Unclear It is not clear whether the new check applies to every plugin or only to plugins that set a particular option.
What
Plugins, add-ons that extend Claude Code, name files such as MCP server programs, skill folders and bundles. Claude Code now checks these paths against the plugin's own files (a filesAnchor check):
- MCP server paths, skill directories and MCPB configuration (plugin bundles) are now checked, and paths that lead outside the plugin are refused.
- A refused bundle shows: 'This bundle can't be configured. If its path leads outside the plugin, the plugin's author needs to change it.'
- A path in mcp-servers or lsp-servers that is absolute or has a '..' part now gets its own message, starting 'Server file not read:', instead of the general 'Path escapes plugin directory: ...'.
- Plugin validation also skips some directories.
Before, MCP paths were joined without this check.
Why
Plugins can no longer reach files outside their own folder through these paths, and authors get clearer errors. Some existing plugins that relied on such paths may stop loading until their author fixes them.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear whether the new check applies to every plugin or only to plugins that set a particular option.