You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PluginsArea: what it touches
New FeaturesKind: in v2.1.251,
New FeaturesSection of the release
What
When Claude Code turns a plugin name into a folder on disk, each candidate install path is now checked for being outside the trusted roots. If every candidate looks untrusted it refuses instead of silently loading the first one it found.
Details
The refusal is recorded with a refused outcome naming the plugin.
Always on, not an opt-in setting.
Evidence
kind: "refused", pluginId: e
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
