Vibe Coding
Claude Code 2.1.228 Hardens Skills Synced From claude.ai After They Could Shadow Local Commands
The 2026-08-11 release stops claude.ai-synced skills from shadowing local commands or MCP prompts, sanitizes and labels their descriptions, and — on your machine — blocks their bodies from running `!` commands or expanding `@` file references. That is a real privilege boundary: previously a skill authored in the web UI arrived locally with the same execution affordances as one you wrote yourself. If you sync skills from claude.ai, anything relying on `!` or `@` inside those bodies stops working after this upgrade and must move to a locally-authored skill.
↳ Follow the thread