DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.
In-place plugins are refused when their directory contains your working directory
You'll notice
Useful2Signal2
Plugins
A linked plugin won't load if its folder contains your working directory.
What's wrong with this entry?
Anonymous. No account, no email.
What
A plugin served in place from its source directory (link mode, no cache copy) is not loaded if that directory contains the current working directory, because its files could not be protected from sandboxed commands running there. The reason appears as a plugin load error.
Evidence
which contains the working directory, so its content could not be protected from sandboxed commands here.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.