Plugin error and guidance messages now use a helper that generates syntactically valid claude ... commands with proper argument quoting — avoiding cases where a plugin name containing special characters would produce a broken command string.
Details
claude plugin install <source> --scope projectis now generated via a validation function that checks the source name against a safe character pattern before emitting the command.- If the name is not safely quotable, the message falls back to plain English instructions without a literal command.
- Same improvement applies to
claude plugin disable <name> --scope localin project-scope conflict messages.
Evidence
Helper function Yg for safe command generation (search for "claude ${e} ${t}${n")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.