What
A skill is a packaged set of instructions Claude can follow, and some skills arrive as a downloaded archive (a single bundled file). Before, Claude Code unpacked everything in the archive after a simple check of the names. Now it:
- lists every entry in the archive in detail first
- separates plain files from special entries, such as links
- leaves special entries out and rejects anything that is not a plain file
- refuses to unpack the archive at all if it cannot safely leave an entry out
Why
This makes it harder for a harmful skill archive to write files outside the places it should.