Follow Discord
Sweep 12 Nov 2026 · 23:00Z Build v2.1.323 540 read Stable v2.1.311 Latest v2.1.323 Next v2.1.323 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.323 ·

Skill shell commands that run git no longer use your always-allow rules

When a skill's built-in shell command uses git, Claude Code checks it without your always-allow rules and may ask or refuse

You'll notice Improvements
JSON All of v2.1.323
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SkillsArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release

Unclear It is not clear whether this stricter check is switched on by default.

What

A skill can include shell commands that run as part of its instructions. When such a command involves git, Claude Code now checks its permission without your always-allow rules for commands and without the skill's own list of allowed tools.

If the command cannot pass that stricter check, you see a message that a file named HEAD or .git in this folder or one above it may not be yours.

Why

This guards against a folder you opened that contains planted git files meant to make git do something harmful. Skills that run git may now ask for permission or fail where they used to run quietly.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear whether this stricter check is switched on by default.

See this entry in the whole of v2.1.323 →

Feedback