You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.317,
ImprovementsSection of the release
What
When a plugin loads, Claude Code now checks that each of its folders stays inside the location the plugin is allowed to use. It used to take these folders as given. The check covers these folders:
commands
agents
skills
output-styles
themes
workflows
Individual skill, theme and workflow entries inside those folders are checked as well. A plugin that belongs to a project must stay inside that project's folder. Anything that reaches outside is skipped, with an error of type path-traversal and a log line saying the folder was not loaded.
Why
A plugin can no longer use a link or an unusual path to make Claude Code read files from elsewhere on your computer. If a plugin you rely on stops loading a folder, it is likely pointing outside its own location.