You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.275,
ImprovementsSection of the release
What
When Claude Code's sandbox checks whether a script invoked via a shebang line (the #!/usr/bin/... line that names an interpreter) is safe to run, it now uses a large table of argument grammars specific to each interpreter, including bash, dash, zsh, node, Rscript, osascript, fish, tclsh, wish, python, perl, ruby, awk, sed, php, csh, expect, and make. Previously this check was simpler and less permissive.
Why
Scripts that invoke a recognized interpreter with known-safe flags can now be judged safe more accurately, rather than being treated conservatively across the board.
