Claude Report — 2026-07-07

🚀 Anthropic Official

Government of Alberta uses Claude to audit cybersecurity across 3,400 repos (Jul 6)

Case study details how Alberta's Ministry of Technology and Innovation used Claude Code (Opus/Sonnet) with custom red-team/blue-team review agents to scan 466M lines of code across ~1,280 applications against ~95 security controls per pass.

Claude Code v2.1.202 (Jul 6)

Adds a "Dynamic workflow size" /config setting for workflow agent counts and new workflow.run_id/workflow.name OTel attributes; fixes a Ctrl+R history-search crash, /rename on background sessions, mTLS handshake failures, Remote Control file-drop issues, a claude agents chat-open crash, workflow-script unicode-quote corruption, voice-dictation retry loops, slow session resume in large git-worktree repos, and duplicate skill re-invocation.

Claude Agent SDK Python v0.2.111 (Jul 6)

Prevents zombie CLI subprocesses under asyncio cancellation, fixes silent whitespace loss on NDJSON lines over 64KiB, fixes a TypeError on non-dict message content, and warns when can_use_tool is shadowed by allowed_tools.

Claude Agent SDK TypeScript v0.3.202 (Jul 6)

Adds a parent_agent_id field to subagent session messages for depth-2+ agent trees and fixes a crash from apply_flag_settings given a non-object settings value.

claude-cookbooks: new "plan big, execute small" notebook (Jul 6)

The renamed cookbook repo (formerly anthropic-cookbook) merges a new notebook demonstrating a plan-then-decompose agent pattern, alongside link-checker config fixes.

claude-plugins-official: WordPress marketplace entry renamed (Jul 6)

Merges a rename of the marketplace slug from wordpress.com to build-with-wordpress to sync with Automattic's upstream plugin rename; old wordpress.com@claude-plugins-official installs no longer resolve.

Anthropic outed for a hidden tracker flagging Chinese Claude Code users (Jul 6)

Report details covert client-fingerprinting code in Claude Code built to detect proxy/reseller traffic from unsupported regions, which Anthropic frames as anti-distillation/anti-abuse policy enforcement. TechCrunch confirms (Jul 4) Alibaba is banning Claude Code company-wide starting Jul 10, classifying it "high-risk" and citing the tracker controversy directly.

🔌 Claude Code Plugins

Top-10 install-ranked plugin tracking skipped this cycle — ranking cache unavailable, as noted in the mission brief. Items below surfaced via general search and aren't ranked by installs.

claude-mem

Ships v13.10.0 (Jul 4, adds Antigravity CLI support, drops Gemini CLI), v13.10.1 (Jul 4, Codex SessionStart hook fixes), and v13.10.2 (Jul 5, cross-platform stability fixes) — a persistent cross-session memory layer for Claude Code, Codex, Copilot, and Gemini with 86k+ stars.

claude-helm

Ships v2.7.1 (Jul 7): fixes adopt mode to use the marketplaces path as copy source, clarifies README, and adds a git-auto-commit project config option.

toolshed (doc-lifecycle plugin)

Bumps doc-lifecycle to v0.7.0 via PR #34 (Jul 7): rearchitects its "bloat contract," retiring list-docs.py in favor of plan-chunks.py with new test baselines.

claude-hot-limit

Ships daily commits Jul 5–7 adding a pacing-guard PreToolUse hook to prevent API rate-limit trips during multi-agent fan-out, plus workflow-fanout accuracy estimation (#20) and a retroactively-verified gate hardening fix (#18).

claude-code-hooks-daemon

Adds a PlanDoc parser and GitFacts git-metadata module (Jul 7) as part of an internal QA/validation planning system.

Unchanged in window: anthropics/claude-code /plugins folder itself (last change Jun 18), vnmoorthy/groundtruth (last release Apr 25).

🛠️ Skills

glebis/claude-skills

Adds a "nielsen-heuristics" evidence-backed evaluation skill with output modes/task export, plus a new elimination-research skill with report-card formatting refinements (Jul 4–6).

alirezarezvani/claude-skills

Merges PR #904 (Jul 6, landed Jul 7) adding "minimalist" and "strict-api" engineering skills, with automated codex-skills symlink sync and iterative review on an "arquiteto-de-empresa" skill.

Piebald-AI/claude-code-system-prompts

Logs the v2.1.202 system-prompt diff (Jul 6, +3,217 tokens) tracking Claude Code's growing system prompt.

Unchanged in window: anthropics/skills (last commit Jul 1), ComposioHQ/awesome-claude-skills (stale since May 22), kpab/claude-fable-5-skills (last commit Jul 3, just short of window).

