← The Wire

Tools2026-06-02 · source-backed

Claude Code 2.1.160 hardens shell-startup writes and renames the workflow trigger to "ultracode."

Confidence
source-backed
Sources
1
Redaction
redacted

Story

It now prompts before writing to .zshenv, .zlogin, .bash_login, and ~/.config/git/, and before writing build-tool configs that grant execution (.npmrc, .yarnrc, bunfig.toml, .bazelrc, .pre-commit-config.yaml, .devcontainer/) even in acceptEdits mode. The dynamic-workflow keyword moved from "workflow" to "ultracode" (Changelog). Quietly important: those config files are exactly the silent-execution vector the skills attacks above exploit.

Related stories

Each link below shares sources, entities, or timing with this story.

  1. Shared entity: Claude Code / Same source / Shared topic / What happened next

    Claude Code's fallbackModel chains up to three models for resilience.

    Both cover Claude Code; cite the same source (Changelog); overlapping topics (claude, code, config).

  2. Claude Code's June 17 changelog adds `/config key=value`, a presence file, and an Apple Events opt-in.

    Both cover Claude Code; cite the same source (Changelog); overlapping topics (claude, code, config).

  3. Claude Code 2.1.166 adds fallback models, and if you run cron pipelines this is the fix you've wanted

    Both cover Claude Code; cite the same source (Changelog); overlapping topics (claude, code, config).

  4. Claude Code Ships a /dataviz Skill for Charts

    Both cover Claude Code; cite the same source (Changelog); overlapping topics (claude, code).

  5. Claude Code ships a dataviz skill with a color validator

    Both cover Claude Code; cite the same source (Changelog); overlapping topics (claude, code).

  6. Claude Code v2.1.194–195 adds trusted-device gating and a flag to kill mouse clicks.

    Both cover Claude Code; cite the same source (Changelog); overlapping topics (claude, code).

  7. Claude Code v2.1.193 adds shell-classifier routing and response telemetry; the June 25 build kills two long-standing footguns.

    Both cover Claude Code; cite the same source (Changelog); overlapping topics (claude, code).

  8. Claude Code 2.1.191 makes `/rewind` resume from before a `/clear`.

    Both cover Claude Code; cite the same source (Changelog); overlapping topics (claude, code).

Source trail

Entities

Provenance

AI generated
no
Story unit
2026-06-02-claude-code-2-1-160-hardens-shell-startup-writes-and-renames-the-workflow-trigger-to-ultracode
Labels
source-backed, canonical briefing excerpt