You'll notice
Useful3 Signal2
Plugins found by name are refused if every candidate folder sits outside trusted roots.
What's wrong with this entry?
Anonymous. No account, no email.
What
When Claude Code turns a plugin name into a folder on disk, each candidate install path is now checked for being outside the trusted roots. If every candidate looks untrusted it refuses instead of silently loading the first one it found.
Details
- The refusal is recorded with a
refusedoutcome naming the plugin. - Always on, not an opt-in setting.
Evidence
kind: "refused", pluginId: e
Strings lifted out of the shipped bundle, so the claim above can be checked against them.