Git addresses for plugins and marketplaces are checked more strictly

Plugins and plugin marketplaces can be downloaded from git addresses. Claude Code now refuses a git address when it contains any of the following:

• %00 anywhere in the address.
• Square brackets that git could read as the name of a server.
• A backslash before the first / of an http or https address.
• :// inside a short-form address such as git@host:path.

When an address is refused, Claude Code says it is refusing to clone or refusing to query, and gives the reason. An error about an unreadable address now lists the forms Claude Code accepts. A file:// address that contains a drive letter gets an extra note that only applies on Windows.

The same check now covers downloading, looking up available versions, and asking a remote for its contents. It also covers two more places:

• A marketplace given as a network git address. If the address fails the check, the marketplace is skipped.
• Marketplaces listed from claude.ai. A git-based one only appears in the list if its address passes the check.