All pull requests

Pull requests

• fix(plugins): run ralph-wiggum and output-style .sh hooks through bash with a quoted path

  #95698·claude[bot] opened Sep 20, 2026·

  ·

• diff: a shell command the tool held read-only fetches nothing

  #95423·poteat opened Sep 18, 2026·

  ·
  3

• diff: the first edit opens the pane only when it has a file to list

  #94847·bcherny opened Sep 16, 2026·

  ·
  4

• validate-agent.sh: don't abort at the first warning (set -e + ((x++))) and stop false-flagging valid agents

  #89404·bcherny opened Aug 25, 2026·

  ·
  10

• fix(security-guidance): make ** glob patterns match zero-depth paths

  #87079·anishsamant opened Aug 16, 2026·

  ·
  1

  7

• fix(pr-review-toolkit): repair invalid YAML frontmatter in all agents

  #87077·anishsamant opened Aug 16, 2026·

  ·
  1

  2

• fix: prevent false-positive CVP status changes during authorized security research

  #86870·JoTalbot opened Aug 15, 2026·

  ·

• fix(security-guidance): preserve Python probe errors

  #86746·aayush598 opened Aug 14, 2026·

  ·
  1

• feat: add shell completions (bash, zsh, fish) that stay in sync with the installed CLI

  #86626·5hal1n opened Aug 14, 2026·

  ·

• Fix duplicated word in CHANGELOG.md

  #86537·genesisdayabl-droid opened Aug 13, 2026·

  ·

• fix: HackerOne Bug Bounty Program access issue

  #85834·JoTalbot opened Aug 11, 2026·

  ·
  1

• fix(security-guidance): skip XSS warnings in docs

  #85806·yxl-lab opened Aug 11, 2026·

  ·
  1

• fix(hookify): load rules from ancestor .claude directories to prevent silent bypass

  #85716·alifakbxr opened Aug 11, 2026·

  ·
  1

• security-guidance: update default model refs from Opus 4.7/Sonnet 4.6 to Opus 5/Sonnet 5

  #85409·petergoldstein opened Aug 10, 2026·

  ·

• fix(plugin-dev): parse block scalar agent descriptions

  #85323·erichanwang opened Aug 9, 2026·

  ·
  1

• fix(skills): use spec-conformant names in the plugin-dev and hookify skills

  #85243·bechor25 opened Aug 9, 2026·

  ·
  1

• docs: fix stale hooks documentation link in bash_command_validator_example.py

  #84854·cassiacarollinee-ship-it opened Aug 7, 2026·

  ·

• fix(hookify): enforce proper rule evaluation scope and secure file read

  #84747·alifakbxr opened Aug 7, 2026·

  ·
  2

• fix(security): address yaml injection and symlink credential overwrites in plugin scripts

  #84711·alifakbxr opened Aug 7, 2026·

  ·
  1

• fix(plugin-dev): prevent validate-agent.sh exiting on first warning

  #84427·erichanwang opened Aug 6, 2026·

  ·

• fix(plugin-dev): handle wrapped hook schemas and optional matchers in validate-hook-schema.sh

  #84381·erichanwang opened Aug 6, 2026·

  ·

• fix(scripts): allow any user to prevent auto-close with thumbs down

  #84365·alifakbxr opened Aug 6, 2026·

  ·
  1

• fix(hookify): fail closed on exceptions in pretooluse hook

  #84364·alifakbxr opened Aug 6, 2026·

  ·
  1

• fix: workaround for self-signed certificate error in Cowork (closes #24470)

  #84138·botbikamordehai2-sketch opened Aug 5, 2026·

  ·
  1

• Fix/83484 symlink path expansion

  #83738·KrypticKode007 opened Aug 4, 2026·

  ·
  1