AI Agent Security, Open-Source Code Generation, and Frontier Models on Bedrock

AI Agent Security, Open-Source Code Generation, and Frontier Models on Bedrock Today's Highlights This week highlights a new security scanner for AI agent skills, the open-source release of Xiaomi's MiMo Code model, and the general availability of OpenAI's GPT-5.5 and Codex on Amazon Bedrock. These advancements empower developers with practical tools and platforms for building, securing, and deploying applied AI solutions. SkillSpector — Vendor-Backed Security Scanner for AI Agent Skills (Dev.to Top) Source: https://dev.to/alya_mahalini_f05d9953cfa/skillspector-vendor-backed-security-scanner-for-ai-agent-skills-well-scoped-but-dependent-on-4530 SkillSpector is introduced as a security scanner designed to analyze AI agent skills before their deployment. These skills, often packaged as code or configuration bundles, are utilized by large language models like Claude, Codex, and Gemini to extend their capabilities and interact with external systems. The scanner's primary function is to detect potential vulnerabilities within these bundles, aiming to prevent security exploits in production AI agent systems. It focuses on well-scoped issues but relies on static patterns for detection, suggesting a rule-based approach to identifying common pitfalls in agent skill development. The tool addresses a critical emerging need in the AI lifecycle: securing the extensible components of AI agents. As AI agents gain more autonomy and access to external tools, the integrity and security of their "skills" become paramount. SkillSpector offers a way for developers and security teams to vet these components, helping to build more robust and trustworthy AI applications. While the article notes its dependency on static patterns, implying potential limitations for novel attack vectors, it represents a concrete step towards formalizing security practices for AI agent orchestration and deployment, moving beyond just the LLM itself to the code it executes. Comment: This is a crucial tool for a