Claude Code Plugin Security: Fixing Shell Injection

This episode breaks down the breaking changes in Claude Code 2.1.207, including why raw template strings in custom hooks were removed and how shell-injection attacks can happen through plugin configs. It also covers the safer migration paths with exec-for