Do not open a public issue for suspected vulnerabilities. Email wibo@aiarch.dev with reproduction steps and potential impact.

This plugin launches the locally installed Claude Code CLI with the current user's operating-system permissions. Use it only in repositories you trust. Review commands disable Claude customizations and restrict built-in tools. Fix and implementation delegation defaults to write access unless the request is explicitly read-only, diagnostic, or review-only.

Security fixes target the latest release and the current main branch.