Scylla provides an SDK for plugins that add tools and workflow capabilities. Use the public SDK documentation for supported interfaces, lifecycle requirements, and distribution terms when it becomes available.
Design for Scylla's execution model
Plugins that request machine or service actions need to use documented Broker and policy interfaces. Keep reusable credentials in protected execution paths and filter returned context appropriately. Validate permissions and behavior against the installed build.
Do not assume a plugin automatically receives every Scylla security control. Verify the exact SDK boundary and enforcement points used by the capability.