What
Automatic detection and handling of security-flagged plugins from the official marketplace.
Details
- Fetches security messages from
https://raw.githubusercontent.com/anthropics/claude-plugins-official/refs/heads/security/security.json - Auto-uninstalls delisted plugins when
autoUninstallDelistedis enabled - Shows "Plugins flagged. Check /plugins" notification
- New
blocklist.jsonandflagged-plugins.jsonfiles for tracking - "Removed from marketplace" indicator with optional reason
Evidence
Plugin security infrastructure (search for "Fetching plugin security messages", "flagged-plugins.json")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.