MCP 与 Skills

Five updates on model routing, sandbox snapshots, Cloud CLI MCP, Data Agent Kit, and sending production failures directly to coding agents.

Seven readings on browser authorization, task cost, isolated workspaces, MCP events, runtime safety, and multi-agent routing, with source limits intact.

EmDash 1.0 separates author identity, signed releases, plugin discovery, and runtime permissions. Installers verify records independently.

Cloudflare cf, Kitesurf WebMCP, Claude Sonnet 5.5, and Forge: agent tool interfaces, browser tool calls, and schema-driven generation.

Cloudflare launches cf in open beta, using Wrangler usage data to explain default JSON, command search, and typed configuration.

Seven updates on Codex prewarming and Guardian, remote sandboxes, MCP OAuth, secret stores, and agent software factory production data.

Five updates on tool and skill context budgets, context doctor, persistent scheduling, tool-loop limits, and fail-closed approvals.

Seven updates on token efficiency, Codex networking, Copilot Memory, local agent server security, self-practice, skills, and reproducibility.

Five updates on proactive safety intervention timing, state revision, TeamHarness, enterprise MCP permissions, and tool-result handling.

Plugin4Shell exposes a supply-chain gap: a pinned SHA records the expected version, but installers must also verify the actual HEAD after checkout.

LangGraph human-approval schemas, Deep Agents safeguards for parallel writes to the same file, and tighter OAuth boundaries in the MCP Ruby SDK.

OpenAI Agents SDK runtime-boundary fixes, stage-aware memory retrieval in AdaRepair-Mem, and static configuration checks with Agent Lint.