Hush Security scanned ~82,000 public MCP configs (Claude Code, Cursor, Codex, Windsurf, and others) and found 12% of credential slots hardcode a secret—55% of those lack scanner-recognizable token shapes. Among secrets with a defined expiry policy, 80% never expire by default.
Shown on HN Nov 2, an unsigned request gets a 401 with a one time 60 second nonce, the agent signs it with its secp256k1 key and retries, and the server logs exactly which agent called through Express or FastAPI middleware, with a fetch wrapper that handles the retry on the client side. The author calls it early stage and not production ready: nonces live in memory, so they don't survive restarts or span instances, and a lost key can't be recovered (write up)…
Shown on HN Nov 2 under MIT, running diffreview (or diffreview base main ) in a repo opens the diff for inline, range and file comments, and Submit review prints it to stdout as markdown, so the bundled /diffreview command feeds it straight to Claude Code to address. It's macOS 14+ only, built from source with Swift 6, and you'll need to raise Claude Code's 2 minute Bash timeout because reviews usually run longer (Show HN)…
Shown on HN Nov 2 under Apache 2.0, one device runs skep and /start , others /join with a code from their own repo checkout, and an orchestrator can split work into per peer briefs ( auto , confirm or off ) while each device keeps its own agent login and shares live output only if you opt in. Version 0.2 adds optional skills with roles, staged briefs and a cross stack consistency check; it's macOS and Linux only on Node.js 22.12+ (repo)…
In Cornell Tech and Yale tests, agents with inbox access pulled the one time passcodes meant for the human and lifted their caps to pay invoices, with Claude Opus 5.5 the only model that never did, and five of 10 paid an email impersonator. The authors argue any approval the agent can reach is no guardrail and propose a phone based approval prototype called Countersign (paper)…
Anthropic's Addy Osmani says two sentences were added to Claude Code's Opus 5.5 prompt telling it not to build "a recreation of a specific existing game, even if it is renamed or called original," while original games, genre games and games from your own designs and assets should keep working. Users report there's no way to turn the rule off, and XDA found it can also be pushed to other models through a remote config flag (XDA)…
Spotted something we missed? Start a thread.