Commercial Agent Tools: October 23, 2026

1. Airlock Arrives on the Mac App Store to Run Claude Code and Codex in Disposable VMs

Airlock. Airlock runs Claude Code or Codex inside a virtual machine on a copy of the project with approval prompts turned off, then lets the user review each changed file as a diff and apply only the changes they want (with later undo). Build scripts, git hooks, CI config and agent settings are flagged, the app records processes, file activity and network connections from inside the VM, and sessions can be restricted to a host allowlist. airlock run claude and airlock run codex keep existing CLAUDE.md, skills and memory, and macOS VMs are available for Xcode projects. The app is now on the Mac App Store and requires Apple silicon with macOS 26 or later. Pricing: free, according to the developer, with no tracking or analytics; a Claude or ChatGPT account is still required. Product page · Show HN

2. Skillstore Puts a Searchable Skills Library Behind an MCP Server for Claude Code and Codex

Skillstore. Skillstore is a hosted library of engineering skills that Claude Code and Codex search over MCP, loading the instructions and supporting files that match the current task and stack and then reporting which skill they used and what it changed. The public library needs no Skillstore account; a private library, which requires an account, lets teams turn completed tasks into skills, import their own instructions, and share them by invite or link, with saved corrections applied only after review. Skillstore receives only the arguments sent in tool calls, not the repository or full conversation. Pricing: not stated. Developers page · Show HN

3. Plango Pairs an On-Device Security Model With Guards for Coding Agents and MCP Servers on the Mac

Plango. Plango is a native macOS security suite for people running AI coding tools that evaluates threats with a local model against the “lethal trifecta” of data access, communication and exposure. It monitors coding agents and blocks dangerous actions, restricts agent access by data type (such as SSH keys and env files) or Finder tags, inventories and guards MCP servers, checks skills and plugins, moves plain-text secrets into the macOS Keychain, and provides network allow and block lists with a log of every action. Users can switch to another local agent or bring their own key instead of the on-device model. Pricing: $4.99/month after a 7-day free trial that requires no card; it needs an Apple silicon Mac with macOS 15 or newer and at least 16 GB of memory. Product page · Show HN