Skill and Plugin Security Scanning (Beta)

Claude Enterprise organizations can automatically check third-party skills and plugins for malicious content when someone uploads or edits one.

Scanning runs automatically on upload or edit and covers standalone skills, plugins, and skills bundled inside plugins
Most scans finish in one to two minutes, and a repeat upload of the same file returns a cached result instantly
A failed scan blocks the skill or plugin outright, and neither the member nor an admin can override the block
Organization Owners and Primary Owners turn it on under Organization Settings, then Skills
Available in beta on Enterprise plans across Claude, Claude Cowork, and Enterprise plugin marketplaces at no extra cost
It does not cover skills built inside Claude or skills that come from connected servers, and it is unavailable to organizations using customer-managed encryption keys, zero data retention, or HIPAA configurations

Letting a team install third-party skills and plugins without an admin hand-reviewing every file.

Your organization lets members bring in outside skills or plugins and you have no check on what those files do.

IT and security admins on Claude Enterprise plans.

Join the newsletter to get ahead with AI.

I share strategies, new modules, free guides, and tools to get you better at using AI in your work.