Organizations can now enforce a strictKnownMarketplaces policy that blocks skills-directory plugins from loading.
Details
When this policy is active, plugins from the .claude/skills/ directory are blocked with: "Plugins from <path>/skills/ are blocked by your organization's strictKnownMarketplaces policy and cannot be enabled."
Evidence
gH5() function and block message (search for "strictKnownMarketplaces policy and cannot be enabled")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.