Claude Code 2.1.228 hardens synced skills against command shadowing
Version 2.1.228, released Aug 11, hardens skills synced from claude.ai so they can no longer shadow local commands or MCP prompts; their descriptions are now sanitized and labeled, and on your machine their bodies can't run `!` shell commands or expand `@` files. The same 18-change release fixes interactive sessions that could freeze mid-redraw after a rare layout error, git/Git Bash not being found on Windows when Claude Code launches from a parent folder of the git install, `/tui` reverting to an earlier model after a `/model` change, and cross-session messaging sometimes starting without an inbox after install or upgrade — plus it lets newer models overwrite a file they haven't read this session, matching the Edit tool's rules, and removes an outdated notice about auto mode costing more.