{"version":"2.1.323","anchor":"plugin-authoring-hand-over-now-scans-zips-and-plugin-files-f","canonical_anchor":"plugin-authoring-hand-over-now-scans-zips-and-plugin-files-f","heading":"Plugin files and zips can be checked for secret keys before Claude sends them","tier":"soon","area":"Plugins","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/plugin-authoring-hand-over-now-scans-zips-and-plugin-files-f","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### Plugin files and zips can be checked for secret keys before Claude sends them\n\nBefore Claude sends you a plugin file or zip, Claude Code can scan it for secret keys and ask whether to send it anyway\n\n**Unclear.** It is not clear whether the secret-key check is switched on by default or only when turned on remotely.\n\n**What**\n\nWhen Claude sends you a plugin file or a zip archive while helping you build a plugin, Claude Code can now scan the contents first for anything that looks like a secret key, such as a password or access token. This check only runs when a remotely controlled switch is on.\n\n- If it finds possible keys, a \"Key check\" dialog asks you to choose \"Don't send\" or \"Send it\".\n\n- If the check cannot finish, the file is not sent.\n\nA second switch, off unless it is turned on remotely, adds a way for plugins to set their look (colours and backdrop) to the plugin-authoring skill, along with a reference page about it.\n\n**Why**\n\nIt puts a warning in front of sharing a file that may contain a key you did not mean to hand over. The theme option points to plugins being able to change how they look.\n\n- Flag `tengu_amber_lantern`: Not enough to say (read for one account on one subscription tier against v2.1.323; this account: no value returned, anonymous baseline: no value returned, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Plugins\n- Tier: Nothing to try yet\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no\n- Present in the build but not switched on"}