Command echoing into the transcript now passes arguments through the secret-redaction pass (Bearer tokens, Basic auth, sk-ant- keys, Slack webhook URLs) for both the echoed /command args line and the "Args from unknown skill" warning; an unknown command whose args change under redaction is now treated as sensitive. Separately, plugin names, granted-scope display names, added workspace directory paths, and the IDE name shown in "Opened changes in …" are now run through a display sanitizer that blanks strings with zero visible width.
Slash-command arguments and untrusted display names are redacted/sanitized before display
Slash-command args and untrusted display names are now redacted or sanitized before appearing in the transcript
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.235,
ImprovementsSection of the release