What
Organisations can set policies that control what Claude Code is allowed to do. A new policy, allow_bundled_skills, covers bundled skills, which are ready-made instruction packs Claude can use. For organisations under the HIPAA policy set (requirement HIPAA-R56), it is denied.
If Claude Code has no stored copy of the policy to check, it allows bundled skills.
Why
If your organisation is under HIPAA rules, bundled skills will be switched off for you.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear how the policy is fetched or exactly what happens to the skills list when it is denied.