
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@floomhq/relay-mcp-sync
Advanced tools
Lightweight Relay MCP server for installing, publishing, and startup-syncing skills.
Tiny MCP server prototype for Relay skills. The MCP package is not part of the launch-ready Relay Version 0 surface.
npx -y @floomhq/relay-mcp-sync
On startup it reads ~/.relay-cli/config.json, fetches your Relay skills, and writes changed files to ~/.claude/skills/. The background sync behavior is a later-version prototype.
The poll uses HTTP If-None-Match against /api/me/skills, so unchanged responses are 304 with no body. Steady-state polling is ~free on bandwidth.
Configure the prototype poll interval with RELAY_SYNC_INTERVAL_MS (default 60000, minimum 10000).
Tools:
relay_install_skill(slug) fetches /s/<slug>.md and writes it locally.relay_publish_skill(name, content, description?, visibility?, asset_type?, installs_as?, version?) publishes Markdown through /api/skills.
asset_type: knowledge, instruction, workflow, or skill (default skill)installs_as: claude_skill, memory, rule, codex_instruction, opencode_instruction, cursor_rule, or other (default claude_skill)version: optional label like 0.1.0 or v0-smokeLibrary/share tools are not exposed in Relay Version 0.
FAQs
Lightweight Relay MCP server for installing, publishing, and startup-syncing skills.
We found that @floomhq/relay-mcp-sync demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.