Plugin Security

Plugin security covers the risks created when AI assistants, coding tools, and agent platforms load third-party add-ons that can read data, call external services, or run code on a user's behalf. A plugin often inherits the permissions of the host application, so a malicious or poorly built one can expose customer records, credentials, or internal systems without the organization noticing. For governance teams, this means plugin and extension catalogs need the same vetting, approval, and monitoring that apply to other third-party software.

1 item