Who is affected?
From November 4, Enterprise defaults to Open where Publishing was never chosen and scanning is enabled. Explicit choices remain. Open lists successfully scanned skills and plugins for installation without owner approval, not automatic installation. Custom roles lacking organization-wide publishing permission still require review. Owners and Libraries “Can manage” reviewers bypass review for their own submissions. Anthropic’s administration guide.
What a scan tells you
Anthropic says scanning looks for malicious behavior. Passing is not a guarantee of safety or of the intended behavior. Coverage excludes MCP servers, skills delivered through MCP and Claude-created skills. Existing items are not scanned retrospectively. Scanning is unavailable with CMEK, zero data retention or HIPAA configurations. See the scanning guide.
Administration check
- Check Publishing in Organization settings → Plugins & skills → Policy. For member approvals, save Requires review.
- With a harmless test item and an ordinary member account, check who can submit, who reviews it, and when colleagues can see it.
- Audit recent entries for unexpected owners and audiences.
These checks are an operational recommendation, not a report of a security incident. We verified the documentation on November 5, 2026; we did not test the change in a customer tenant.