You'll notice
Useful2 Signal2
Skill folder names get two extra safety checks before loading.
What's wrong with this entry?
Anonymous. No account, no email.
What
Skills loaded from ~/.claude/skills/ and the other skill directories now have two more checks applied to the first part of their path, on top of the existing rejection of .., glob characters, backslashes and .claude segments.
Evidence
~/.claude/skills/
Strings lifted out of the shipped bundle, so the claim above can be checked against them.