Zip plugin installs strip a single wrapping directory so the plugin lands at top level.
What's wrong with this entry?
A marketplace entry can now point at a zip file over HTTPS instead of a git repo or npm package, with an optional sha256 digest that is checked on every download. When no version is declared, that digest is what identifies the version. If the zip contains a single wrapping directory, it is stripped so the plugin lands at the top level.
- The URL is checked against a new guard that rejects loopback, link-local, IPv4-mapped IPv6, unique-local and cloud-metadata hosts, so a marketplace entry cannot make Claude Code fetch from inside your network.
- Authentication headers are inherited from the enclosing url-sourced marketplace only when the origins match.
- The error message for marketplaces configured in settings now lists this type alongside github, git-subdir, npm and url.
Archive URLs must use https:// and must not point at a loopback, link-local, or cloud-metadata host
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.238
Marketplace validation flags unsafe archive credential setups
Both mention sha256