{"version":"2.1.318","anchor":"claude-security-plugin-tip-gated-by-tengu-noble-piglet","canonical_anchor":"claude-security-plugin-tip-gated-by-tengu-noble-piglet","heading":"Security review gets a markdown-only final reply and a tip for the Claude Security plugin","tier":"notice","area":"Spinner Tips","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318\/e\/claude-security-plugin-tip-gated-by-tengu-noble-piglet","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318","markdown":"### Security review gets a markdown-only final reply and a tip for the Claude Security plugin\n\nsecurity-review now ends with a markdown-only report and may add a closing tip, and a spinner tip can suggest the Claude Security plugin\n\n**What**\n\nThe security-review command and the tips around it changed:\n\n- Final reply: the command now ends with the instruction \"Your final reply must contain the markdown report and nothing else.\" In normal top-level runs, lines from a closing tip are added before that instruction. Before, there was no instruction about the final reply.\n\n- Closing tip: a new step loads a security-review closing tip. It is skipped when `spinnerTipsEnabled` is false.\n\n- Plugin tip: a new tip, shown next to the spinner while Claude works, suggests installing the Claude Security plugin with `\/plugin install`. It reads \"Looking to improve the security of your code? Install the Claude Security plugin\" or \"Tip: For a deeper, verified scan, install the Claude Security plugin:\". It only shows when all of these hold: the remote setting `tengu_noble_piglet` has `security_review_tip` set to true (nothing has been read about this setting);\n\n- spinner tips are enabled;\n\n- the plugin is not installed yet;\n\n- the tip has not been shown too recently;\n\n- security review was used recently or a security-check score is high.\n\n**Why**\n\nThe review's last message is now just the report, which is easier to read or copy. Some users may see a suggestion to install the Claude Security plugin. Setting `spinnerTipsEnabled` to false hides these tips.\n\n- Flag `tengu_noble_piglet`: Not enough to say (read for one account on one subscription tier against v2.1.318; this account: no value returned, anonymous baseline: no value returned, compiled default: not a boolean we can read) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Spinner Tips\n- Names: `\/plugin install`\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no"}