Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.229 Home All releases ←olderv2.1.228 v2.1.231newer→

Claude Code v2.1.229 12 Aug 2026

Command-sourced plugin installs ask before running anything

You'll notice

Useful3 Signal2

Plugins

You must confirm before Claude runs a marketplace plugin command, and -y works only outside sessions.

-y--yes

What

Before running a marketplace-declared plugin command, Claude Code prints the command and the marketplace it came from and asks you to confirm. Declining aborts with "Aborted — the command was not run." -y/--yes is accepted only on a TTY outside a Claude Code session; inside a session it is refused with a message telling you to run it in your own terminal.

Details

Consent is recorded against the exact command string, so a marketplace that changes its command prompts again.
A workspace-local acceptance is re-confirmed rather than reused silently.

Evidence

-y/--yes is ignored inside a Claude Code session: run this in your own terminal to accept the command shown above.

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.229 →