{"version":"2.1.257","anchor":"plugin-hookskill-file-resolution-now-anchors-against-realpa","canonical_anchor":"plugin-hookskill-file-resolution-now-anchors-against-realpa","heading":"Plugin hook\/skill file resolution now anchors against realpath of the plugin directory","tier":"notice","area":"Plugins","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/plugin-hookskill-file-resolution-now-anchors-against-realpa","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### Plugin hook\/skill file resolution now anchors against realpath of the plugin directory\n\nPlugin hook and skill paths are resolved against the plugin directory's real path, catching traversal and symlink escapes.\n\nPlugin loading now resolves an anchor, the real path of the plugin directory, once and threads it through hook-file and skill-file path resolution, so hooks or skills referenced outside the declared plugin directory via path traversal or symlinks can be correctly detected.\n\n- Area: Plugins\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}