Anthropic launches Claude Code mods

Mods turn Claude Code from a configurable agent into a programmable platform, but their power comes with serious supply-chain risk.

• –Developers can build dashboards, approval gates, audit logs, context meters, and replay tools.
• –Mods go beyond traditional hooks by rewriting, blocking, retrying, or replacing events.
• –Anthropic’s Token Weather, Blast Radius, and Replay Theater examples show immediate practical value.
• –Mods run unsandboxed with Claude Code’s machine access, so malicious plugins could read secrets, execute programs, or alter tool calls.
• –Teams should rely on managed plugin controls, trusted sources, and validation before installation.