MCP servers, plugins and skills
Treat every extension as a dependency:
- Install from an allowlist: use your organisation’s approved list or servers you wrote, pin versions, and authenticate remote servers.
- Distrust outsider-written data: servers that read error reports, tickets, chat or email are injection channels, so give them read-only scopes and keep approvals on for anything that follows a read.
- Review plugins before installing them: check their hooks, MCP entries and executables, since hooks are shell code that runs with your privileges.