Bug
A plugin explicitly disabled in user-level settings (~/.claude/settings.json) is still listed in the available skills system reminder and can be invoked by the assistant.
Steps to Reproduce
- Disable a plugin in
~/.claude/settings.json:
{
"enabledPlugins": {
"code-review@claude-plugins-official": false
}
}
- Start a conversation and ask for a code review.
- The disabled
code-review skill still appears in the <system-reminder> skills list.
- The assistant invokes the skill despite it being disabled.
Expected Behavior
- Disabled plugins should not appear in the available skills list injected into system reminders.
- If a disabled skill is somehow invoked, the Skill tool should reject the call.
Actual Behavior
- The disabled plugin appears in the skills list as if it were enabled.
- The assistant invokes it without any guardrail preventing execution.
Notes
User-level settings should take precedence over project-level settings. The enabledPlugins: false directive at the user level was ignored entirely.
Bug
A plugin explicitly disabled in user-level settings (
~/.claude/settings.json) is still listed in the available skills system reminder and can be invoked by the assistant.Steps to Reproduce
~/.claude/settings.json:{ "enabledPlugins": { "code-review@claude-plugins-official": false } }code-reviewskill still appears in the<system-reminder>skills list.Expected Behavior
Actual Behavior
Notes
User-level settings should take precedence over project-level settings. The
enabledPlugins: falsedirective at the user level was ignored entirely.