Claude Report — 2026-07-15

🚀 Anthropic Official

Claude Code v2.1.210

Ships Jul 14 (23:45 UTC) with security- and stability-focused fixes:

• Fixes an isolation bug where isolation: 'worktree' subagents could run git-mutating commands against the main repo instead of their isolated worktree.
• Prevents the ultracode keyword from being triggered by non-human input (webhook payloads, relayed PR comments), closing an injection vector.
• Hardens the Agent tool against indirect prompt injection from subagent-read content.
• Adds a live elapsed-time counter for long-running tool calls, startup warnings for risky permission rules (Write(path)/NotebookEdit(path)/Glob(path)), and ~25 other fixes (crash fixes, /doctor auto-mode default on Bedrock/Vertex/Foundry, a Grep pagination bug).

Claude Agent SDK Python v0.2.119 and TypeScript v0.3.210

Python v0.2.119 (Jul 14, 23:58 UTC) is a parity bump to CLI v2.1.210. TypeScript v0.3.210 (Jul 14, 23:45 UTC) adds timedOutAfterMs to BashToolOutput, letting callers distinguish timeout-triggered auto-backgrounding from normal backgrounding.

Admin API user management for Claude Enterprise (beta)

New beta endpoints (Jul 14) let Enterprise orgs manage members via API: list/lookup by email, change roles, remove members, send/withdraw invites, and manage groups/custom roles. Group and custom-role calls require the anthropic-beta: ce-user-management-2026-07-13 header; member/invite calls need no beta header.

Claude for Teachers

Announced Jul 14: gives verified US K-12 educators free access to premium Claude (including Claude Code and Cowork) for a year, tied to a "Learning Commons" for standards-aligned lesson planning (OpenSciEd, IM v.360). Data is excluded from model training, with a FERPA-aligned K-12 DPA.

Anthropic commits $10M CAD to Canadian AI research

Announced Jul 14: distributes Claude credits across Amii, Mila, Vector Institute, CHEO, CAMH, Université Laval, U of Toronto, and U of Saskatchewan (~$1M CAD each), plus API credits for affiliated Canadian startups.

claude-code-action v1.0.174

Ships Jul 14 (23:47 UTC) with a fix to redact GitHub user-to-server (ghu_) tokens in the action's log sanitizer.

🔌 Claude Code Plugins

Plugin install-rank cache is unavailable this cycle — top-10 plugin tracking is skipped per this run's instructions.

🛠️ Skills

agentskillexchange/skills

Continues near-hourly automated skill-sync commits through Jul 15 (latest 07:28 UTC), the most consistently active tracked skills repo in the window.

JSONbored/awesome-claude

Ships an "Agent Island" feature (Jul 15) alongside a batch of navigation-analytics instrumentation PRs (#5000-#5020).

Piebald-AI/claude-code-system-prompts

Publishes system-prompt diffs for Claude Code v2.1.209 (+1,261 tokens) and v2.1.210 (-8,629 tokens), both Jul 14, continuing its release-by-release prompt-growth tracking.

Unchanged in window: glebis/claude-skills (last commit Jul 13, already reported), alirezarezvani/claude-skills (last commit Jul 14, already reported), kpab/claude-fable-5-skills (last commit Jul 10), anthropics/skills (last commit Jul 1), ComposioHQ/awesome-claude-skills (last commit May 22).

🤖 Agents & Subagents

nicobailon/pi-subagents

Ships a ~23-commit burst across Jul 14-15: renames the wait tool to subagent_wait, adds agent-local skill paths and fleet/companion display hooks, and hardens async task-output isolation.

wshobson/agents

Adds llm-finetuning and dgx-spark-ops plugins (Jul 14) to its 94-plugin/203-agent Claude Code marketplace, covering an eval-gated fine-tuning lifecycle.

anthropics/claude-agent-sdk-typescript

Ships v0.3.210 (Jul 14), covered under Anthropic Official above, adding a timedOutAfterMs field to BashToolOutput.

Unchanged in window: 0xmmo/crew (last commit Jul 4).

🔗 MCPs & Integrations

modelcontextprotocol/python-sdk

Releases v2.0.0b2 (Jul 14), its second v2 beta, with HTTP stack updates and client-side subscription support.

DeusData/codebase-memory-mcp

Opens PR #1087 (Jul 14) hardening the installer and adding Copilot instructions, plus incremental PRs on Cypher path semantics, Java enum resolution, and ObjectScript/IRIS extraction.

Unchanged in window: shlokkhemani/rabbithole (last commit Jul 14, already reported), awslabs/mcp (last commit Jul 14, already reported), modelcontextprotocol/typescript-sdk (still beta.4, Jul 13), ChromeDevTools/chrome-devtools-mcp (still v1.6.0, Jul 14), iiTzSenn/Sens (still v0.8.0, Jul 9), modelcontextprotocol/servers (last commit Jul 6).

💡 Community — Workflows & Ideas

Milepost

Show HN (Jul 15): a Claude Code plugin for persistent cross-session memory that writes milestone-triggered markdown journal entries to ~/.claude/memory/milepost/ — no database or vector store, with built-in secret-pattern blocking and automatic recall at session start.

VSCode Inline Comments with MCP

Show HN (Jul 15): attaches comments to text selections via text-anchoring so they survive edits, and exposes an MCP server so Claude can read/write comments programmatically alongside a human editor.

mcp-trustcard

Show HN (Jul 15): scans MCP servers across 8 dimensions (schema validity, destructive-capability detection, auth, secret exposure, protocol-version compliance) and outputs a 0-100 trust score to catch tool-poisoning and shadowing risks before agents connect.

TormentNexus

Show HN (Jul 15): a local-first AI control plane that reimplements 20K+ MCP tools as native Go modules instead of external processes, using semantic search plus BM25 "progressive disclosure" to inject only relevant tools into context.

Alluvia

Show HN (Jul 14): a local SQLite pipeline that distills Claude Code/Cursor/ChatGPT conversation history into embedded "atomic ideas," clusters them, and exposes an MCP server so Claude can query your idea-map mid-conversation.

📰 Quick Mentions

• Open Reasoning demo — Show HN (Jul 14): recovers Claude Sonnet 5's encrypted internal reasoning client-side from its API "thinking signature," showing genuine false starts and self-corrections.
• vibe-check — Show HN (Jul 14): a Claude skill that front-loads product-discovery methodology (JTBD, Design Sprints) before any code gets written, producing a PRD for non-technical builders.
• Asterism — Jul 14: extracts entity-relationship triples from Claude conversations into a local, Hebbian-weighted knowledge graph.
• punkpeye/awesome-mcp-servers — Jul 13: adds new server listings (memeboat-mcp, Project Telos MCP, engram, Toolport, rustchain-mcp) to the canonical MCP directory.