Marketplace Security Framework and the False Positive Fight

Three days after launching the Claude Code plugin marketplace, the security story was "trust me, I checked." That needed to change before anyone installed a community plugin on their machine. The Secu