
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
@skillroute/mcp-server
Advanced tools
SkillRoute by JEStats: local skill routing over MCP for coding agents.
Stdio MCP server exposing SkillRoute routing tools to agent clients: skillroute.route, skillroute.search, and skillroute.inspect_skill.
Requires Node.js 20+ and uv, or an installed Python skillroute command (uv tool install skillroute / pipx install skillroute). With uv on PATH, the server downloads the Python core on demand. No repository build or JEStats account is needed.
Configure your MCP client to run:
npx -y @skillroute/mcp-server
Index your library once before asking the agent to route:
uvx skillroute dogfood index
# Or: uvx skillroute index --root ./skills
In a SkillRoute source checkout the server autodetects the repo and runs against the checkout instead. Environment overrides:
SKILLROUTE_REPO_ROOT — force a specific checkoutSKILLROUTE_PYTHON — interpreter to run -m skillroute withSKILLROUTE_BRIDGE_TIMEOUT_MS — bridge call timeout (default 30000)See the agent setup guide for Claude Code/Codex plugins and skillroute harness install <agent> for all 15 clients. Built by JEStats.
FAQs
SkillRoute by JEStats: local skill routing over MCP for coding agents.
The npm package @skillroute/mcp-server receives a total of 0 weekly downloads. As such, @skillroute/mcp-server popularity was classified as not popular.
We found that @skillroute/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.