Fetching from the wire…
01
02
03
04
05
06
07
08
OSS2026-07-30 · source-backed
different-ai/openwork is a macOS/Windows/Linux desktop app built on opencode letting non-technical staff work with agents on local files, shipping v0.18.12 on July 30. YC's launch post cites over 150K downloads, with on-prem deployment and support for 50+ LLM providers as the differentiators. The design detail worth stealing: the entire shared catalog of skills, plugins, connections, Google Workspace and Microsoft 365 capabilities is exposed through exactly two MCP tools, search_capabilities and execute_capability, which keeps tool-definition context flat regardless of catalog size. 396 open issues, so it's moving fast.
Each link below shares sources, entities, or timing with this story.
The agent-security topic holds 42 repos above 100 stars, four from large companies rather than startups: NVIDIA/SkillSpector (14,498 stars, scanning Claude Code/Codex/MCP skills for prompt injection), Tencent/AI-Infra-Guard (4,467, red-teaming with Many-Shot/PAIR/GOAT/ActorAtt...
microsoft/skill-recorder (2,233 stars since July 29, pushing daily) is an Electron app that records clicks, window switches and optional narration, then uses the GitHub Copilot CLI to reconstruct the session as an intent plus ordered steps. The design choice that matters: gene...
Anthropic invented a file convention. It's now shipping GA inside a competitor's product. Nobody wrote a spec, nobody held a standards meeting, it just happened. On July 29, GitHub made agent skills and MCP server support generally available in Copilot code review for all Pro,...
Three things happened this month that only make sense together. Agent Plugins 1.0 shipped co-signed by six competitors: AWS, Anysphere, Microsoft, OpenAI, Vercel and Google (GitHub Changelog). It makes skills-plus-MCP bundles portable across clients. OpenAI's August 11 Codex c...
One Claude Code release fixed two independent permission-check bypasses on the same day. That's the story. Version 2.1.221, shipped August 4, patches a Bash tool bypass where zsh could execute hidden commands embedded inside [[ ]] regex conditionals. The approval prompt never...
QM went up under MIT license. Created July 29. As of the GitHub API check: 8,420 stars, 887 forks. Five days. YC uses it internally across accounting, legal, events, and engineering, including to build QM itself. Every employee and every Slack room gets its own scoped memory,...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.