Anyone can publish a package here. A plugin runs on the LLMHub server with the gateway's full privileges, so check the publisher and source before installing.