All settings changedsettings-reference
Nearest release: v2.1.287, published 4 hours before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 1 Oct 2026 21:55 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 1 Oct 2026 22:07 UTC.
Upstream edited
Recorded here
Lines+3added
Lines−2removed
From line
1,850
where the diff opens
First seen
21 Aug 2026
this site's first read of the page
Recorded edits149to this page, all time
The whole hunk
from line 1850, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 1850
18501850* A command substitution, a subshell, or a control-flow block such as `if` or `for`
18511851* A redirection, such as `docker build . > build.log`, other than one that only duplicates a file descriptor, as `2>&1` does
18521852* A command name that comes from a variable
1853* A `git clone`, `git init`, `git worktree add`, `git worktree move`, or `git bundle create` with a path argument that is absolute, starts with `~`, or contains a `..` segment
18531854
1854For example, `cd build && docker compose up` stays sandboxed under a `docker *` entry, and adding a `cd` entry doesn't change that.
1855For example, `cd build && docker compose up` stays sandboxed under a `docker *` entry, and adding a `cd` entry doesn't change that. Under a `git *` entry, `git clone <url> vendor/lib` runs outside the sandbox, but `git clone <url> ~/tools` stays sandboxed. A clone writes a whole tree of files, possibly executable ones, wherever its destination path points.
18551856
18561857Excluded commands still go through the regular permission flow. Exclusion is a convenience, not a security boundary: prefer [`filesystem.allowWrite`](#sandbox-filesystem-allowwrite) when a tool only needs to write somewhere specific. Claude Code merges entries across every settings scope the session loads, and there is no managed-only lock for this list, so keep a managed list narrow.
18571858
from line 4144
41434144}
41444145```
41454146
4146Requires Claude Code v2.1.219 or later; on v2.1.202 through v2.1.218, set the guideline in `/config` instead.
4147
4148<span id="plugin-configuration" />
4149
4150<span id="manage-plugins" />
4151
4152<span id="plugin-settings" />
4153
4154## Plugins and skills
4155
4156Enable plugins, register marketplaces, restrict which plugin sources an organization allows, and control which skills load. For installing and building plugins, see [Plugins](/docs/en/plugins/overview).
4157
4158### `disableBundledSkills`
4159
4160Turn off the [skills](/docs/e
4147Requires Claude Code v2.1.219 or later; on v2.1.202 through v2.1.218, set the guideline i
No line in this hunk matches that.