Folders created by command-built plugins are now treated as sensitive and protected from edits.
What's wrong with this entry?
Directories created by command-sourced plugins are now treated like .claude config paths, so editing a file inside one is refused with "Claude requested permissions to edit ... which is a sensitive file."
- The denied set is built by scanning the
installed_plugins.jsonrecords across plugin roots, and is also updated directly when a plugin is installed or removed. - The scan result is cached for 5 seconds.
installed_plugins.json
Strings lifted out of the shipped bundle, so the claim above can be checked against them.