Claude Code bug: builtin security plugin bypasses user-tier UserPromptSubmit hooks on first prompt
zaphod72 · ghdev · 2026-10-20
A reproducible Claude Code bug (issue #103626): the builtin cc-plugin-sec-default plugin bypasses user-tier classic.UserPromptSubmit hooks on the first prompt of every session, while later prompts in the same session are unaffected.
- The ponytail plugin (5.3.2) is affected; the engine logs show the event being skipped while its other hooks still run
- The reporter links it to #102653 (prompt.attachment bypassed by the same mechanism)
- Debug logs clearly show tier ordering and event registration
- The ask: if intentional, docs and changelog should state which events and tiers sec-default bypasses
A regression risk for developers relying on user-level hooks in custom workflows.
More from coding & agent
- Claude cut a 2.6-hour video export to 20 minutes — but only after being told to rebuild the server — byhewar · 2026-10-23
- 3 flight-booking rules my AI agent checks that I'd never do by hand — Efistoffeles · 2026-10-23
- OpenJet claims Qwen3.8-27B coding runs 1.9x faster than llama.cpp on one RTX 3090 — JeremyCMorgan · 2026-10-23
- Building an autonomous SEO agent in Hermes with three skills: programmatic pages, Keywords Everywhere, DataForSEO — EXM7777 · 2026-10-23
- Building a sports betting AI agent with onchain execution and human approval by default: architecture and lessons — Dry-Comfortable-2678 · 2026-10-23
- How do you audit AI agent decisions in regulated workflows? A field survey — Ok_Way_1993 · 2026-10-23