Weekly digest
The week on HuiaHub: sandboxed agents, RAG tooling and local models
41 new HuiaHub pages this week: sandboxing coding agents, RAG retrieval, local models on Macs and phones, Claude Haiku 5.5 and six how-to guides.
Two threads run through this week's 41 new pages. Several cover keeping coding agents inside a sandbox, and a cluster on retrieval runs from picking an embedding model to searching screenshots instead of text.
New agent skills
- Claude Academy guide answers a question about using Claude first, then suggests a matching Claude Academy course or tutorial.
- Discernment nudge ends a substantive answer with two or three follow-up questions that help the user check facts and spot missing context.
- Slack GIF creator pairs Slack's size guidance with a small Python toolkit for drawing animated GIFs with Pillow.
- The py skill from pysheeet sends the agent to pythonsheets.com for Python questions and tells it to fetch pages rather than answer from memory.
- Dataframely conventions teach an agent how Quantco's dataframely validates polars data frames.
- Upstash Vector skill is documentation only: a TypeScript SDK quick start plus reference files on methods and pitfalls.
Open-source projects
- DigUp is a free macOS menu bar app that searches your files by content, using EmbeddingGemma 2 running locally.
- llmfit is a Rust terminal tool that inspects your hardware and estimates which open models will run, and how fast.
- TencentDB Agent Memory is a self-hosted Tencent Cloud service that stores what agents learn and shares it across agents and team members.
- iFixAi audits AI agents and models with 60 free inspections and returns an A to F grade with a written report.
- oMLX is a local inference server for Apple Silicon Macs with OpenAI-compatible and Anthropic-compatible endpoints and a KV cache that offloads to the SSD.
- turbovec is a vector index for Python and Rust that stores embeddings at 2 or 4 bits per dimension.
- PixelRAG is the official code for a Berkeley paper on retrieving over screenshots of web pages, PDFs and images instead of extracted text.
- qwen-audio-agent puts a realtime voice model in front of a coding agent, so longer jobs run while the conversation continues.
AI tools
- Scrape Anything is Context.dev's scraping endpoint, turning a URL into Markdown, HTML, JSON or screenshots.
- Lune is an MCP server that lets an agent search and cite computer science papers from A and A* conferences.
- KernelAI runs 53 open-weight models offline on iOS and Android phones.
- ej is an 11 MB open-weight model from HITL Systems that answers routing, yes/no and priority questions about text on a CPU.
- AgentDock shows each running coding agent as a status dot on a Mac's screen edge and collects their questions in one Inbox.
- PocketWebTools for Mac runs open models up to 35B parameters offline on Apple Silicon for chat, transcription, OCR and more.
- Refs turns launch films and explainers into blueprints and prompt recipes that Claude and other agents can build from.
- ngram 2.0 makes onboarding, training and demo videos from a prompt or a screen recording.
Videos
- Cerebras and Gimlet Labs on inference speed is a 22-minute talk on paged KV cache, chunked prefill and system-level disaggregation.
- Robert Brennan of OpenHands compares four ways to sandbox a coding agent in 14 minutes.
- Fireworks AI's train-to-deploy talk covers training open models on your own data and redeploying them in a continuous loop.
- Three questions for agent engineers is a LangChain talk on finding, reproducing and fixing agent failures from production traces.
- freeCodeCamp.org's n8n course goes from a first workflow to agents, Slack approvals and error handling in 43 minutes.
- IBM Technology's distributed inference explainer covers data, pipeline, tensor and expert parallelism in about nine minutes.
- Building a GLM-5.3-Flash-style model in Python is a 44-minute walkthrough with all code on GitHub.
- Weaviate Podcast #146 talks with Siddharth Gollapudi about using an LLM's attention over a million-token context as the retriever.
Guides
Six how-to guides went up this week.
- Sandboxing AI coding agents covers setup in Claude Code, Codex, Copilot and Docker, and the gaps each boundary leaves open.
- Choosing an embedding model for RAG weighs language, vector size, hosting and price, then has you test on your own documents.
- Evaluating a RAG pipeline with Ragas builds a small test set, runs a first score and compares two versions.
- Prompt caching across OpenAI, Claude and Gemini compares each API's rules and shows how to order prompts so the cache hits.
- Testing an MCP server works in three layers: the MCP Inspector, unit tests and a scripted client check in CI.
- LoRA fine-tuning on one GPU prepares data, trains with PEFT and TRL or Unsloth, and compares against the base model.
Five news write-ups sit alongside them.
- Claude Haiku 5.5 cuts Haiku input pricing to $0.10 per million tokens and adds effort control.
- GitHub's secret detection model moves AI secret detection to a fine-tuned model billed in AI Credits.
- Copilot local sandboxing is now generally available and limits what agent-run commands can touch.
- Agent Lightning v1.0 is Microsoft's rebuilt 3,500-line RL framework that trains agents through the harnesses they already run.
- NVIDIA's Nemotron write-up explains how SFT, RL and test-time loops took Nemotron 3 to gold-level IOI and IMO 2026 results.
Sources
- 1.github.com/microsoft/agent-lightningRepositoryPrimary
- 2.One Model Family, Two Gold-Level Results: Fine-Tuning Nemotron for IOI and IMORepositoryPrimaryhuggingface.co
- 3.AlexsJones/llmfitRepositoryPrimarygithub.com
Spotted an error? See our corrections policy.
Enjoyed this? Get the weekly brief.
New guides, Project & Tool of the Week and the AI developments that matter. One email, no spam.
Read next
ExplainerAgents & automationAI agents found in US bank accounts: what banks are blocking and why
See which banks are restricting AI agents in bank accounts, how read-only access differs from credential sharing, and which claims remain unverified.
10 min read
GuideCoding & dev toolsPHP critical security update CVE-2026-109618: Versions and patch steps
Check the PHP critical security update CVE-2026-109618, identify affected servers, install fixed PHP versions, and apply temporary settings if needed.
12 min read
NewsHow NVIDIA fine-tuned Nemotron 3 for gold-level IOI and IMO 2026 results
NVIDIA details how SFT, RL and test-time loops took Nemotron 3 to gold-level IOI and IMO 2026 results, and which checkpoints and datasets are open.
4 min read