🤖 Agents & Subagents

nicobailon/pi-subagents

Ships v0.34.0 (Jul 7): fixes disabled-agent thinking frontmatter, adds a wait-tool opt-out, and resolves stale supervisor intercom/channel-dir bugs.

anthropics/claude-agent-sdk-typescript

Ships v0.3.202 (Jul 6): adds parent_agent_id to subagent session messages and fixes an apply_flag_settings crash (same release as under Anthropic Official above).

0xmmo/crew

Bumps to v0.2.4 (Jul 4), adding agent-to-agent messaging ("crew send") so multiple Claude Code agent instances can talk to each other directly.

Unchanged in window: Chachamaru127/claude-code-harness (last main-branch commit Jun 28), affaan-m/everything-claude-code (push confirmed Jul 6 but no verifiable concrete change).

🔗 MCPs & Integrations

modelcontextprotocol/typescript-sdk

Merges fixes validating Content-Type by parsed media type instead of substring match (#2441) and adding runtime-neutral OAuth discovery serving for web-standard hosts (#2422), plus a dependency bump (#2443, Jul 7).

awslabs/mcp

Adds a new RODA MCP server (#4038, Jul 6), fixes a HealthOmics batchName parameter bug (#4089), and fixes the roda-mcp update project script (#4086).

modelcontextprotocol/python-sdk

Extends resolver dependency-injection support to sampling and roots requests (#3049, Jul 6).

ChromeDevTools/chrome-devtools-mcp

Shows confirmed push activity Jul 7 and sits at #2 on GitHub's weekly trending (+1,394★/week); individual commit messages for the window weren't retrievable, but the activity signal is solid.

DeusData/codebase-memory-mcp

New entrant surges to #1 on GitHub's weekly trending (+6,309★): a code-intelligence MCP server indexing codebases into a persistent knowledge graph via tree-sitter AST parsing across 158 languages, claiming ~99% token reduction versus grep-based exploration; ships commits Jul 6–7 (PR #931, #925) backed by an arXiv preprint.

Unchanged in window: portainer/portainer-mcp (still v2.43.1, last activity Jul 2), github/github-mcp-server (still v1.5.0, last release Jun 27).

💡 Community — Workflows & Ideas

Anthropic's Method to Losing Goodwill in a Few Easy Steps (Jul 6)

Cites ~9,100 open claude-code GitHub issues (including a 6+ month freeze bug and 1+ year screen-flicker bug) and a new "Agent SDK credits" billing tier ($20 Pro/$100 Max) layered atop subscriptions with retroactive "extra usage" charges triggered by third-party tool file detection; the highest-engagement Claude-related HN thread in the window (244 points/188 comments).

contextrot: analyze where Claude Code degrades from its own session log (Jul 5)

A local-only, zero-network analyzer mining Claude Code's JSONL transcripts for five degradation signals (edit failures, retry loops, re-reads, self-corrections, tool errors), computing Wilson 95% confidence intervals per-model (Opus/Sonnet/Haiku).

Show HN: an always-fresh memory that learns your repo, so agents stop re-reading (Jul 6)

A Claude Code plugin using PostToolUse/FileChanged hooks to tee file contents into a cheap-model MCP memory server, exposing a single ask_live_memory() tool; claims 61% cost reduction on understanding-heavy tasks.

Show HN: Handoff — a verified context bridge between Claude Code sessions (Jul 5)

A skill addressing session-to-session context loss by verifying handoff state between Claude Code sessions before resuming work.

claude-cache-guard (Jul 5)

A niche tool built specifically to avoid prompt-cache invalidation token waste across Claude Code sessions.

📰 Quick Mentions

• nagisanzenin/engram — new repo (Jul 5, 343★) shipping v0.3.0, an FSRS spaced-repetition learning engine for Claude Code.
• oxbshw/watch-skill — new repo (Jul 5, 90★) giving agents scene-aware video review via MCP + CLI + REST.
• jvogan/a-fable-of-codexes — new repo (Jul 4, 35★) turning Claude into an orchestrator coordinating parallel Codex worker agents.
• animaios/anima-use-google — new MCP server (Jul 5, 20★) running Google AI Mode searches through the user's own logged-in browser session.
• mixelpixx/Konnect — new repo (Jul 5, 12★): a native KiCAD 10 plugin exposing 171 EDA tools to Claude via a Rust binary.
• d-date/retok — new repo (Jul 6, 13★): a zero-dependency token-efficiency analyzer for Claude Code/Codex sessions.
• Neeeophytee/finding-unknowns-skills — new repo (Jul 5, 88★): 8 Claude Code skills for surfacing unknown unknowns before they get expensive.
• walkpod1007/claude-project-ops — new repo (Jul 4, 65★): field-tested rules for routing work between Sonnet/Haiku inside Claude Code.