Claude Report — 2026-10-05

🚀 Anthropic Official

sandbox-runtime — glob/literal-path handling fix (Oct 4)

Merges a 3-PR stack (#622, #621, #620) fixing how path entries are matched when directory names contain glob characters: paths are now read both as literal filesystem paths and as glob patterns, deny rules accept any matching reading while allow rules require the path to actually exist and not be a symlink. Fix spans the Linux wrapper, macOS profile builder, and Windows expandWindowsFsPaths, plus both config getters now lstat every pattern entry. Builds directly on the Oct 3 Linux restart-path fix reported yesterday.

Anthropic — $100M engineer-training investment (Oct 2)

Announces a $100 million investment to train 10,000 engineers, aimed at closing the enterprise AI deployment and talent gap. A program/business announcement rather than a product change, but official and dated inside the window.

No new Claude Code, Agent SDK, or Anthropic API release landed after v2.1.289 / SDK v0.3.289 (both Oct 3, already reported yesterday) — checked through Oct 5 with no new tag found.

🔌 Claude Code Plugins

Plugin install-count cache unavailable this run — top-10-by-installs tracking is skipped per instructions. The only commits to plugin folders in anthropics/claude-plugins-official in this window remain the Oct 2 Opus-version-tracking and AWS-plugin bumps already reported yesterday; nothing new landed Oct 3–5.

🛠️ Skills

kharmanskyi/open-steps (Oct 5)

Ships v0.4.7, following the v0.4.6 release reported Sep 30.

Unchanged in window: addyosmani/agent-skills (still at commit 1401c8b8, Oct 3, no new activity), anthropics/skills (last commit Sep 29), K-Dense-AI/scientific-agent-skills (only automated "security scan report" bot commits, release still v2.72.0 from Oct 1), cloudflare/security-audit-skill (last commit Sep 14).

🤖 Agents & Subagents

nicobailon/pi-subagents (Oct 4)

Ships v0.76.0, stacking on top of the v0.75.0 release reported Oct 2.

wshobson/agents (Oct 4)

Resumes commit activity, ending a lull since Sep 29; specific changes aren't yet documented in a changelog.

VoltAgent/awesome-claude-code-subagents (Oct 5)

Resumes commit activity, ending a two-week gap since Sep 21; specific changes aren't yet documented in a changelog.

Unchanged in window: davila7/claude-code-templates (only automated star-history/trending-data bot commits since the Oct 3-4 feature update already reported), anthropics/commerce-agents (dormant since Aug 31).

🔗 MCPs & Integrations

upstash/context7 (Oct 5)

Documents the Docs7 cookie-consent banner (CTX7-3023) on the master branch, continuing the Oct 1-2 activity reported yesterday.

DeusData/codebase-memory-mcp (Oct 4)

Lands new merges, advancing past the Oct 2 state previously tracked.

oraios/serena (Oct 5)

Resumes near-daily commit activity after being flat since Sep 30.

Unchanged in window: ChromeDevTools/chrome-devtools-mcp (last commit Oct 2, already reported), graygnatconsole/mcp-audit-tool (last commit Sep 26).

💡 Community — Workflows & Ideas

answer-me-with-html (Oct 2)

Packages a Claude skill that forces answers to complex questions into a single self-contained, readable HTML page instead of plain text; goes viral at 1,261 stars in 3 days, signaling demand for structured-output skills over one-off prompt tricks.

mcp-transparency-log (Oct 5)

Crawls the public MCP registry nightly for 37 days with a Merkle-tree-logged tool, finding two operators control 30% of all 13,870 servers and 19.2% of servers silently rewrote tool descriptions within 24 hours while keeping the same tool name — a supply-chain fragility signing alone can't catch.

replica-skill (Oct 3)

Ships eleven free MIT-licensed Claude skills forming an app-cloning pipeline — reverse-engineer a target app, rebuild it, test for bugs, then fix user-reported issues — and gains 423 stars fast.

mcp-tools-lint (Oct 4)

Launches a linter for MCP tool schemas/annotations, catching non-2020-12 $schema dialects, boolean schemas, and bad required lists across stdio or Streamable HTTP; ships text/JSON/SARIF output and an RFC 6902 --fix patch mode, filling a gap with no prior standard MCP schema-validation tooling.

mesh-avatar-studio (Oct 4)

Turns a single illustration into an animated 2D mesh avatar using a coding agent plus a local editor; gains 196 stars as a creative-tooling use case for agent-driven asset pipelines.

📰 Quick Mentions

• claude-code-mods (live I/O view) — a Claude Code mod showing a live view of exactly what the agent reads/writes mid-session (Oct 2).
• BashCut — a native macOS video editor exposing every UI action through a CLI/MCP server so coding agents can edit video programmatically (Oct 2).
• ctx-handoff-mod — auto-hands off to a fresh conversation once context hits a threshold while keeping the prompt cache warm (Oct 2).
• jev-permission-gate — swaps Claude Code's auto-mode tool-call classifier for one claiming 2x faster permission decisions (Oct 3).
• google-docs-mcp — new MCP server for Google Docs with comment anchors, suggestion tracking, and low-token Markdown reading (Oct 3).
• Homestead — a multi-agent orchestration layer with role-based agents triaging Slack/email/text into one consolidated review card (Oct 5).
• phonebook.dev — lets separate Claude Code sessions message each other directly for multi-agent coordination (Oct 4).
• Tickler — a Claude Code skill/CLI/menu-bar app for time-based reminders that resume the original session with full context (Oct 5).