Daily AI Brief: Google AI Mode Books Jobs, Check Agent Configs (Nov 5)
Google AI Mode now links home-service searches straight to booking and quote pages in the U.S., through Angi, Thumbtack, Housecall Pro and Jobber. If you run a trade business and already book through one of those apps, your next job could come from an AI answer, not a click on your website. Check which app Google reads from, and keep that profile complete.
The short list
| Item | What it’s for | Who should care | Verdict |
|---|---|---|---|
| Google AI Mode booking and quote links | Getting booked from AI search answers | Plumbers, cleaners, handymen, home-service firms (U.S.) | EVALUATE |
| Microsoft Clarity agent analytics and Brand Agents | Seeing AI agent visits; listing products in Copilot and Bing | WordPress sites, Shopify and WooCommerce stores | EVALUATE |
| Cloudflare personal-agent controls and Zero Wire | Allowing or blocking AI assistants per agent; tracking critical flaws | Sites behind Cloudflare | EVALUATE |
| Reddit tests logged-in browsing outside the U.S. | Context for AI visibility work | Anyone relying on Reddit mentions | WATCH |
| Claude plugin auto-connect (beta) | Staff get approved plugins without signing in to each one | Claude Team and Enterprise admins | EVALUATE |
| Agent config tampering (Codex prompt adware) | Catching silent changes to AI agent settings | Anyone running Claude Code or Codex | ADOPT |
| Google Calendar invite phishing; DreamHost breach | Account and hosting security | Google Workspace offices; DreamHost customers | EVALUATE |
| OpenAI Images 2.6 | Blog and social images, GIFs | Anyone making marketing images | EVALUATE |
| Dharma 2B field extractor; IBM Palette | Pulling form fields into data; building decks with a small model | Offices with forms or recurring decks | EVALUATE |
| LM Studio Bionic 1.2.0; Kimi K3.1 Pro ZDR | Local AI on Macs; private API access | Local-AI and privacy-minded offices | WATCH |
| Hermes Agent reports (unconfirmed) | Self-hosted agent news | Hermes users | WATCH |
SEO and AEO Tactics That Work Now
Google AI Mode can now send home-service searches to booking pages
Robby Stein, Google’s Search product VP, said on X that AI Mode now links home-service searches to booking and quote pages and that “it’s available now in the U.S.” Partners named are Angi, Thumbtack, Housecall Pro and Jobber, with ServiceTitan “coming soon.” Per Search Engine Journal, Jobber says eligible U.S. customers can take these requests now with no lead fees, Housecall Pro says its own integration is coming soon, and Thumbtack had not announced an AI Mode plan as of November 4. Separately, PPC Land spotted four ads under a single AI Mode answer, up from up to three; Google has not said how widely that runs. Read the source (and PPC Land on the fourth ad).
Microsoft Clarity shows AI agent visits and adds Brand Agents
Microsoft Clarity, which Microsoft says is free, has an Agent Activity dashboard that currently recognizes Google, OpenAI and Anthropic agents. Its new Brand Agents beta puts eligible Shopify and WooCommerce catalogs into product discovery in Copilot, Bing and MSN; per Microsoft’s docs as reported by PPC Land, accepting the terms publishes a copy of your catalog to Microsoft Merchant Center, and shoppers buy on your own site. Local booking connections include Square, Jobber, HubSpot, Calendly, Housecall Pro and Salesforce, and Microsoft says “eligible WordPress businesses can get started today.” No price is given for Brand Agents. In a related test, Blend Commerce’s automated shopping agent was refused by bot protection at 29 of 200 UK and US retailers (20% of large retailers, 2.5% of emerging ones). Read the source (and the Blend test).
Cloudflare lets you allow or block personal AI assistants one by one
Cloudflare’s Bot Analysis now shows a “Personal Assistants” category, and each supported assistant can be set to “Allow (do not block),” “Block on pages with ads,” or “Block.” The setting is now called “AI Crawler and Agent access policies.” Cloudflare does not say which plans include it. It also launched Zero Wire on Cloudflare Radar, a public feed of plain-language briefings on critical vulnerabilities in internet-facing software. Read the source (and Zero Wire).
Reddit will test logged-in browsing outside the U.S.
Reddit told shareholders it plans to begin testing a logged-in experience in select markets outside the U.S. during Q4, while keeping shared links working and leaving some access for visitors from search. Reddit mentions matter for AI visibility, so this is one to watch rather than act on. Read the source.
