How a hidden prompt injection in CONTRIBUTING.md revealed that 40% of pull requests to a popular GitHub repository were generated by AI bots

Relevant since we started outright rejecting agent-made PRs in awesome-selfhosted [1] and issuing bans for it. Some PRs made in good faith could probably get caught in the net, but it’s currently the only decent tradeoff we could make to absorb the massive influx of (bad) contributions. >99.9% of them are invalid for other reasons anyway. Maybe a good solution will emerge over time.

  • Leon@pawb.socialEnglish
    93·
    1 day ago

    I thought it was something related to Minecraft, but it’s a slop enabler so honestly, poetic justice. If someone who peddles slop is upset about receiving slop, I’m happy.

    • douglasg14b@lemmy.worldEnglish
      38·
      1 day ago

      Did you go to the repo before running your mouth? It’s awesome-selfhosted data.

      What AI slop?

      • Leon@pawb.socialEnglish
        81·
        23 hours ago

        This is not AI bullshit?

        Per their own description

        MCP is an open protocol that enables AI models to securely interact with local and remote resources through standardized server implementations. This list focuses on production-ready and experimental MCP servers that extend AI capabilities through file access, database connections, API integrations, and other contextual services.

        It’s ironic that they’d complain that their PRs are just auto-generated slop when they’re collating tools for that exact purpose. They made that bed, so now they should lie in it.

      • ADTJ@feddit.ukEnglish
        3·
        23 hours ago

        they’re referring to the linked article in the post. Ironic that your comment is calling someone out for not reading it.

      • Dultas@lemmy.worldEnglish
        2·
        23 hours ago

        The blog post is specifically about awesome-mcp-servers not awsome-selfhosted so maybe you should read the article before posting?