You'll notice
Plugin hook and skill paths are resolved against the plugin directory's real path, catching traversal and symlink escapes.
Plugin loading now resolves an anchor, the real path of the plugin directory, once and threads it through hook-file and skill-file path resolution, so hooks or skills referenced outside the declared plugin directory via path traversal or symlinks can be correctly detected.