Marketplace plugins can be built by a local command, with a timeout and optional link mode.
What's wrong with this entry?
A plugin marketplace entry can now use source: "command", a shell command that prints the absolute path of a plugin directory on stdout and exits 0. Claude Code copies that directory into its plugin cache, or links it in place with mode: "link". The command has a timeout in seconds, default 60 and capped at 600. Administrators can block it entirely with the managed settings disableCommandPluginSources or allowManagedHooksOnly.
- The command must print exactly one line, the absolute path of the plugin directory, and exit 0.
- The command string is validated as printable ASCII before it runs.
mode: "link"is refused on Windows; the copy behaviour remains available there.- Every install and update through this source goes through the confirmation prompt described below.
Shell command that prints the absolute path of the plugin directory on stdout (exactly one line) and exits 0.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.238
Managed settings can refuse plugin sources and marketplace updates
Both mention disable command source allow managed hook only
-
v2.1.238
Plugin marketplaces and archives can mint HTTP headers from a command
Both mention disable command source allow managed hook only
-
v2.1.242
Administrators and --bare can block plugin hooks from loading
Both mention disable allow managed hook only