Going straight down the Plugin Listing here on RedGuides.
Things that should be authorized:
--MQ2AASpend - All this does is makes AA spending easier, which doesn't hurt anyone.
--MQ2AdvPath - More advanced follow features and the ability to run across stupidly large zones doesn't hurt anyone.
--MQ2AutoAccept - Automates clicking accept on trades/guild/group/expedition invites. Doesn't hurt anyone.
--MQ2Autoforage - Foraging does not hurt anyone.
--MQ2AutoLogin - Lets you login by profiles. No harm done.
--MQ2Autosize - Does this plugin even work anymore? If so its a client side change, no harm done.
--MQ2Bandolier - Lets you create a bandolier type profile to quickly swap weapons, no harm done.
--MQ2Bufftool - Lets you block specific buffs. No harm done.
--MQ2Bzrsrch - Quick search out the Bazaar. No harm done.
--MQ2Cast - I could go either way with this one. It does open the door for automation to exist through the use of clever key repeaters, but at the same time it does make things easier to handle. (undecided)
--MQ2Charnotes - Don't know anyone who uses this, but doesn't do any harm.
--MQ2Chat - Chat window for all MQ related stuff. Doesn't do any harm.
--MQ2ChatWnd - Part of MQ2 Source Code anyway.
--MQ2Combat - I could go either way with this one. It does open the door for automation to exist through the use of clever key repeaters, but at the same time it does make things easier to handle. (undecided)
--MQ2Cursor - No clue why this is even in the plugins directory anymore. AdvLoot window pretty much made this obsolete except for a few specific situations. No Harm done.
--MQ2CustomBinds - No harm done.
--MQ2CustomPopUp - No Harm done.
--MQ2Customsound - No Harm done.
--
MQ2Debuffs - Gives details of debuffs that are on you. Doesn't seem harmful.
--MQ2DPSAdv - An in game parser. No harm done.
--MQ2EQBugFix - Plugin doesnt do anything but is included in base source.
--MQ2EQIM - No longer used but part of base source.
--MQ2Exchange - Moves items around, no harm done
--MQ2Feedme - Consumes food, no harm done
--MQ2FPS - Manages FPS, no harm done
--MQ2GMCheck - Scans for GMs in zone, no harm done
--MQ2HUD - Displays some data, no harm done
--MQ2ItemDisplay - More detailed item info, no harm done
--MQ2LinkDB - Link text? no harm done
--MQ2Log - MQ logs, no harm done
--MQ2Main - Main MQ plugin, required
--MQ2Melee - I could go either way with this one. It does open the door for automation to exist through the use of clever key repeaters, but at the same time it does make things easier to handle. (undecided)
--MQ2Missing - No harm done
--MQ2Moveutils - If you allow mq2advpath then might as well allow this. Only concern is /stick but people who are dumb with it will get busted with it.
--MQ2NoNagWindows - No need but also no harm done
--MQ2Notepad - no harm done
--MQ2PlatTracker - no harm done
--MQ2PvPAlert - no harm done
--MQ2RaidUtils - no harm done
--MQ2Rez - Lets you accept rezes, no harm done
--MQ2Search - No harm done
--MQ2Spellsearch - no harm done
--MQ2Size - Doesnt work, but no harm done
--MQ2Tooltip - No harm done
--MQ2TributeManager - no harm done
--MQ2Twist - I could go either way with this one. It does open the door for automation to exist through the use of clever key repeaters, but at the same time it does make things easier to handle. (undecided)
--MQ2Vendors - no harm done
--MQ2Viewport - no harm done
--MQ2XPTracker - no harm done
Things that should not be authorized:
--MQ2AFNuke - This automates caster capabilities.
--MQ2AutoCamp - Automates the camping process. With enough skill this could be used to AFK handle situations.
--MQ2Bardswap - Uses TLO/If parses to swap out bard instruments. If parses do not work so no point in authorizing this.
--MQ2Bucles - Expands uses of plugins and macros. Neither of which work in truebox.
--MQ2Casttimer - Lets you see active timers on buffs/debuffs. This plugin doesnt work any
--MQ2EQBC - We have already seen the damage that this has caused with 20+ people getting accounts banned.
--MQ2Events - Too much wiggle room for automation to happen with this. Lets you specify events and actions to those events. Not sure if it works without an If parser but no sense in having it.
--MQ2Heals - New! Recently added by jimbob.
--MQ2IRC - Opens the door for clever automation through IRC injects
--MQ2Labels - Has some automation capabilities for those who know what they are doing with key repeaters
--MQ2Map - Shows the Map. NO
--MQ2Nav - Very powerful movement tool. Advpath and moveutils is more than enough
--MQ2Navigation - Very powerful movement tool. Advpath and moveutils is more than enough
--MQ2Netbots - Automation
--MQ2Netheal - Automation
--MQ2Paranoid - Lets you watch specific locations for players/npcs
--MQ2Pop - gives info on spawn as they pop
--MQ2Posse - Opens door for automation
--MQ2Randomstuff - Not quite sure what this is but it sounded like it allowed additional information into the client. Could open automation doors
--MQ2Reward - Automation doors wide open
--MQ2Relaytells - Opens them automation doors again
--MQ2Slave - Automation
--MQ2Spawnmaster - gives info on spawn as they pop
--MQ2Spawns - gives info on spawn as they pop
--MQ2Spellhotkeys - Opens door for automation with clever individual
--MQ2Targets - gives info on spawn as they pop
--MQ2Telnet - Similar to IRC/EQBC
--MQ2Template - Not needed cause custom plugins are useless
--MQ2Tracking - Gives spawn details.
As for the /target stuff I would suggest just make it limited to a smaller radius and PC only. If they are trying to target a NPC then make LoS required.