Claude Code plugins a risk to local ecosystem?

There's an increasingly popular way to ship complex extensions for agentic work, that is specific to Claude Code, which is Code plugins. For example here's deep-wiki by Microsoft, a plugin to create a wiki from analyzing your project's repo. There's a lot in there. It's far powerful than a skill, it can let the user do manual activation via slash commands (/deep-wiki:generate, /deek-wiki:ask, etc), it can spawns different subagent profiles depending on the task requested, plus whatever else Anthropic comes up with later on.