Skill and Plugin Security Scanning (Beta)

Claude Enterprise organizations can automatically check third-party skills and plugins for malicious content when someone uploads or edits one.

Scanning runs automatically on upload or edit and covers standalone skills, plugins, and skills bundled inside plugins
Most scans finish in one to two minutes, and a repeat upload of the same file returns a cached result instantly
A failed scan blocks the skill or plugin outright, and neither the member nor an admin can override the block
Organization Owners and Primary Owners turn it on under Organization Settings, then Skills
Available in beta on Enterprise plans across Claude, Claude Cowork, and Enterprise plugin marketplaces at no extra cost
It does not cover skills built inside Claude or skills that come from connected servers, and it is unavailable to organizations using customer-managed encryption keys, zero data retention, or HIPAA configurations