Claude Report — 2026-08-31
- Claude Code v2.1.251 (Aug 28) ships model-switch hooks, spend-limit UI, and fixes for symlink/path-traversal security bugs.
- A federal judge rules the Pentagon's "supply chain risk" blacklist of Anthropic was unconstitutional retaliation (ruling Aug 27, widely reported Aug 28).
- Anthropic's Sept 14 weekly-limit change nets a real 17% cut versus today's temporary boost, sparking backlash and a deleted/reposted clarification.
- Agent Skill <a href="https://github.com/tt-a1i/archify/releases/tag/v2.16.0">tt-a1i/archify</a> hits v2.16.0 and gains +3.7k GitHub stars in a single day.
- Anthropic warns infostealer malware is hijacking Claude sessions to drain paid usage, and is auto-refunding affected accounts.
🚀 Anthropic Official
Claude Code v2.1.250 (Aug 28, 00:49 UTC)
Minor bug-fix and reliability release; no itemized changes disclosed beyond the summary commit.
Claude Code v2.1.251 (Aug 28, 18:19 UTC)
- Adds
PreModelSwitch/PostModelSwitchhook events to block, confirm, or annotate a model switch;SessionStartresume hooks now receive session staleness and estimated re-cache cost. - Adds live streaming of a foreground subagent's tool calls/results to Remote Control clients.
- Adds a spend-limit bar to
/usageand arate_limits.spend_limitstatus-line field for Claude apps gateway users; adds a per-session prompt-cache line to/cost(hit ratio, misses, warm/cold tokens). - Adds
attach,logs,stop,respawn, andrmtoclaude --help;/effortnow saves a default per model. - Switches the default model for seat-based Enterprise subscriptions to Opus 5.
- Security fixes: symlink-following escapes in Read/Write/Edit; plugin marketplace command path-traversal; project settings bypassing tracing/logging controls; Grep/Glob ignoring deny rules on symlinked paths; Workflow tool reading
scriptPathoutside approved locations before permission checks; symlink swaps bypassing permission checks. - Also fixes stuck "text content blocks must be non-empty" errors after thinking-only turns, Opus 5 failures at xhigh/max effort with thinking disabled, and MCP handshake hangs (new 70-second timeout); trims the native binary by ~5MB.
Claude Agent SDK TypeScript v0.3.250/v0.3.251 & Python v0.2.147/v0.2.148 (Aug 28)
Ship in lockstep with the Claude Code releases above, bundling the updated CLI for feature parity; no independent SDK-only features this cycle.
🔌 Claude Code Plugins
Plugin tracking skipped this run — marketplace install-count cache unavailable.
🛠️ Skills
tt-a1i/archify
Ships v2.16.0 (Aug 30) with 35+ changes — viewer fixes, text-rendering improvements, i18n localization — via PRs #219 and #216; the architecture/sequence-diagram Agent Skill gained +3,722 GitHub stars in a single day (Aug 31), now at 36.6k stars.
K-Dense-AI/scientific-agent-skills
Bumps to v2.65.0 (Aug 29) with PR #233 fixing broken stable-baselines3 doc links and PR #237 fixing Rowan SDK 3.1.13 examples, plus an automated security-scan-report commit on Aug 31; the 163-skill scientific research pack sits at 40.3k stars, trending +1,114 stars on Aug 31.
agentskillexchange/skills
Continues its near-daily automated catalog sync with commits Aug 31 (regenerated repo files, published-skills sync, README contributor links).
Unchanged in window: Piebald-AI/claude-code-system-prompts (Aug 28 commit only mirrors the v2.1.251 changelog above), alirezarezvani/claude-skills (last push Aug 26), anthropics/skills (last push Aug 21).
🤖 Agents & Subagents
nicobailon/pi-subagents
Merges a fresh run of PRs through Aug 31 — per-agent tool exclusions (#1778), an acceptance-report output mode (#1770), an async agent tool-budget test (#1772), and a Windows Pi JS spawn fix (#1771).
anthropics/claude-agent-sdk-typescript
See Anthropic Official above — reaches v0.3.250/v0.3.251 (Aug 28) in lockstep with Claude Code.
anthropics/claude-agent-sdk-python
See Anthropic Official above — reaches v0.2.147/v0.2.148 (Aug 28) for CLI parity.
Unchanged in window: AMAP-ML/LongHorizon-Harness (last push Aug 20), VoltAgent/awesome-claude-code-subagents (last push Aug 12).
🔗 MCPs & Integrations
modelcontextprotocol/typescript-sdk
Merges PR #2613 (Aug 28), mirroring params.taskId into Mcp-Name for SEP-2663.
oraios/serena
Fixes read_only restriction not being applied to the base tool in a project definition (Aug 30), ending a 10-day quiet streak.
punkpeye/awesome-mcp-servers
Adds roughly 40 commits on Aug 29 listing new servers — including Hetzner DNS, Kynth, FindSaunaPlunge, and Haypile MCP servers — plus entry-formatting fixes; the curated list sits at 93.5k stars.
DeusData/codebase-memory-mcp
Merges routine maintenance (Aug 30-31) — a CodeQL Action bump (#1945) and two Dependabot GitHub Actions bumps (#1899, #1794) — lighter activity than the prior cycle's feature work.
Unchanged in window: modelcontextprotocol/python-sdk (last merge Aug 28, already reflected in yesterday's report), github/github-mcp-server (last merge Aug 27, just before window).
💡 Community — Workflows & Ideas
HN revives criticism of Claude Code's default session-URL commit attribution (Aug 30-31)
A Hacker News thread reignites debate over Claude Code appending claude.ai/code/session_... links to commits and PR descriptions by default with no onboarding disclosure; the practical fix circulating is setting attribution.sessionUrl: false in .claude/settings.json.
📰 Quick Mentions
- Judge blocks Pentagon's blacklisting of Anthropic (Aug 28) — U.S. District Judge Rita Lin rules Defense Secretary Hegseth's "supply chain risk" designation was unconstitutional retaliation and a due-process violation; a parallel D.C. case is still pending.
- Anthropic's "25% increase" to Claude Code weekly limits is a 17% cut in practice (Aug 29) — the Sept 14 permanent limit lands above the old standard but below the temporary 50% boost active since May, forcing Anthropic to delete and repost its announcement after backlash.
- Anthropic warns infostealer malware is hijacking Claude sessions (Aug 30) — Vidar, LummaC2, StealC, RedLine, and Acreed on Windows plus Atomic Stealer on macOS steal browser session cookies to bypass login/MFA; Anthropic is signing out affected users and refunding unauthorized charges.