Skills
Claude Code 2.1.269 closes three permission-rule escapes: `!` negation scope, Bash `tee` writes, and world-readable plugin archives
A deny or ask permission rule starting with `!` was applying beyond the settings source that wrote it; such a rule now applies only within its own source, and a bare `!` negation is ignored outright. Separately, `Edit()` deny rules and the write-path check now apply to the file a Bash `tee` command writes, so a `Bash(tee:*)` allow rule no longer covers destinations outside the working directories. Plugin archives extracted for a session were readable by other local users and kept world-writable bits from the archive; both are fixed, and stale files no longer survive re-extraction.
↳ Follow the thread