Plugin Settings Pattern for Claude Code Plugins

The 'ralph-wiggum' example describes a loop controlled by `iteration` and `max_iterations` from a configuration file. If `max_iterations` is not robustly validated or can be set to an extremely high value by a malicious actor, it could lead to an infinite loop and resource exhaustion.

iteration: 1
max_iterations: 10
... Reads iteration count and max_iterations

Agents are instructed to read and adapt their behavior based on `.local.md` file content, including `additional_instructions` and markdown bodies. A malicious configuration could inject harmful instructions, biases, or goal-hijacking prompts into the agent's reasoning.

Check for plugin settings at `.claude/my-plugin.local.md`.
If present, parse YAML frontmatter and adapt behavior according to:
- enabled: Whether plugin is active
- mode: Processing mode (strict, standard, lenient)
- Additional configuration fields
... additional_instructions: Use JWT tokens, not sessions