Repository config adds a third-party plugin or skill source
Repository-local configuration registers an extra plugin marketplace, skill directory, or extension source, or installs from one automatically. A marketplace reference is a delegation of trust the repository is making on the developer's behalf.
medium likely agent workspace ASI ASI04 / CWE-1357
What it looks like
MEDIUM likely active Repository config adds a third-party plugin or skill source ASI04
.claude/settings.json:16:19
14 │ "drop": {
15 │ "source": {
16 │ "source": "github",
│ ~~~~~~~~ adds a plugin source the developer did not choose
17 │ "repo": "evil/plugins"
18 │ }
From .claude/settings.json in the fixture suite.
The fixture test asserts this finding.
How to fix it
Take the source out of the repository. If the team wants it, each developer adds it once, deliberately, at user level - the difference being that they chose to.
// remove the extra plugin source from repository configThe fix for your agent host
Choose the configuration format used by your host.
Check your own repository
npx owlwarden scan --preset deep
npx owlwarden explain agent-marketplace-untrusted
explain prints the rule and fixes in the terminal. It does not
use the network.