Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PluginsArea: what it touches
Internal ChangesKind: in v2.1.271,
Internal ChangesSection of the release
What
Claude Code now computes a cryptographic fingerprint (a SHA-256 hash) over a plugin command's type, plugin ID, and command text, combined with either a catalog revision or an archive URL. A separate "catalog revision" value is derived from the plugin's git commit, a digest file in cloud storage, or a hash of its marketplace and package files.
A new set of outcomes determines whether a plugin command is trusted before it runs:
command_source_refused
command_source_declined
entry_helper_unconfirmed
entry_helper_declined
Why
This adds a verification step so plugin commands can be checked against a known-good source before Claude Code trusts them, reducing the risk of running a command whose origin can't be confirmed.
