[Bug] Plugin skills prompted for Read permission on their own plugin directory files

Bug Description
Bug: Plugins are prompted for Read permission on their own files.

When a plugin skill (installed via marketplace) tries to Read files
within its own plugin directory (~/.claude/plugins/cache/<marketplace>/<plugin>/<version>/),
the user is prompted to allow each Read.

Per the docs, "Skills can include supporting files alongside SKILL.md"
and the debug checklist says "Verify file permissions allow reading the plugin files" —
implying plugins should have implicit read access to their own directory.

Plugin settings.json doesn't help because the docs state:
"Only agent settings are currently supported" for plugin settings.json.

Repro: Install any plugin with skills that reference supporting files
(e.g., docs/, workflow files). Invoke a skill — each file read triggers
a permission prompt.

Expected: Plugin has implicit read access to files within its own
plugin cache directory.

Environment Info

• Platform: darwin
• Terminal: vscode
• Version: 2.1.69
• Feedback ID: e8b5b4ae-93e0-4e1c-a33b-d7dce879c862

Errors

[]