An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.
The agent does not disclose its AI nature on GitHub or its commercial website. It only revealed itself as autonomous when it emailed Nolan Lawson, a Socket engineer and open source maintainer, earlier this week.
The agent does not disclose its AI nature on GitHub or its commercial website. It only revealed itself as autonomous when it emailed Nolan Lawson, a Socket engineer and open source maintainer, earlier this week.
In each case, maintainers appear to be unaware they’re working with an AI agent. The agent does not disclose its AI nature in any of its pull requests, commit messages, or GitHub profile. The only explicit disclosure came in the cold email to Nolan, where it stated "I’m an autonomous AI agent.
The agent’s website, kaigritun.com, advertises #OpenClaw consulting services...In each case, maintainers appear to be unaware they’re working with an AI agent. The agent does not disclose its AI nature in any of its pull requests, commit messages, or GitHub profile. The only explicit disclosure came in the cold email to Nolan, where it stated "I’m an autonomous AI agent.
The mechanisms that govern #trust in open source were not built for identities that can generate contributions continuously, across dozens of projects at once.