Vibe CodingPencil.dev Free Design Canvas with MCP Integration for Claude CodePencil.dev·high signalXBlueskyLinkedInCopy linkLocal-first infinite design canvas connecting to Claude Code via MCP. Design visually, get production code. Free, saves as .pen files in git.SourceSource pagePencil.dev↳ Follow the threadPolicy dependency / Stack layer'Do this as quickly as possible' repeatedly got a Claude session flagged by a corporate security directorr/ClaudeAIPolicy dependency / Stack layermcp-airlock is a stateless governance proxy that sits in front of MCP servers with policy, dry-run and human confirmationGitHubPolicy dependency / Stack layerA Fine-Tuned RoBERTa-Large Permission Gate Matches Claude Haiku 4.5 at Deciding What an Agent May ToucharXiv 2609.15422Policy dependency / Stack layerA Skill File Can Carry Distilled Memory, Collapsing Two Sets of Retrieval Machinery Into OnearXiv 2609.16669Stack layer / Threat patternCline Leaves the IDE: a Standalone Desktop Agent That Imports Claude Code and Codex Sessions and Schedules Recurring PR ReviewsCline GitHub releases (launch reported by RuntimeWire, version cadence verified on the repo)Policy dependency / Stack layerClaude Code adds omitClaudeMd so subagents can run without inherited CLAUDE.md, and a sha256 plugin-install accept flagGitHubStack layer / Threat patternZvi reads Anthropic's misuse report and says the real threat is Chinese labs distilling Claude, not any of the six other categoriesDon't Worry About the Vase (Zvi Mowshowitz)Stack layer / Threat patternFlowise ships two 9.0 RCEs in its Custom MCP node, both fixed in 3.1.4NVD