Claude Code v2.1.233: Marketplace Skills Are Sandboxed, Opus 4.7 Leaves /fast, Workflows Default to Medium

Claude Code v2.1.233 (Aug 15) sandboxes marketplace skills so they can't shadow local commands, removes Opus 4.7 from /fast, and sets dynamic workflows to medium (< 15 agents) by default.

Marketplace skills are now sandboxed on your machine. Skills synced from claude.ai no longer shadow local slash commands or MCP prompts. Their descriptions are sanitized and labeled. On your local machine, skill bodies can't run commands or expand @ files — they're read-only reference material there; full execution only runs inside the managed session they're installed for. If you relied on marketplace skill @ file expansion locally, rebuild that flow in a project skill instead.

Opus 4.7 removed from /fast. The July 24 migration deadline has passed. /fast now routes to Opus 5 and Opus 4.8 only. Run /models if you're seeing unexpected behavior after the change.

Dynamic workflows default to medium. Previously, the size guideline was unset unless you configured it. Now Claude Code aims for fewer than 15 agents per workflow by default — a guardrail against accidental cost spikes. Override with /config workflow.size=large (or workflowSizeGuideline: "large" in settings.json) when you need a comprehensive sweep.

Why it matters: The skill sandboxing closes a supply-chain risk — a poisoned marketplace skill could no longer inject behavior into your local command flow. The workflow default keeps routine runs from ballooning unexpectedly.

Sources: Claude Code changelog — code.claude.com · Claude Code August 2026 updates — Releasebot