This episode breaks down the breaking changes in Claude Code 2.1.207, including why raw template strings in custom hooks were removed and how shell-injection attacks can happen through plugin configs.It also covers the safer migration paths with exec-form arrays and CLAUDE_PLUGIN_OPTION_ environment variables, plus the new decision to ignore local repository config files for plugin resolution.

This episode breaks down the breaking changes in Claude Code 2.1.207, including why raw template strings in custom hooks were removed and how shell-injection attacks can happen through plugin configs. It also covers the safer migration paths with exec-form arrays and CLAUDE_PLUGIN_OPTION_ environment variables, plus the new decision to ignore local repository config files for plugin resolution.

Claude Code Plugin Security: Fixing Shell Injection

It feels like every day there's a new Claude Code update. This unofficial podcast, hosted by Lachlan and James (& powered by Jellypod AI), helps us stay up to date with everything Anthropic ships to Claude, from product updates, new workflows, and more. Each episode highlights what changed, how to use it, and why it matters.

News

Technology

It feels like every day there's a new Claude Code update. This unofficial podcast, hosted by Lachlan and James (&amp; powered by Jellypod AI), helps us stay up to date with everything Anthropic ships to Claude, from product updates, new workflows, and more. Each episode highlights what changed, how to use it, and why it matters.

Share Claude Code Plugin Security: Fixing Shell Injection

Sign up to save your podcasts

Claude Code Plugin Security: Fixing Shell Injection

Claude Code Plugin Security: Fixing Shell Injection