{"version":"2.1.90","anchor":"powershell-security-improvements","canonical_anchor":"powershell-security-improvements","heading":"PowerShell Security Improvements","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.90\/e\/powershell-security-improvements","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.90","markdown":"### PowerShell Security Improvements\n\n- Background job operator (`&`) detection: PowerShell commands using the `&` operator now trigger a security prompt with the message \"Command uses the background job operator (`&`) which spawns a child PowerShell process\" (search for `\"background job operator\"`).\n- `Remove-Item -Recurse` safety: Deleting the working directory (including `.git` and `.claude`) via `Remove-Item -Recurse` now requires manual approval (search for `\"Remove-Item -Recurse targeting\"`).\n- Action parameter validation: PowerShell common parameters like `-ErrorAction`, `-WarningAction` (and their aliases `-ea`, `-wa`, etc.) are now validated to ensure they use expected values (`SilentlyContinue`, `Stop`, `Continue`, `Ignore`), preventing abuse of these parameters.\n\n**Evidence**\n\nPowerShell AST parser (search for `\"hasBackgroundJob\"` and `\"background job operator\"`)"}