<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/measuring-real-cost-per-agent-task-on-muse-ember-with-a-javascript-harness</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-10T00:00:00.000Z</news:publication_date>
      <news:title>Measuring Real Cost per Agent Task on Muse Ember With a JavaScript Harness</news:title>
      <news:keywords>ai-agents, inference-economics, muse-ember, javascript, llm-costs</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-consent-screens-and-cancellation-flows-for-the-eu-digital-fairness-act</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-10T00:00:00.000Z</news:publication_date>
      <news:title>Auditing Consent Screens and Cancellation Flows for the EU Digital Fairness Act</news:title>
      <news:keywords>eu-regulation, dark-patterns, consent-flows, ux-audit, compliance</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-575-malicious-openclaw-skills-where-agent-plugin-trust-boundaries-broke</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-10T00:00:00.000Z</news:publication_date>
      <news:title>Auditing 575+ Malicious OpenClaw Skills: Where Agent Plugin Trust Boundaries Broke</news:title>
      <news:keywords>openclaw, malware, supply-chain, agent-security, sandboxing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-expo-exacts-runtime-boundaries-on-web-macos-iphone-and-linux</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-10T00:00:00.000Z</news:publication_date>
      <news:title>Auditing Expo Exact&apos;s Runtime Boundaries on Web, macOS, iPhone, and Linux</news:title>
      <news:keywords>expo, react-native, typescript, cross-platform, runtime</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/instrumenting-agent-loops-for-cost-per-successful-task</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-09T00:00:00.000Z</news:publication_date>
      <news:title>Instrumenting Agent Loops for Cost per Successful Task</news:title>
      <news:keywords>agentic-ai, inference-cost, token-economics, observability, llmops</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/tracing-the-etherspherebee-js-1330-compromise-into-downstream-builds</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-09T00:00:00.000Z</news:publication_date>
      <news:title>Tracing the @ethersphere/bee-js 13.3.0 Compromise Into Downstream Builds</news:title>
      <news:keywords>npm, supply-chain-security, javascript, bee-js, dependency-management</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-a-shared-cpanel-estate-for-cve-2026-41940-exposure-windows</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-09T00:00:00.000Z</news:publication_date>
      <news:title>Auditing a Shared cPanel Estate for CVE-2026-41940 Exposure Windows</news:title>
      <news:keywords>cpanel, cve-2026-41940, vulnerability-management, hosting-security, exposure-auditing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/server-actions-and-flight-endpoints-auditing-rsc-trust-boundaries-after-the-authless-rce-report</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-09T00:00:00.000Z</news:publication_date>
      <news:title>Server Actions and Flight Endpoints: Auditing RSC Trust Boundaries After the Authless RCE Report</news:title>
      <news:keywords>react-server-components, server-actions, security, javascript, nextjs</news:keywords>
    </news:news>
  </url>
</urlset>
