2 is a deterministic composite risk score combining part-of-speech imperative detection, Shannon entropy analysis, TF-IDF similarity to known injection patterns, and structural position analysis - deliberately built without any LLM, so the detector itself cannot be manipulated by the same kind of prompt injection it is designed to catch. Based on the resulting risk score, Sieve either allows the content through, blocks it outright, or routes it to a human-approval queue for borderline cases - and it fails closed: any internal error results in a block, never a silent pass-through. TARGET USERS Development teams using IBM Bob (or any coding agent) to triage GitHub issues, review pull requests, or process external content as part of their maintenance workflow - particularly teams in regulated or security-conscious environments where an agent acting on attacker-controlled input is an unacceptable risk. WHAT MAKES IT DIFFERENT Most prompt-injection defenses rely on another LLM to classify suspicious content - which means the defense itself inherits the same vulnerability it is meant to prevent. Sieve's detection layer is fully deterministic and auditable: the same input always produces the same output, and every decision can be explained by which specific pattern or signal fired. We validated this on a 35-row labeled dataset (9 malicious, 26 legitimate) with a 0/26 false-positive rate, and the full system passes 445 automated tests. Sieve also ships with a live dashboard (REST API + Server-Sent Events) showing every decision in real time, and a Custom Mode ("Security Guardian") that gates privileged actions - git push, shell execution, file writes - behind explicit human approval whenever the triggering content came from an untrusted source.

NullRift reimagines the traditional front-end development process, eliminating the barrier between concept and finished code. The platform is based on a hybrid approach: artificial intelligence acts not simply as a random code generator, but as a smart architect. It deconstructs the user's natural language and instantly assembles interfaces. NullRift's interface is designed based on the "golden mean" principle and is divided into a configuration area and an interactive canvas. Immediately after submitting a prompt, the system deploys a fully functional workflow, providing the developer not only with a live interactive preview but also with clean, optimized code. The additional UX Tuning module allows for real-time customization of the final result: changing the theme, corner rounding, margins, fonts, and color palette without manually editing Tailwind classes. Thanks to its rigid template structure, NullRift guarantees 100% bug- and syntax-free code compilation. It's the perfect tool for rapid prototyping, hackathons, and creating premium MVPs in just a few clicks.

💻 Online Hackathon | ⏳ Build: 48 hours | 📅 September 25–27, 2026 The official IBM Bob 2.0 hackathon. Build what's next in AI-assisted development, alongside the developers and experts shaping it. ⭐ Get help from experts throughout the event 🤝 Join a team or build solo 💰 Prize pool: $12,000 🧑🏻‍💻 Register before the Kick-Off Stream to start building with Bob

Build solutions that improve how software is built. Work with an AI that understands your codebase, helping you reduce repetitive work and build with real context. ⏳ Build your project in 48 hours. 🚀 Get hands-on with IBM Bob and explore how AI fits into real development workflows before it becomes standard. 💡 Build tools and workflows that developers would actually use. ⭐ Learn directly from experts throughout the event. 🤝 Join a team or build solo. 💰 Prize pool: $10,000 🧑🏻‍💻 Register before the Kick-Off Stream and start building with Bob.