feat(scanner): reject hidden undeclared plugin executables

[seonghobae]

Current repair boundary — 2026-09-12

• base: feat/claude-plugin-dynamic-eval-1099@262650f3c3b34565c3317a10b1fabefbc4dba751
• exact head: 7bca8ffc0793ad50fc82f957523fe86439711df9
• exact tree: 3d517e31ece2d4356b1dcc8e00ed7410b15805ff
• ancestry: ordinary two-parent merge of previous feat(scanner): reject hidden undeclared plugin executables #1146 head 94946c7… and current feat(scanner): reject dynamic eval on plugin hook surfaces #1145 head 262650f…; no force update
• exact-tree validation: PYTHONPATH=. python -m pytest -q tests/test_claude_plugin*.py → 145 passed; py_compile and git diff --check passed
• lifecycle: Draft / hidden-executable delta and all parent repairs preserved / hosted exact-head Checks and independent review absent
• stacked-workflow admission remains owned by fix(ci): admit stacked PR checks without bypassing docs contracts #1096; do not create a source-neutral wake-up commit

Successor of #1145 / issue #1099. Does not Close those. Does not steal G-06 #1133 or #1145 eval unique delta. .git metadata is not a plugin executable surface.

Unique delta

Fail closed on hidden undeclared executable or config surfaces (claude-plugin-hidden-undeclared-executable):

• .bin/run.sh and .hooks/secret.py not declared in plugin.json fail admission
• hidden config such as .config.json and extensionless .bin/tool fail admission
• declared hooks/pre.sh is not this finding (may still be inventory)
• .gitignore only is not this finding
• .mcp.json stays the MCP class
• non-hidden scripts/hidden.py stays claude-plugin-undeclared-executable
• snippets omit secrets and raw bidi

#1145 remains owner of dynamic eval/exec on hook surfaces.

Test plan

• RED then GREEN (tests/test_claude_plugin_hidden_executable.py)
• Detector statement coverage 1428/1428 with plugin suites
• Exact-head Checks on this head
• Keep Draft until current-head gates are GREEN

Relates to #1099. Relates to #1145.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}