diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
new file mode 100644
index 0000000..9b362f0
--- /dev/null
+++ b/.claude-plugin/marketplace.json
@@ -0,0 +1,14 @@
+{
+  "name": "prathikcannotcode",
+  "owner": {
+    "name": "Vigil contributors",
+    "url": "https://github.com/prathikcannotcode/Vigil"
+  },
+  "plugins": [
+    {
+      "name": "vigil",
+      "source": "./",
+      "description": "DPDP Act and GDPR compliance skills for Claude Code"
+    }
+  ]
+}
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
new file mode 100644
index 0000000..32af469
--- /dev/null
+++ b/.claude-plugin/plugin.json
@@ -0,0 +1,15 @@
+{
+  "name": "vigil",
+  "displayName": "Vigil",
+  "version": "0.3.1",
+  "description": "DPDP Act and GDPR compliance skills for Claude Code: 20 skills that audit code and cite the exact section, rule or article. Skills only; the write guards and exporters need a Vigil workspace.",
+  "author": {
+    "name": "Vigil contributors",
+    "url": "https://github.com/prathikcannotcode/Vigil"
+  },
+  "homepage": "https://github.com/prathikcannotcode/Vigil#readme",
+  "repository": "https://github.com/prathikcannotcode/Vigil",
+  "license": "Apache-2.0",
+  "keywords": ["dpdp", "gdpr", "privacy", "compliance", "data-protection", "india"],
+  "skills": "./.claude/skills/"
+}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c83866b..2075ca3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,9 @@ Changes from a review of commit 731a3f9 that used synthetic data only.
 - `SECURITY.md` lists what the guards do not cover: shell and MCP writes, identifiers other than Aadhaar, PAN and +91 mobiles, what a clause means or whether it applies, and sector rules.
 - A sector-only duty, such as CERT-In's 6-hour report, goes in the assessment summary instead of a DPDP finding standing in for it. `AGENTS.md`, `/audit` and the three sector guides say so, and the guides say sector counsel has not reviewed them.
 
+### Plugin
+- Vigil installs as a Claude Code plugin: `.claude-plugin/plugin.json` and a marketplace file. Skills only. The hooks stay in the workspace, because a plugin-wide write guard would block every edit in a project with no layout.
+
 ## 0.3.1 (9 November 2026)
 
 - The README and disclaimer say it once and plainly: AI can make mistakes, and a licensed attorney should check every finding before you rely on it.
diff --git a/README.md b/README.md
index 2b85c29..d0fe4bf 100644
--- a/README.md
+++ b/README.md
@@ -101,6 +101,18 @@ You need [Node.js 22+](https://nodejs.org) and [Claude Code](https://claude.com/
 
 Delete `company-profile/sample-co/` and `assessments/2026-10-19-sample-co-baseline/` whenever you like.
 
+### Or install the skills as a plugin
+
+```bash
+claude plugin marketplace add prathikcannotcode/Vigil
+```
+
+```bash
+claude plugin install vigil@prathikcannotcode
+```
+
+The plugin carries the 20 skills, namespaced as `/vigil:audit`, `/vigil:dpdp-consent` and so on, and they work in any project. It carries no hooks. The write guard, schema validation and the SARIF, OSCAL and OCSF exporters run only inside a Vigil workspace, so clone the repo when you need them.
+
 ## Skills
 
 Every skill is a real slash command. You can also describe the task in plain English and Claude picks the right one.