
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
capsulectx
Advanced tools
Markdown context packs that help coding agents reduce repeated repository-discovery tokens.
MCP gives agents tools. Skills give agents procedures. Capsules give agents compact project context.
Large repositories make coding agents burn tokens rediscovering the same files, decisions, conventions, and setup details over and over. Capsule targets a 50–70% reduction in repeated repository-discovery context for large, multi-session agent work.
No install required — run directly with npx (always gets the latest version):
npx capsulectx init
Or install globally with your package manager:
# npm
npm install -g capsulectx
# pnpm
pnpm add -g capsulectx
# yarn
yarn global add capsulectx
# bun
bun add -g capsulectx
Keep it up to date:
npm install -g capsulectx --prefer-online
Tip:
npxis the easiest option — it always runs the latest published version with no manual update step.
npx capsulectx init
Capsule scans your repo, optionally enriches capsules with AI (using your installed Claude CLI, API keys, or a generated prompt for any browser-based AI), and creates:
.capsules/
index.md
architecture.md
setup.md
api.md
data.md
ui.md
testing.md
deployment.md
Each capsule is a Markdown file with source fingerprints in JSON frontmatter:
---json
{
"name": "api",
"sources": ["src/api/**"],
"fingerprints": { "src/api/users.ts": "sha256:..." },
"updated_at": "2026-06-20T14:00:00.000Z"
}
---
# API Capsule
## Purpose
Request handlers, routes, controllers, and service boundaries.
## Key Files
- `src/api/users.ts`: source file matched by this capsule.
## Decisions
- Record stable decisions here so future agents do not rediscover them.
Agents read .capsules/index.md, choose the relevant capsule, check staleness, then inspect only the source files that actually matter.
| Command | What it does |
|---|---|
capsule init | Scan repo, run AI enrichment (optional), write all capsules |
capsule enrich | Re-run AI enrichment on existing capsules |
capsule apply | Apply AI-generated JSON to capsule Conventions and Decisions |
capsule write <name> | Refresh one capsule from source (preserves your edits) |
capsule get <name> | Print one capsule to stdout |
capsule scan | Print detected source groups without writing |
capsule stale [name] | Check which source files changed since last write |
capsule estimate <name> | Show estimated token savings for one capsule |
capsule stats | Show token savings across all capsules |
capsule --mcp | Start MCP server for native agent integration |
Capsule ships an MCP server so Claude Code and other MCP-compatible agents can natively discover and consume capsules — no manual file reads needed.
Add to your project's .claude/settings.json:
{
"mcpServers": {
"capsule": {
"command": "npx",
"args": ["capsulectx", "--mcp"]
}
}
}
Or globally in ~/.claude/settings.json to enable for all projects.
Once configured, agents get these tools automatically:
| Tool | What it does |
|---|---|
capsule_list | List all capsules with freshness status |
capsule_get | Read a capsule's compressed context |
capsule_stale | Check which capsules have outdated sources |
capsule_stats | Show token savings per capsule |
capsule_init | Generate capsules for the current repo |
Capsules are also available as MCP resources at capsule:///index and capsule:///{name}.
$ capsule estimate architecture
Capsule: architecture
Without Capsule:
files: 5
estimated tokens: 9,607
With Capsule:
capsule plus stale files: 1
stale source files: 0
estimated tokens: 417
Estimated discovery savings: 96%
Token counts use the cl100k_base tokenizer for accurate measurement.
Add this to AGENTS.md, CLAUDE.md, Cursor rules, or your agent instructions:
Before working in this repo:
1. Read `.capsules/index.md` if it exists.
2. Read the capsule matching the task area.
3. Run `capsule stale <name>` when the CLI is available.
4. If stale, inspect changed source files before editing.
5. Update capsules when durable project knowledge changes.
Works with any agent that can read files — Claude Code, Codex, Cursor, Windsurf, Devin, custom MCP agents.
Capsule detects standard layouts out of the box. For non-standard structure, add .capsules/config.json:
{
"groups": [
{
"name": "workers",
"description": "Background jobs, queues, and scheduled tasks.",
"sources": ["src/workers/**", "src/jobs/**"]
}
],
"ignore": ["legacy/**"]
}
A groups entry with the same name as a default group overrides it. New names are appended. ignore patterns extend the default ignore list.
The animation in this README is a generated GIF — no screen-recording tools required.
npm run demo
Requires rsvg-convert (librsvg / librsvg2-tools) and ffmpeg. The script outputs docs/demo.gif from SVG frames rendered at 2× for retina. See scripts/build-demo.mjs.
Capsule is early but functional. Current capabilities:
.capsules/config.jsonCLAUDE.md, AGENTS.md, .cursorrules, .windsurfrules with capsule instructionsRoadmap:
write that diffs source changes and suggests targeted updatesgit clone https://github.com/dawitlabs/capsule.git
cd capsule
npm install
npm run build
node dist/cli.js init
MIT
FAQs
Markdown context packs that help coding agents reduce repeated repository-discovery tokens.
We found that capsulectx demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.