Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-08-21 · source-backed
A URL marketplace or catalog entry declares a command that mints short-lived HTTP headers for catalog and same-origin archive fetches, and it only runs on install or update after showing you the command. Project-scoped headersHelper in .mcp.json and inline MCP servers in agent files now require the folder trust dialog, including under claude -p, and helpers from a project, plugin, or agent file run without inherited credential env vars. Claude Code changelog If you publish an internal plugin marketplace behind auth, this is the migration to make.
Each link below shares sources, entities, or timing with this story.
v2.1.219 added mcp_server_errors to the headless stream-json init event, listing --mcp-config entries skipped by validation; terminal runs print a startup warning. Previously a malformed entry meant the agent ran to completion with fewer tools than you thought and no signal an...
This one rearranged my week. An essay published August 4 walks through Databricks' independent benchmark of coding harnesses against its own multi-million-line codebase. Pi, a harness with four built-in tools and a system prompt under 1,000 tokens, paired with Opus 4.8 at xhig...
It now dedupes local CLAUDE.md files against checked-in ones, proposes trimming content it can derive from the codebase, ranks unused skills, MCP servers, and plugins by context cost, and flags slow hooks. Background subagents run by default and, when launched from claude agen...
SkillsMetric evaluated 2,266 skills across 16 attack types, hitting F1 of 73.4%±0.5% overall (arXiv 2608.08468). Host destruction via shell commands: 0% detection. Natural-language prompt injection: 42%. If you lint third-party skills before install, this tells you precisely w...
One Claude Code release fixed two independent permission-check bypasses on the same day. That's the story. Version 2.1.221, shipped August 4, patches a Bash tool bypass where zsh could execute hidden commands embedded inside [[ ]] regex conditionals. The approval prompt never...
v2.1.63 ships two major commands. /simplify spawns 3 parallel review agents checking code reuse, quality, and efficiency — developers report 20-30% token reduction. /batch decomposes natural language into 5-30 independent units, each in isolated git worktrees with auto-testing...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.