Skills, agents, and assets shipped together
Cowork plugins are packaged extensions: a folder containing a manifest, one or more Skills, optional subagents, and supporting assets. They follow the same plugin marketplace as Claude Code, so the same plugin can target both products.
The shape: plugin.json declares metadata and permissions, skills/ holds SKILL.md definitions, agents/ holds subagent markdown, assets/ holds reference files (templates, brand guidelines, checklists). When the plugin is enabled, all of its skills become callable as /skill-name; its agents become available for delegation.
Permissions in plugin.json are sandboxed: fileAccess: "working-folder" (default) or "read-only"; webFetch: false by default. A plugin can't escalate its own privileges — you grant capabilities at install.