{"version":"2.1.261","anchor":"plugin-content-hash-verification-against-claudeai-archives","canonical_anchor":"plugin-content-hash-verification-against-claudeai-archives","heading":"Plugin content-hash verification against claude.ai archives","tier":"notice","area":"Plugin Marketplace","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.261\/e\/plugin-content-hash-verification-against-claudeai-archives","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.261","markdown":"### Plugin content-hash verification against claude.ai archives\n\nPlugins from claude.ai now get their downloaded archive verified against the install-time hash.\n\nWhen loading a plugin sourced from claude.ai at a pinned version, the client now compares the downloaded archive's content hash against the digest recorded at install time. On a mismatch, it deletes the staged download and refuses to load the plugin, telling the user to uninstall and reinstall to accept the new content.\n\n- Area: Plugin Marketplace\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}