What
Claude Code can load skills from a project's .claude/skills folder as plugins, which are add-ons that extend what it can do. It now refuses to load those project plugins in one situation:
- the running Claude Code has entered a worktree, which is a separate working copy of a git repository, and
- the Bash sandbox, the restricted environment that limits what shell commands can touch, is on now or was on earlier.
When this happens, a log message explains that a sandboxed command could have written those plugins, and says to restart Claude Code in the folder that holds the .claude folder.
Why
This stops a command that ran inside the sandbox from planting plugins that would then load outside it. The catch is that project plugins can quietly stop loading, so if one goes missing after a worktree switch, restart Claude Code from the project folder.