{"version":"2.1.267","anchor":"new-sec-default-hooks-module-locks-plugins-out-of-classic","canonical_anchor":"security-default-secdefault-plugin-isolates-classic-hoo","heading":"New 'Security default' hooks module locks plugins out of org hook\/settings\/tool policy on managed orgs","tier":"notice","area":"Plugins Security","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.267\/e\/new-sec-default-hooks-module-locks-plugins-out-of-classic","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.267","markdown":"### New 'Security default' hooks module locks plugins out of org hook\/settings\/tool policy on managed orgs\n\nA built-in 'Security default' hooks module now keeps user-installed plugins from touching an org's classic hooks, settings, and tool policy\n\n**What**\n\n- A new built-in, policy-only hooks module called \"Security default\" (`secDefault`) is now seated outermost in the hook chain on managed machines belonging to Team or Enterprise orgs, unless a managed policy explicitly sets `secDefault: false`.\n\n- It intercepts `tool.register`, `tool.list`, `agent.offer`\/`spawn`, `tool.describe`\/`command.describe`, and more, blocking non-core-tier plugins from reading policy settings or adding MCP servers outside the `allowedMcpServers`\/`managedMcpServers` policy (with a deny message like \"allowedMcpServers (managed): plugins outside policy may not add tools\").\n\n- It's registered with `enabledFromTrustedSettingsOnly` and `enabledFromPolicyOnly` both set, and only activates when the outermost hook slot already includes a specific built-in id; plugin enablement in general now supports an `enabledFromPolicyOnly` mode read only from policy settings.\n\n**Why** Keeps an organization's classic hooks, prompt content, settings, and tool policy safe from plugins that individual users install, without the module adding any policy of its own, important for managed\/enterprise deployments where admins need assurance that installed plugins can't override central controls.\n\n- Area: Plugins Security\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 3\/5"}