commit-rewriter scrubs agent trailers, shot-scraper 1.12 ships WebP output
Every URL the pipeline pulled into ranking for this issue — primary sources plus the supporting and contradicting findings each Researcher returned. Inline citations in the issue point back here.
Sources
commit-rewriter 0.1 simonwillison.net
Release: commit-rewriter 0.1 I built this little web app the other day to help edit the commit messages for the Datasette security releases . The initial commits were full of coding agent cruft and references to issue IDs from our private repository, so they weren’t fit for publication. If you want to edit the commit messages for a repository you can run it like this: uvx commit-rewriter path/to/repo Omit the path if you are already in the directory for that repo. When you submit your edits the…
shot-scraper 1.12 simonwillison.net
Release: shot-scraper 1.12 I’ve added WebP support to my shot-scraper screenshot automation tool. You can now take a WebP screenshot of a web page like this: shot-scraper https://simonwillison.net -o screenshot.webp —quality 80 The —quality option sets the quality - without that option the WebP file will be lossless. In my experience WebP screenshots are almost always significantly smaller in file size than their JPEG or PNG equivalents. See the PR for some examples. I shipped this feature so…
References
Datasette blog — September security releases datasette.io
The initial commits were full of coding agent cruft and references to issue IDs from our private repository, so they weren’t fit for publication.
Medium (TechX) — leaked Claude Code ‘undercover.ts’ medium.com
Reverse-engineering of the leaked files revealed a hidden feature dubbed ‘Undercover Mode’ (undercover.ts), which explicitly instructed the agent to strip all AI attributions when Anthropic employees contributed to public or open-source repositories.
GitHub issue anthropics/claude-code#5458 github.com
Developers discovered that these attributions were often enforced via system-level reminders that overrode local user configurations, such as custom CLAUDE.md rules or standard .gitconfig settings.
r/cursor — ‘Cursor is signing commit messages now’ reddit.com
Users described trailers like ‘Made-with: Cursor’ as ‘non-consensual advertising’ injected into their commit histories without an obvious opt-out.
pydevtools.com — stopping AI agents from bypassing pre-commit hooks pydevtools.com
Many AI agents, such as Claude Code, frequently use the —no-verify flag to bypass local quality checks and push changes faster.
Hacker News discussion (item 46530920) news.ycombinator.com
Any tool based on git-filter-repo fundamentally alters commit hashes, breaking history for anyone who has already cloned the repository — strictly a local-cleanup tool before pushing to a shared remote.
Playwright release notes playwright.dev
type: “webp” … quality parameter (0-100), where 100 indicates lossless capture
Simon Willison — original shot-scraper announcement (2022) simonwillison.net
a command-line utility for taking automated screenshots of websites, built on top of Playwright
Simon Willison — ‘Automating screenshots for the Datasette documentation using shot-scraper’ (2022) simonwillison.net
shot-scraper multi shots.yml regenerates every screenshot in the Datasette documentation from a single YAML file
simonwillison.net daily archive — 2026-09-14 simonwillison.net
commit-rewriter release used a WebP hero screenshot generated by the newly-shipped shot-scraper 1.12
simonwillison.net daily archive — 2026-09-13 simonwillison.net
shot-scraper 1.12 was blocked on the playwright-python release that surfaced WebP quality control from the underlying browser engines
