You'll notice
Useful2 Signal3
Plugin symlinks pointing outside the plugin directory are refused, each case with its own message.
What's wrong with this entry?
Anonymous. No account, no email.
What
When loading a plugin or skill, Claude Code now checks each part of a symlink's target and refuses links that leave the plugin's own directory tree, route above it, point back at the plugin directory itself, or land in repository metadata. Each case gets its own message.
Details
- Eval case discovery separately refuses
mocks/as a case directory name.
Evidence
is a symlink that leaves the plugin tree
Strings lifted out of the shipped bundle, so the claim above can be checked against them.