#6863

Plugin directory listings don’t show publisher or source repo (e.g. 1Password)

Openfdbopened 7d ago

I wanted to install the 1Password plugin, but nothing on the listing tells me it’s the one 1Password publishes.

The page shows “from Anthropic Directory”, but it doesn’t show:

  • who published the plugin
  • any verified or official-publisher indicator
  • a link to 1Password or to the source repository (github.com/1Password/1password-claude-plugin)
  • the vendor’s logo (the icon is a generic </>)
  • even the version number looks off (0.2.0)

All these are indicators of trust which are missing, for a plugin that clearly demands access to very sensitive information. Third-party plugins named “1password” already circulate in community marketplaces, so the name alone proves nothing.

A link to the source repo would already help. A verified-publisher badge for vendor-named plugins would solve it.

Activity

0

No activity yet.