Claude Code Daily Briefing - 2026-05-12

Release Summary

VersionDateKey Changes
v2.1.1395/11Agent view, /goal command, hook args[] field, continueOnBlock, /mcp improvements
v2.1.1385/9Internal fixes

Full Release Notes

New Features & Practical Usage

v2.1.139 — Agent View, /goal Command, Major Hook Improvements (5/11)

v2.1.139 significantly enhances visibility and control over agentic workflows.

Agent View (Research Preview): Run claude agents to see a unified list of all running, blocked, and completed Claude Code sessions. Essential for managing multiple parallel agents.

/goal Command: Define completion conditions and Claude autonomously works across turns until they’re met. Works in interactive, -p, and Remote Control modes, with a live overlay showing elapsed time, turns, and token usage.

Hook args: string[] Field: Specify commands as an array instead of a command string. This spawns processes directly without a shell, eliminating quoting issues with paths containing spaces or special characters.

continueOnBlock Config: When a PostToolUse hook rejects a tool call, this option feeds the rejection reason back to Claude, allowing it to understand why and try a different approach.

# Launch agent view
claude agents

# Start autonomous work with /goal
/goal "Until all tests pass and lint errors reach zero"
{
  "hooks": {
    "PostToolUse": [{
      "matcher": "Write",
      "hooks": [{
        "type": "command",
        "args": ["node", "scripts/validate.js", "$CLAUDE_FILE_PATH"],
        "continueOnBlock": true
      }]
    }]
  }
}

GitHub v2.1.139

Developer Workflow Tips

Building “Work Until Done” Workflows with /goal

The /goal command in v2.1.139 fills the gap between one-shot -p execution and interactive mode. Define completion criteria and Claude iterates autonomously.

Effective patterns:

The live overlay (elapsed time, turns, tokens) lets you catch infinite loops early before burning through your usage allowance.

Eliminating Shell Quoting Issues with Hook args[]

The traditional command string in hooks runs through a shell, which breaks when file paths contain spaces or special characters. The new args array field spawns processes directly, eliminating this entire class of issues.

{
  "hooks": {
    "PostToolUse": [{
      "matcher": "Write",
      "hooks": [{
        "type": "command",
        "args": ["eslint", "--fix", "$CLAUDE_FILE_PATH"]
      }]
    }]
  }
}

GitHub v2.1.139

Security & Limitations

ClaudeBleed — Claude Chrome Extension Hijacking Vulnerability, Patch Bypassed (5/6~)

Security firm LayerX discovered a vulnerability in the Claude for Chrome browser extension, dubbed ClaudeBleed. Any Chrome extension — even one with no special permissions — can hijack Claude to steal private data and send emails without user knowledge.

Attack chain: The extension’s externally_connectable setting accepted commands from any script running on the claude.ai website. A malicious extension can weaponize Claude to exfiltrate data from Gmail, GitHub, or Google Drive, and send emails or share documents on the user’s behalf.

Patch status: Anthropic released v1.0.70 on 5/6 adding permission request popups, but LayerX bypassed the fix within 3 hours by forcing the extension into “Act without asking” mode. The root cause remains unaddressed.

Recommended action: Claude Chrome extension users should minimize other installed extensions and consider using a separate browser profile for sensitive work.

LayerX | SecurityWeek | Hackread

Ecosystem & Plugins

Anthropic Launches 10 Financial Services AI Agents + Microsoft 365 Integration (5/5)

Anthropic unveiled 10 pre-built AI agent templates for financial services at its New York briefing. These automate the most time-intensive tasks in finance: pitchbook creation, KYC screening, and month-end closing.

Microsoft 365 Integration: Claude operates as a single agent across Excel, PowerPoint, Word, and Outlook, maintaining context across all four applications. Analyze financial data in Excel and transform results into a PowerPoint presentation in one continuous workflow.

Data Partnerships: Moody’s has embedded its full platform into Claude as a native app. Verisk, Dun & Bradstreet, Experian, S&P Capital IQ, and others serve as data partners.

$1.5B Joint Venture: A new AI-native enterprise services firm with Blackstone, Goldman Sachs, and Hellman & Friedman. Two-track strategy: self-service agent configuration tools for large institutions, and embedded Claude operations for mid-market companies.

Fortune | Anthropic | PYMNTS

Code with Claude London (5/19) — 7 Days Away

Registration is open. Livestream will be available.

Code with Claude London

Community News

Minor Changes Worth Knowing

Interesting Projects & Tools

By subscribing, you agree to our Privacy Policy.