Fetching from the wire…
Public story · 2026-07-13 · high
Version 2.1.205 audits skills, MCP servers, and hooks that can burn 55,000 tokens before your first prompt.
Why now: The update appears in Releasebot's July 13 coverage of Claude Code.
Claude Code's /doctor command got rebuilt into a full setup audit in version 2.1.205, per Releasebot.
A typical setup with 5 MCP servers and 58 tools burns about 55,000 tokens before you type a single prompt. That's context the model never gets to spend on your actual problem.
/doctor now flags skills, MCP servers, and plugins you've installed but aren't using. It weighs each one against what it actually costs you in context. It also deduplicates local versus checked-in CLAUDE.md files and calls out hooks that are running slow.
The practical move is two steps. Run /context first to see what's loaded and how much of your window it's eating. Then run /doctor to find what's safe to cut, especially if you inherited a config you didn't build yourself.
Most people running Claude Code have never checked what their own setup costs them. A 55,000-token tax before the first prompt won't stay rare, it'll become the default for anyone stacking MCP servers without auditing them.
The release notes don't say whether /doctor removes flagged items automatically or only surfaces them for you to cut by hand. They also don't say how it weighs a rarely-used server that's still critical against one that's genuinely dead.
Each link below shares sources, entities, or timing with this story.
It patches leaks that only bite over time: MCP stdio server stderr accumulating unbounded, LSP documents staying open indefinitely, and pasted images retained in the agent view (Releasebot). On top of that, background agents now commit, push, and open a draft PR on completion...
Two releases landed today and they're both significant. The headline security fix: PreToolUse hooks returning allow were bypassing deny permission rules — including enterprise managed settings. If you're running Claude Code in a managed enterprise environment with security hoo...
Lasso Security published research demonstrating that Claude Code's --dangerously-skip-permissions flag enables indirect prompt injection via poisoned READMEs, documentation files, and MCP responses. Then they did something unusual: they released the defense alongside the attac...
It now dedupes local CLAUDE.md files against checked-in ones, proposes trimming content it can derive from the codebase, ranks unused skills, MCP servers, and plugins by context cost, and flags slow hooks. Background subagents run by default and, when launched from claude agen...
Buried in the notes: several 2.1.232 changes covering Cygwin symlink handling and shell input redirections were rolled back, with a narrower version planned (Releasebot). 2.1.233 also fixed idle-session CPU burn on Linux and MCP stream handling. If you are on Windows with Cygw...
One line in the v2.1.215 changelog, July 19: Claude Code no longer invokes the /verify and /code-review skills on its own. You call them explicitly now (changelog). If your workflow assumed a review pass fired at the end of a task, it doesn't anymore, and nothing told you. Cod...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.