Skip to main content
JobPlugins

Are Claude plugins safe? What to check first

Plugins are useful because they act on your behalf, so it is fair to ask whether they are safe. The honest answer depends on where a plugin comes from. This guide shows what a plugin can do, what Anthropic checks, and a short checklist.

By Francesco Leoni, Founder of BrainDump · Last reviewed November 6, 2026

What a plugin can do

A plugin’s skills and commands are instructions Claude follows. Its connectors reach outside services with the account you connect.

In Cowork and Claude Code, some parts of a plugin also run on your computer: agents and hooks run commands when certain events happen, and a connector marked “Runs in each session” runs a program on your computer. Those parts do not run in chat.

What Anthropic reviews, and what it doesn’t

Anthropic reviews plugins listed in its directory. Every version gets automated validation and a security scan, and a person reviews a new listing before it goes live.

That review does not cover a plugin you add from a marketplace URL or upload yourself. Anthropic’s advice is to add those only from sources you trust.

What “Anthropic verified” means on this site

A plugin marked Anthropic verified has a page on Anthropic’s official Claude Marketplace that shows the verified badge, and we checked it there. A plugin marked not verified comes from the plugin directory listing only. We have not checked it, and its description is a summary of that listing.

A short checklist before you add a plugin

Run through these questions. None needs technical knowledge.

  1. Who made it? Prefer a known author, and open the official page when we link to it.
  2. What does it connect to? Read its Connectors tab and connect only what you need.
  3. Does it ask for more than its job needs? A contract reviewer should not need your calendar.
  4. Try it first on a task with no sensitive data, and read the result before you rely on it.
  5. At work, check with your administrator. They may restrict which plugins can be added.
  6. If it doesn’t help, turn it off or remove it from Customize > Plugins.

Check the results, always

Claude can make mistakes. For legal, financial and HR work, treat what a plugin produces as a first draft and review it before you rely on it.

Questions people ask

Does Anthropic review every Claude plugin?
Anthropic reviews plugins listed in its directory: automated validation and a security scan on every version, and a person reviews a new listing. That review does not cover plugins added from a marketplace URL or uploaded by you.
Can my employer block plugins?
Yes. On Team and Enterprise plans, an Owner controls which sources members see and whether they can add their own, and can make some plugins required or installed by default.
What does a plugin marked “not verified” on this site mean?
It means we have not checked it on Anthropic’s official pages. Its description comes from the plugin directory listing. Check the details before you add it.

Sources

Ready to pick a plugin?

Choose your job to see the three Claude plugins we would start with.