
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
context-autopilot
Advanced tools
Automated context collection for coding agents. Watches your real agent sessions, finds what you keep repeating and correcting, and distills it into CLAUDE.md / AGENTS.md — with diffs you approve.
Automated context collection for coding agents. Mines your real agent sessions — every instruction you repeated, every correction you made, every tool call you rejected — and distills them into CLAUDE.md / AGENTS.md rules you approve.
Part of The Context Layer.
$ npx context-autopilot scan
Scanned 3 session(s) for ~/projects/my-app
Found 26 signal(s):
[CORRECTION] ×2 across 2 session(s) (score 9)
"There are still so many buttons that dont work, like the publish…"
[REPEATED] ×4 across 3 session(s) (score 10)
"Do not reference the legacy directory. Only work within…"
$ npx context-autopilot distill
[1/8] Perform click-and-type tests before reporting UI work complete (confidence: high)
+ Before declaring any screen done, click every button and verify it works.
evidence:
· 2026-06-27 — "There are still so many buttons that dont work…"
$ npx context-autopilot apply
Every session starts blank, so you re-teach your agent the same conventions — and when you forget, it repeats the same mistakes. Hand-writing context files works but nobody keeps them current. And naive auto-generation is worse: research on LLM-generated context files found they reduce task success and raise cost, because repo scans produce generic filler.
Context Autopilot takes a third path: evidence. Your session history is a literal record of what the agent got wrong and what you said to fix it. Autopilot mines that record and only proposes rules your own words support — each one shipped with the quotes that justify it.
ctxlayer scan parses your local Claude Code transcripts (~/.claude/projects) and extracts three signal types: instructions repeated across sessions, corrections after the agent went wrong, and rejected tool calls. Runs 100% locally.ctxlayer distill sends the signals (not your history) through Claude — via your existing claude CLI, no API key needed — and gets back imperative, project-specific rules with evidence and confidence ratings.ctxlayer apply walks you through each proposal. Accepted rules land in a managed block:<!-- ctxlayer:begin -->
## Learned conventions (Context Autopilot)
- **Staff login cannot access admin view** — When authenticated as staff, the admin role toggle must be hidden or disabled.
<!-- ctxlayer:end -->
Hand-written content is never touched; re-runs update the block idempotently. Rules are written to both CLAUDE.md and AGENTS.md, so Claude Code, Cursor, Copilot, Codex, and every AGENTS.md-aware agent benefits.
npm install -g context-autopilot # or use npx, no install
| Command | What it does |
|---|---|
ctxlayer projects | List projects with observable session history |
ctxlayer scan | Mine signals from this project's sessions |
ctxlayer distill | Distill signals into proposals (.ctxlayer/proposals.json) |
ctxlayer apply | Review proposals interactively; write accepted ones |
ctxlayer export | Export distilled entries as Agent Operating Procedure JSON |
Options: --project <path>, --model <model>, --min-score <n>, --yes, --json.
/plugin marketplace add chiragbachani/context-autopilot
/plugin install context-autopilot@the-context-layer
Then ask Claude to "update project context from my session history."
{
"mcpServers": {
"context-autopilot": {
"command": "npx",
"args": ["-y", "-p", "context-autopilot", "ctxlayer-mcp"]
}
}
}
Exposes list_observable_projects, scan_context_signals, and distill_context_proposals.
Everything runs on your machine. Transcripts are parsed locally; only the extracted signals (short quotes of your own instructions) are sent to the model you already use for coding. Nothing is uploaded anywhere else, ever.
Coding agents are chapter one. The engine is source-agnostic — it distills observations of work into Agent Operating Procedures (AOPs):
MIT © The Context Layer
FAQs
Automated context collection for coding agents. Watches your real agent sessions, finds what you keep repeating and correcting, and distills it into CLAUDE.md / AGENTS.md — with diffs you approve.
The npm package context-autopilot receives a total of 55 weekly downloads. As such, context-autopilot popularity was classified as not popular.
We found that context-autopilot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.