Title: security-guidance plugin (v2.0.8) hooks always fail on Windows with the Microsoft Store Claude desktop app

Title: security-guidance plugin (v2.0.8) hooks always fail on Windows with the Microsoft Store Claude desktop app

What happens

Every hook the plugin runs fails with:

python.exe: can't open file 'C:\Users\<user>\AppData\Roaming\Claude\local-agent-mode-sessions\...\rpm\plugin_...\hooks\security_reminder_hook.py': [Errno 2] No such file or directory

Setup

• Windows 10 Home (build 19045)
• Claude desktop app installed from the Microsoft Store (package Claude_pzs8sxrjxfjjc)
• Python 3.14 installed through the Python install manager (AppData\Local\Python\pythoncore-3.14-64)
• Git Bash

Likely cause

The Store version of the app has its AppData\Roaming writes redirected by Windows, so the plugin files actually live in AppData\Local\Packages\Claude_pzs8sxrjxfjjc\LocalCache\Roaming\.... sg-python.sh starts Python by name, and that Python apparently runs outside the app's redirected view, so the AppData\Roaming\... path doesn't exist for it. Calling python.exe by its full path from inside the app does find the file.

Other issues

1. Every failure is reported as "Background security review found issues", and Claude is woken up to respond, which starts another turn and another failure, so it loops endlessly.
2. The commit and push review hooks (if: Bash(git commit:*) / Bash(git push:*)) fired on Bash commands that weren't git commits or pushes.

Workaround

Turning off the plugin in the desktop app stops the errors in new sessions.