v0.3.7 — harden marketplace and workflow safeguards
v0.3.7
This release hardens plugin installation, safety hooks, and repository workflow tools.
Why update
- Marketplace validation now rejects sources that can escape the checked repository.
- Guard hooks recognize more valid command wrappers and more unsafe rewriter forms.
- Repository workflow tools now report invalid input and GitHub API failures more clearly.
Plugin updates
context-handoff0.1.3→0.1.4:session-to-mdvalidates options and refuses to overwrite an existing output file.guard-hooks0.2.4→0.2.5: command parsing covers additional wrapper and rewriter forms without bypassing safety checks.repo-gate0.1.4→0.1.5: marketplace and CI checks are stricter, and workflow skills require explicit authority for mutations.
Upgrade
claude plugin update context-handoff@cc-agents-kit
claude plugin update guard-hooks@cc-agents-kit
claude plugin update repo-gate@cc-agents-kitRestart any open Claude Code session after the update.