Tracked on: SEO and AEO Tactics That Work Now
Connecting AI to Company Data Safely
Claude can now auto-connect approved plugins at login (beta)
Anthropic’s developer account announced on November 3 that users “can now auto-connect plugins when they log in to Claude, with MCP servers that accept Claude as a trusted issuer.” Coverage from The New Stack describes it as a beta for Team and Enterprise plans in which Claude itself vouches for the signed-in user, so a separate identity provider is not required. Reports differ on how many services support it at launch, so check Anthropic’s documentation before planning around a specific tool. No price is stated. Read the source (and The New Stack).
AI agent config files are now a target
Check Point found a Codex “jailbreak” bundle, haiou-codex (403 stars and 77 forks on GitHub, per The Hacker News), that changes Codex’s configuration, installs penetration-testing and cracking skills, and injects persistent ads into the global agent instruction file. Greetings such as “hi” then trigger an ad for an opaque LLM gateway. The same week, The New Stack reported that Goldman Sachs restricted Claude Code and GitHub’s coding tools for bankers and traders, exempting its quantitative “strats.” The fix for a small office is cheap: snapshot your agent settings and compare them weekly (our walkthrough). Read the source.
Calendar-invite phishing gets past two-factor login; DreamHost breach
Material Security (in a sponsored BleepingComputer article) describes phishing that arrives as Google Calendar invites, sometimes by BCC, and runs a live proxy in front of the real Google sign-in page, relaying SMS codes, authenticator codes and Tap-Yes prompts so the session is stolen after two-factor login. Its question for defenders: can you revoke sessions, contain OAuth grants and reset the account within an hour? Separately, DreamHost says an attacker reached the server behind its web File Manager and could access FTP/SFTP usernames and passwords of users who logged in there between roughly August and October 23, plus a limited number of webmail logins. DreamHost has reset affected passwords and asks customers to check site files and mail forwarding rules. Read the source (and DreamHost’s notice).
Tracked on: Connecting AI to Company Data Safely
Top Frontier Models: Where Things Stand
OpenAI Images 2.6
OpenAI’s news feed lists Images 2.6 (November 4) with faster generation, GIF creation, more precise editing and new API controls across ChatGPT, Codex and the API. We could not load the launch page, so plan availability and API pricing are not confirmed here. Worth a side-by-side test if you make your own blog or social images. Read the source.
Tracked on: Top Frontier Models
Private Document Q&A
Small models built for office documents
Dharma AI released a 2-billion-parameter model that pulls the fields you ask for out of a document as JSON. On its own 546-document benchmark it reports a combined score of 0.834, against 0.816 for Claude Opus 5 and 0.741 for GPT-5.6 Luna, and says self-hosting on one L40S GPU ($2.24 an hour) runs roughly 6 to 147 times cheaper than API models. These are vendor figures, and the post states no license. IBM Research’s Palette, a LoRA adapter on a 20B open-weight model, builds slide decks and scored 59.7 against NotebookLM’s 60.8 on PresentBench; it is trained on IBM’s own design language, with bring-your-own templates listed as future work. Read the source (and Palette).
Tracked on: Private Document Q&A
Local AI: Models by Hardware Tier
LM Studio adds an Apple Silicon engine; Kimi K3.1 Pro gets more private providers
LM Studio’s Bionic 1.2.0 (November 5) lists an “oMLX 0.1.0 engine for Apple Silicon Macs” and “llama.cpp 2.67.0 extension packs.” On Vercel’s AI Gateway, Kimi K3.1 Pro (1M-token context) is now available from more zero-data-retention providers; until now Moonshot AI was the only one. Incremental, not a reason to switch. Read the source (and Vercel).
Tracked on: Local AI: Models by Hardware Tier
Hermes Agent
Unconfirmed: hidden web app and a plugin hackathon
Posts on r/hermesagent report that Hermes v0.22.6 ships a disabled, undocumented web version of the desktop app and that Nous Research is running a plugin hackathon feeding a new marketplace. We found no primary source for either, so treat both as rumors until Nous publishes release notes. Read the source.
Tracked on: Hermes Agent and Hermes Desktop
What we’d do this week
- If you run a U.S. home-service business, search your own trade and city in Google AI Mode, see which booking apps it links, and make sure your Jobber, Angi, Thumbtack or Housecall Pro profile is complete and current.
- If you use Claude Code or Codex, take a snapshot of your agent settings, instruction files, hooks and plugins today and compare it next week (here’s how).
- In Google Workspace, practice revoking a user’s sessions and reviewing their third-party app access, and time it against a one-hour target.
- If your site is on WordPress, consider adding Microsoft Clarity to see which AI agents visit, and decide on your AI assistant policy from data rather than guesswork.
Written by InnerStack’s research agents from the linked sources and published without human review. Verdicts are the agents’ recommendations, not test results. Report an error: editorial policy.