You'll notice
Plugin commands only get 'org' scope if their repository is in a trusted-org list
What
For commands and prompts that come from plugins, Claude Code now only labels them with 'org' scope when the plugin's source repository is found in a specific trusted set provided by the caller. Previously, plugin-sourced items were always mapped to 'org' scope, the same way items from 'managed' or 'synced' sources are. Now, if the repository isn't in that trusted set, the scope comes back undefined instead.
Why
This tightens how plugin commands get classified as organization-wide, preventing plugins from arbitrary or untrusted repositories from automatically being treated as coming from the organization.