{"version":"2.1.229","anchor":"command-sourced-plugin-installs-ask-before-running-anything","canonical_anchor":"command-sourced-plugin-installs-ask-before-running-anything","heading":"Command-sourced plugin installs ask before running anything","tier":"notice","area":"Plugins","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229\/e\/command-sourced-plugin-installs-ask-before-running-anything","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229","markdown":"### Command-sourced plugin installs ask before running anything\n\nYou must confirm before Claude runs a marketplace plugin command, and -y works only outside sessions.\n\n**What**\n\nBefore running a marketplace-declared plugin command, Claude Code prints the command and the marketplace it came from and asks you to confirm. Declining aborts with \"Aborted \u2014 the command was not run.\" `-y\/--yes` is accepted only on a TTY outside a Claude Code session; inside a session it is refused with a message telling you to run it in your own terminal.\n\n**Details**\n\n- Consent is recorded against the exact command string, so a marketplace that changes its command prompts again.\n- A workspace-local acceptance is re-confirmed rather than reused silently.\n\n**Evidence**\n\n`-y\/--yes is ignored inside a Claude Code session: run this in your own terminal to accept the command shown above.`\n\n- Area: Plugins\n- Names: `-y`, `--yes`\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}