> ## Documentation Index > Fetch the complete documentation index at: https://p-bitm-2269ecee.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Plugins > Create, review, and assign Firefox extension packages to campaigns. Plugins are Firefox extension packages stored in the admin library and selected when creating a campaign. ## Library operations The dashboard supports creating, editing, importing, exporting, and deleting plugins. A plugin contains: * a name and description; * at most 128 files; * validated relative file names; * text content for each file. At minimum, a usable extension normally includes `manifest.json` and the scripts or assets referenced by that manifest. Open **Browser Extensions**, select **New Plugin**, enter a name and description, and choose **Create & Edit**. Create or upload `manifest.json` and every referenced script or text asset in the plugin editor. File paths must be relative and use forward slashes. Review the manifest, permissions, URL matches, scripts, and communication paths, then save the complete file set. Select the plugin in the campaign wizard. P-BitM packages and installs it when target browser containers are created. Plugin editor showing the extension file list and manifest.json contents Use **Import** instead of **New Plugin** for an existing reviewed P-BitM Firefox extension ZIP archive. **Export** creates a portable ZIP for review, backup, or another deployment. ## Review checklist Before enabling a plugin: * inspect every file; * request only necessary Firefox permissions; * use campaign-local communication paths; * avoid hard-coded credentials, public tokens, and unrelated remote hosts; * validate all externally supplied data; * confirm that cleanup occurs when the session ends. Plugins execute inside assessment browser containers and must be treated as trusted active code. Use only plugins reviewed for the current engagement. ## Built-in runtime extensions P-BitM also packages a small set of built-in Firefox extensions into each session container. Their source remains in `bitm-images/common/firefox/bad_firefox_extensions`. * **File interception** records and hijacks files downloaded during the session. * **Session persistence** prevents common logout actions. * **Site information** keeps the session view aligned with the active page's title and favicon. * **Shortcut control** limits browser keyboard shortcuts. * **Form collection** records data explicitly submitted through web forms. * **Cookie collection** records cookies. ## Built-in extension demonstrations These recordings use synthetic data and an authorized test environment. They are included to review operator-visible behavior; they do not expand the approved scope of a campaign. ### File interception demo