coworkplugins

Claude plugin security and permissions

This page summarizes what Anthropic's documentation says about plugin safety. It is not a security audit of any plugin listed on this site.

What a plugin can do

A plugin's skills and commands are instructions Claude follows, and its connectors reach outside services with the account you connect. In Cowork and Claude Code, some parts of a plugin also run on your computer:

  • Agents and hooks run commands on your computer when certain events happen.
  • A connector marked "Runs in each session" runs a program on your computer.
  • A mod (Claude Code only) is code that runs inside Claude Code and can change what it does and shows.

Adding a plugin does not add a connector to your account or sign you in to anything. You add or connect each one yourself from the plugin's Connectors tab.

Source: claude.com/docs/plugins/overview

What Anthropic reviews

Anthropic reviews plugins listed in its directory: every version gets automated validation and a security scan, and a person reviews a new listing before it goes live. That review does not cover a plugin you add from a marketplace URL or upload yourself, so add those only from sources you trust.

For connectors, Anthropic uses labels. Verified means tested for quality and compatibility, and is not a security audit. Community means a third party built it and Anthropic screened it but has not reviewed it in depth. Custom means you added it yourself and Anthropic has not reviewed it.

Sources: plugins overview, connector verification

Before you add a third-party plugin

Anthropic's advice for any connector built by someone other than Anthropic:

  • Only connect to servers from developers and organizations you trust.
  • A connector's developer controls which tools it exposes and can change them at any time.
  • Carefully review the permission scopes requested during sign-in.
  • Stay aware of prompt injection risks, even though Claude has built-in protections.
  • Watch for unexpected changes in tool behavior.

On this site

Community plugins here are read from their GitHub repositories. Each plugin page shows the author, license, GitHub stars and last push date when GitHub provides them, and links to the source. Stars show interest, not safety. Open the source, read the README, and check what the plugin sends and which connectors it needs before you install it. See also how to install a plugin.