FIND-20260404-014 · 2026-04-04 · Innovation Veille
block/goose — Extensible Open-Source AI Agent in Rust with MCP Support (35k stars)
trending-repo
HIGH
block/goose is an open source, extensible AI agent written in Rust by Block (Square). It goes beyond code suggestions by supporting installation, execution, editing, and testing tasks with any LLM. The agent supports MCP (Model Context Protocol) enabling tool integrations. It gained 947 stars today (+2.7%) on 35,480 total. Active red-team research by Block discovered prompt-injection vulnerabilities via hidden Unicode in recipes — mitigations are now in place (Unicode detection, desktop alerts). The agent is used by all 12,000 Block employees connected to corporate systems.
Source
https://github.com/block/goose
ODS Impact
Relevant to ODS agent infrastructure (ADLC pipeline). Goose's MCP-first architecture and Rust implementation align directly with ODS tech choices. Its extensible tool system could be evaluated as an alternative or complement to the custom /agent framework for automated dev tasks. The security red-team findings (prompt injection via Unicode in recipes) are directly applicable to ODS agent design — ensure all agent inputs are sanitized for hidden Unicode characters.
Security Review
License: Apache-2.0 | Maintenance: ACTIVE | Risk: MEDIUM | Recommendation: USE_WITH_CAUTION
Tags
rust
ai-agent
mcp
llm
trending
open-source
block