Follow Discord
Sweep 03 Nov 2026 · 22:27Z Build v2.1.318 536 read Stable v2.1.311 Latest v2.1.318 Next v2.1.318 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.317 ·

Plugin folders that point outside the plugin are no longer loaded

Claude Code now skips plugin folders and entries that reach outside their allowed location, reporting a path-traversal error

You'll notice Improvements
JSON All of v2.1.317
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.317,
ImprovementsSection of the release
What

When a plugin loads, Claude Code now checks that each of its folders stays inside the location the plugin is allowed to use. It used to take these folders as given. The check covers these folders:

  • commands
  • agents
  • skills
  • output-styles
  • themes
  • workflows

Individual skill, theme and workflow entries inside those folders are checked as well. A plugin that belongs to a project must stay inside that project's folder. Anything that reaches outside is skipped, with an error of type path-traversal and a log line saying the folder was not loaded.

Why

A plugin can no longer use a link or an unusual path to make Claude Code read files from elsewhere on your computer. If a plugin you rely on stops loading a folder, it is likely pointing outside its own location.

See this entry in the whole of v2.1.317 →

Feedback