What
When a plugin's location comes from running a shell command, Claude Code now refuses paths that are Windows UNC shares or automounted network locations, and refuses paths reached through a symlink that points to an untrusted network location. Both the resolved plugin directory and every entry inside it are checked.
Details
- Always applied when resolving a command-sourced plugin; there is no override.
- The refusal says the path is a network path (UNC or automount) and is not supported as a plugin directory.
Evidence
a network path (UNC or automount), which is not supported as a plugin directory
Strings lifted out of the shipped bundle, so the claim above can be checked against them.