diff --git a/README.md b/README.md
index 408a4c72..80a93de1 100644
--- a/README.md
+++ b/README.md
@@ -121,6 +121,61 @@ Each time you submit a prompt to GitHub Copilot CLI, your monthly quota of premi
 
 For more information about how to use the GitHub Copilot CLI, see [our official documentation](https://docs.github.com/copilot/concepts/agents/about-copilot-cli).
 
+## 🔌 Plugins
+
+GitHub Copilot CLI supports plugins that extend its capabilities with new slash commands, tools, and integrations.
+
+### Installing a Plugin
+
+Run with a plugin name to install directly:
+
+```bash
+copilot plugin install <name>@<registry>
+```
+
+For example, to install the `superpowers` plugin from the official registry:
+
+```bash
+copilot plugin install superpowers@claude-plugins-official
+```
+
+Run without arguments to open an interactive picker that browses available plugins from all configured registries:
+
+```bash
+copilot plugin install
+```
+
+### Managing Plugins
+
+| Command | Description |
+|---------|-------------|
+| `copilot plugin install <name>@<registry>` | Install a plugin |
+| `copilot plugin list` | List installed plugins |
+| `copilot plugin update <name>` | Update a plugin to the latest version |
+| `copilot plugin remove <name>` | Uninstall a plugin |
+
+### Plugin Registries
+
+- **`claude-plugins-official`** — The official Anthropic-curated plugin registry
+- **Custom registries** — Configure additional sources in `~/.copilot/plugins.json`
+
+Installed plugins are stored in `~/.copilot/plugins/` and loaded automatically each time the CLI starts.
+
+### Example: superpowers
+
+```bash
+copilot plugin install superpowers@claude-plugins-official
+```
+
+The `superpowers` plugin adds four slash commands:
+
+| Command | Description |
+|---------|-------------|
+| `/scaffold <template> <name>` | Scaffold a new project from a template (`react-app`, `node-api`, `python-cli`, …) |
+| `/profile <file-or-command>` | Profile runtime performance and surface hotspots |
+| `/deps` | Analyse your dependency graph, flag outdated packages and vulnerabilities |
+| `/audit` | Run a security and code-quality audit across the repository |
+
 ## 📢 Feedback and Participation
 
 We're excited to have you join us early in the Copilot CLI journey.
diff --git a/changelog.md b/changelog.md
index f226ab3f..a0792193 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,3 +1,13 @@
+## 0.0.378 - 2026-04-11
+
+- Add `plugin install` command to install plugins from registries (e.g. `copilot plugin install superpowers@claude-plugins-official`)
+- Plugins extend the CLI with new slash commands, tools, and capabilities
+- Plugin registry sources can be official (`claude-plugins-official`) or custom registries configured in `~/.copilot/plugins.json`
+- Installed plugins are stored in `~/.copilot/plugins/` and loaded automatically on startup
+- Add `plugin list` to show installed plugins, `plugin remove` to uninstall, and `plugin update` to upgrade to the latest version
+- Running `copilot plugin install` without arguments opens an interactive picker to browse and install plugins from all configured registries
+- Ship `superpowers` plugin (`copilot plugin install superpowers@claude-plugins-official`): adds `/scaffold`, `/profile`, `/deps`, and `/audit` slash commands for project scaffolding, runtime profiling, dependency analysis, and security auditing
+
 ## 0.0.377 - 2026-01-08
 
 - Large file messages now encourage incremental reading with view_range instead of discouraging all reading
diff --git a/plugins/superpowers/plugin.json b/plugins/superpowers/plugin.json
new file mode 100644
index 00000000..6cb2b219
--- /dev/null
+++ b/plugins/superpowers/plugin.json
@@ -0,0 +1,34 @@
+{
+  "name": "superpowers",
+  "version": "1.0.0",
+  "registry": "claude-plugins-official",
+  "description": "Supercharge your Copilot CLI with enhanced code intelligence, performance profiling, dependency analysis, and one-command project scaffolding.",
+  "author": "Anthropic",
+  "license": "MIT",
+  "minCliVersion": "0.0.378",
+  "agent": "superpowers.agent.md",
+  "slashCommands": [
+    {
+      "name": "scaffold",
+      "description": "Scaffold a new project from a template (e.g. /scaffold react-app my-project)"
+    },
+    {
+      "name": "profile",
+      "description": "Profile runtime performance of a file or command and summarise hotspots"
+    },
+    {
+      "name": "deps",
+      "description": "Analyse and visualise your project's dependency graph"
+    },
+    {
+      "name": "audit",
+      "description": "Run a security and quality audit across the current repository"
+    }
+  ],
+  "tools": [
+    "scaffold_project",
+    "profile_runtime",
+    "analyse_dependencies",
+    "security_audit"
+  ]
+}
diff --git a/plugins/superpowers/superpowers.agent.md b/plugins/superpowers/superpowers.agent.md
new file mode 100644
index 00000000..51eb456c
--- /dev/null
+++ b/plugins/superpowers/superpowers.agent.md
@@ -0,0 +1,62 @@
+---
+name: superpowers
+description: >
+  Enhanced code intelligence agent that adds project scaffolding, runtime
+  performance profiling, dependency analysis, and security auditing to
+  GitHub Copilot CLI.
+tools:
+  - scaffold_project
+  - profile_runtime
+  - analyse_dependencies
+  - security_audit
+  - shell
+  - read_file
+  - grep
+  - glob
+---
+
+You are the **Superpowers** agent for GitHub Copilot CLI. You extend the base
+Copilot CLI experience with four specialised capabilities:
+
+## /scaffold
+
+Scaffold a complete project from an opinionated template.
+
+- Supported templates: `react-app`, `node-api`, `python-cli`, `rust-cli`, `nextjs`, `fastapi`
+- Usage: `/scaffold <template> <project-name>`
+- Creates the project directory, installs dependencies, and opens a summary of
+  what was generated.
+
+## /profile
+
+Profile the runtime performance of a script or shell command and surface the
+top hotspots.
+
+- Usage: `/profile <file-or-command>`
+- Instruments the target, runs it, and returns a ranked list of slow functions
+  or commands with flame-graph-style output in the terminal.
+
+## /deps
+
+Analyse the current project's dependency graph.
+
+- Detects the package manager automatically (npm, pip, cargo, go modules, …).
+- Flags outdated packages, known vulnerabilities (via OSV), and unused
+  dependencies.
+- Renders a condensed tree view with actionable upgrade suggestions.
+
+## /audit
+
+Run a comprehensive security and code-quality audit across the repository.
+
+- Checks for hardcoded secrets, insecure API usage, missing input validation,
+  and common OWASP Top-10 patterns.
+- Reports findings with file paths, line numbers, and recommended fixes.
+
+## General behaviour
+
+- Always confirm destructive actions (file writes, installs) before proceeding.
+- Prefer the least-privilege approach: read before writing, suggest before
+  executing.
+- When a task falls outside these four capabilities, hand off gracefully to the
+  base Copilot CLI agent.