Malte Ubl is Vercel’s chief technology officer, a co-founder of JSConf EU, and a former Google principal engineer shaping infrastructure for software built and operated by AI agents. His career spans European JavaScript community-building, Google’s frontend platforms, and Vercel’s push to make agents productive, secure participants in application development.
While working at German digital agency SinnerSchrader, Ubl joined Jan Lehnardt and Holger Blank to organize the first JSConf EU in Berlin in 2009. He remained a curator through its final edition in 2019, helping establish a conference associated with formative appearances by Node.js, TypeScript, React, and Deno.
His subsequent focus has been the new application layer: agents that build software, perform operational work, and increasingly become users of applications themselves. He argues that cheaper software creation will expand demand by making previously uneconomical workflows practical, and that lasting value will accrue to useful applications even as competing foundation models become interchangeable.
Human-reviewed agent workflows: Ubl advocates automating research within established business processes while preserving human decisions. At Vercel, agents triage sales inquiries, investigate abuse reports, and retrieve information dispersed across workplace tools. The goal is faster execution without unnecessarily changing a process’s risk profile.
just-bash and Chat SDK: Ubl created just-bash, a TypeScript Bash interpreter with an in-memory filesystem that gives agents familiar shell capabilities without requiring a full virtual machine for every task. He has also worked on Vercel’s Chat SDK, which connects bots and agents to Slack, Microsoft Teams, Discord, Telegram, and WhatsApp through a unified TypeScript interface.
Security boundaries in agentic architectures: In work co-authored with Harpreet Arora, Ubl argues that an agent’s orchestration harness, generated code, credentials, and tools require separate trust boundaries. Isolated execution alone cannot prevent prompt injection from becoming credential theft if generated code inherits the harness’s privileges.
Self-driving infrastructure: Ubl envisions platforms that investigate production anomalies, identify security or performance issues, and propose code changes informed by live operating conditions. Vercel Agent applies that model through deployment monitoring, incident investigation, proposed pull requests, read-only defaults, and narrowly scoped temporary permissions.
His criticism of heavyweight continuous-integration jobs reflects a longstanding preference for lean execution. As agents become routine software users, Ubl treats APIs, command-line interfaces, controlled execution environments, and operational autonomy as essential product capabilities.
