# Claude Code 2.1.218: background code review, untrusted-hook fix, agent name restriction

> A large maintenance release that moves `/code-review` into a background subagent, tightens trust rules around agent frontmatter hooks, and changes several defaults. Anyone with agent files whose names contain a colon, or skills using `context: fork`, will see behavior change without any action on their part.

| | |
|---|---|
| **Tool** | Claude Code |
| **Version** | 2.1.218 |
| **Kind** | release |
| **Published** | 2026-07-22 |
| **Observed** | 2026-08-11 |
| **Significance** | 3/5 |
| **Breaking** | yes |
| **Categories** | fix, feature, breaking, security |

## What changed


- `/code-review` now runs as a background subagent so review output no longer fills the conversation; stacked slash commands stay as its review target
- Agent markdown files now reject agent names containing `:` (reserved for plugin namespacing)
- Skills with `context: fork` now run in the background by default; opt out per skill with `background: false`
- Agent frontmatter hooks no longer run from untrusted folders — the agent file's own folder must have accepted workspace trust
- `/deep-research` only starts when invoked manually; Claude no longer launches it on its own
- Auto mode: dangerous-rm, background-`&`, and suspicious-Windows-path checks are adjudicated by the auto-mode classifier instead of opening permission dialogs; plan mode no longer prompts for Bash commands the static analyzer can't prove read-only
- Skill and plugin frontmatter booleans accept `yes`/`no`/`on`/`off`/`1`/`0` (case-insensitive)
- Fixed Windows paths with `\u`-prefixed segments (e.g. `C:\Users\unicorn`) being corrupted into CJK characters, making those files inaccessible
- Fixed the left arrow key discarding a conversation with no undo; presses right after editing now confirm first
- Fixed `/ultrareview` failing on descriptive arguments, and `/code-review ultra` silently running a local review in non-interactive sessions
- Fixed gateway spend metering to price Bedrock application-inference-profile ARNs at the configured model's rates
- Fixed remote sessions heartbeating forever after their worker was replaced
- Several accessibility fixes in `--ax-screen-reader` mode (deletion announcements, cursor tracking in panels, VoiceOver space echo)


## Sources

- [changelog_md](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/claude-code/2-1-218
Entity: https://changelogs.info/claude-code
Event ID: `evt_2026-07-22_claude-code_2-1-218`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.