Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.98 Home All releases ←olderv2.1.97 v2.1.100newer→
Claude Code v2.1.98

CLAUDE_CODE_SCRIPT_CAPS Environment Variable

What

Enforces per-script call limits in subprocess-scrubbed environments to prevent data exfiltration via repeated write operations.

Usage
export CLAUDE_CODE_SCRIPT_CAPS='{"curl": 10, "wget": 5}'
Details
  • JSON object mapping script/command name substrings to maximum call counts
  • Tracks cumulative usage across the session
  • Throws an error when a cap is exceeded: "Script call limit exceeded: X has been called N times (cap: M)"
  • Only active when CLAUDE_CODE_SUBPROCESS_ENV_SCRUB is enabled
  • Designed for untrusted-input workflows where exfiltration prevention is critical
Evidence

Script caps (search for "CLAUDE_CODE_SCRIPT_CAPS" and "Script call limit exceeded")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.98 →