plugin-security-scan

Semantic security scan of plugin agents, skills, rules, and commands markdown files. Detects prompt injection, credential exfiltration patterns, and privilege escalation instructions. Invoked automatically by the plugin install gate (Wave 2.5) — not for direct user invocation. Returns strict JSON.