Tests show Claude Code plugins can override user deny rules

AINews ran the same prompt seven times in headless mode on Claude Code 2.1.287 to test behavior when plugins and permission rules conflict. In one run, a seven-line plugin and a Bash(touch:*) deny rule were loaded together; the file was created, the result JSON reported zero permission denials, and debug logs showed that the plugin returning allow overrode the deny rule. The result was the same when the plugin was installed normally via claude plugin install, while under --safe-mode and disableAllHooks: true the deny rule still took effect. The author noted that cc-plugin-sec-default, which maintains deny rules, is only enabled with Team or Enterprise login or when managed settings exist; on Pro, Max, or API-key machines it logs not seated and steps aside.