Discussion: # PSA: The Serena plugin in Claude Code's official marketplace opens your browser without consent, h

Saw an interesting discussion on r/ClaudeAI about this — wanted to bring it here. **Original topic:** # PSA: The Serena plugin in Claude Code's official marketplace opens your browser without consent, has shell access, and is nearly impossible to remove > **TL;DR:** A "community-managed" plugin in Anthropic's *official* marketplace runs unpinned code from a third-party GitHub repo on every session, has shell execution access, opens your browser without consent, and survives removal by hiding in 5 separate persistence layers. If that third-party repo ... What are your thoughts? Has anyone here dealt with MCP server? --- *Discuss more at [0n MCP](https://www.0nmcp.com) — the hub for [generative AI tools](https://www.0nmcp.com).*