[BUG] Suspicious tip/hint displayed during active tool use suggesting fake plugin install command

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

While Claude Code was actively working (reading files, writing code), a tip or hint appeared in the UI with the following content:

▎ /plugin install frontend-design@claude-plugins-official

Claude says this command does not exist in Claude Code. There is no plugin system, no /plugin command, and no registry called claude-plugins-official. The message appeared to mimic a legitimate Claude Code UI tip, which could trick users into executing a malicious or nonexistent command.

Concern: If external content (e.g. from files being read) can influence what is displayed as a UI tip, this could be a prompt injection vector targeting users directly through the interface.

Platform: Windows 11, Claude Code desktop app

What Should Happen?

Tips/hints shown in the Claude Code UI should only contain verified, legitimate content from Anthropic.

Error Messages/Logs

Steps to Reproduce

Not reliably reproducible. The tip appeared during a session where Claude Code was reading SVG files and writing an HTML file.

Claude Model

Sonnet (default)

Is this a regression?

I don't know

Last Working Version

_No response_

Claude Code Version

2.1.83

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

Windows Terminal

Additional Information

_No response_