{"version":"2.1.221","anchor":"claude-doctor-reports-sandbox-credential-mask-problems","canonical_anchor":"claude-doctor-reports-sandbox-credential-mask-problems","heading":"claude doctor reports sandbox credential-mask problems","tier":"use","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.221\/e\/claude-doctor-reports-sandbox-credential-mask-problems","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.221","markdown":"### `claude doctor` reports sandbox credential-mask problems\n\nclaude doctor now lists each sandbox credential-masking problem separately with a specific fix.\n\n**What**\n\nDoctor gained a check that surfaces sandbox mask-credential warnings as individual issues with a concrete fix, instead of leaving them as a single stderr line at startup.\n\n**Details**\n\n- runs only when sandboxing is enabled and a mask warning is present\n- splits the warning on \" \u00b7 \" and turns each part into its own issue\n- covers empty injectHosts, masks degrading to deny on macOS, and TLS termination not being enabled\n\n**Evidence**\n\n`TLS termination is never enabled in scrub-only mode`\n\n- Area: Sandbox\n- Names: `claude doctor`\n- Tier: Use it now\n- Useful: 3\/5\n- Signal: 0\/5"}