You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.242,
ImprovementsSection of the release
What
When loading a plugin or skill, Claude Code now checks each part of a symlink's target and refuses links that leave the plugin's own directory tree, route above it, point back at the plugin directory itself, or land in repository metadata. Each case gets its own message.
Details
Eval case discovery separately refuses mocks/ as a case directory name.
Evidence
is a symlink that leaves the plugin tree
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
