SI Tools 2026 10 16 Your Allow List Had a Stranger in It

An installer quietly wrote Bash(npx gsd-core ) into Claude Code allow lists, and the unscoped gsd-core package belongs to someone else. That's this week's theme: the *allow side of permissions. We cover Claude Code 2.1.296 through 2.1.301: MCP allow rules now reach only the server they name, a sandbox gap through --plugin-dir is closed, plan mode stops running hook-approved writes, and on Windows, guard hooks stop failing open on machines without Git for Windows. We also cover the silent changes: a loosened rm prompt, idle compaction, and transcripts that now record system prompts. Open GSD Core 1.17.0 removes the stranger and patches a critical proxy-addr advisory. Buildomator 4.9.2 adds a strict trust gate for skills, and v5.0 is still missing in week three. Superpowers 7.0.0 rebuilds brainstorming and closes a planted-bash.cmd hole on Windows. Grok Build 1.0.51 and 1.0.52 join the show: errors replace "no results," and fast typing no longer answers permission cards. Grok Bot 0.70.2 gets its own email and an approval check before irreversible actions. The X segment verifies Anthropic's Scion source-control post, the Gray Swan prompt-injection competition, The X Subscription, and Grok Bot claims, each one labeled. X posts referenced (each verified; status in brackets): @AnthropicAI, Oct 13 ~12:36 PM: https://x.com/AnthropicAI/status/211004708... (Confirmed against Anthropic's engineering post. Figures are self-reported.) @bcherny, Oct 15 ~1:55 PM: https://x.com/bcherny/status/2110791698611... (Confirmed: "Indirect Prompt Injection: Black," $300K pool, launched Oct 15.) @bot, Oct 9 ~1:25 PM: https://x.com/bot/status/2108609764766908772 (Confirmed by the Grok Bot 0.70.2 changelog.) @SpaceXSI, Oct 12 ~7:08 PM: https://x.com/SpaceXSI/status/210978333529... (Confirmed by the x.ai announcement.) @grok: https://x.com/grok/status/2109783860636500318 (Confirmed by the x.ai announcement.) @mattyp, Oct 13 ~10:07 AM: https://x.com/mattyp/status/21100095417608... (Partly confirmed. Most chapters match the changelog. Shopify and PR previews were not foun) @elonmusk, Oct 15 ~5:57 PM: https://x.com/elonmusk/status/211085271624... (Partly confirmed. The skill exists, but it is third-party ("not by SpaceXSI"). Effectivene) @MinimalDuck: https://x.com/MinimalDuck/status/211071245... (Partly confirmed. The skill exists, but it is third-party ("not by SpaceXSI"). Effectivene) @elonmusk, Oct 15 ~6:50 PM: https://x.com/elonmusk/status/211086591088... (Claim. Changelog cadence: 0.63.0 (Sep 29) → 0.70.2 (Oct 11).) @ClaudeCodeLog, Oct 15 ~3:41 PM: https://x.com/ClaudeCodeLog/status/2110818... (Unverified. The official changelog doesn't list prompt changes. The tracker's change count) AI-generated audio deep dive (NotebookLM). Posts are treated as leads and checked against primary sources.