Vibe CodingAnthropic Cowork Plugins Go Open SourceGitHub·high signalXBlueskyLinkedInCopy link11 starter plugins open-sourced at anthropics/knowledge-work-plugins. 14 new MCP connectors. Private plugin marketplaces for enterprise. Plugin architecture mirrors Claude Code skills.SourceSource pageGitHub↳ Follow the threadPolicy dependency / Stack layermcp-shell Ships Security Off in One Deploy Path and Bypassable in the Other (CVE-2026-55580/55581/55582)GitHub Security AdvisoriesPolicy dependency / Stack layerCherry Studio v2.0.9 unifies tool approval into one declarative policy and lets the provider catalog hot-update without an app releaseGitHubStack layer / Threat patternCROSS-CATEGORY: The Guardrail Layer Around Coding Agents Shipped at Four Different Points in the Lifecycle in 48 HoursHacker News Show HN and Product Hunt (2026-08-24 and 2026-08-25)Policy dependency / Stack layerAgno 3.0.1 caches tool schemas across runs and loads session history incrementally, so response time stops scaling with conversation lengthGitHub (agno-agi/agno)Policy dependency / Stack layerAnthropic's plugin marketplace runs four CI gates on supply chain risk, including a static pin check for auto-executing MCP launchersGitHubStack layer / Threat patternUnlose Takes Windows VSS Snapshots Before Coding Agents Run, Rejecting the Command-Blocking ApproachGitHub (via Show HN, 2026-08-25)Stack layer / ContrastMicrosoft's Agent Lightning v1.0.1 ships an agent skill whose job is optimizing other agents, installed through gh skillGitHubStack layer / ContrastThe official Claude community plugin marketplace now carries 2,282 plugins, every one of them pinned to a commit SHAGitHub