⚠️ No Sandbox

A loaded plugin can shell out to any program on your system, with the same access as anything else run under your own user account — there’s no restricted execution environment. Only load plugins whose code you trust, and treat the project-plugin opt-in as a real trust decision, not a formality.