feat(scanner): reject plugin hex publish and conda upload

[seonghobae]

Successor of #1184 / issue #1099. Does not Close those. dart/flutter pub stay #1184. gem/nuget stay #1183. pnpm/uv/poetry stay #1182. Pass is not Noema admission.

Unique delta

Fail closed when a plugin hook or manifest runs remaining Hex.pm and Anaconda.org writes that #1184 left as inventory:

• hex publish and Mix mix hex.publish as claude-plugin-hex-publish-command (CWE-269)
• conda upload and anaconda upload as claude-plugin-conda-upload-command (CWE-250)
• hex info and conda list stay inventory
• dart pub publish stays claude-plugin-pub-publish-command
• unquoted # comments, echo/printf lookalikes, and marketplace description prose are not this class
• README hex/conda wording is not a hook command
• snippets are command labels, not tokens or secrets
• composer publish and go upload are not invented; they are not real package-manager CLIs

#1184 remains owner of dart/flutter pub publish.

Evidence

• RED 503ff23 then GREEN 512710e
• tests/test_claude_plugin_hex_conda.py plus sibling pub/gem/alt-publish lock
• plugin coverage suite 521 passed on Python 3.13

Relates to #1099. Relates to #1184.

Current assignment-value context repair — 2026-09-08

This normal two-parent descendant inherits canonical #1173 RED 90ae232e852b3d01463d978f9bccd9157c341fe7 and GREEN 1e6a3eb43a5bc2d146656af13e7fa6cad2a77315 without a leaf workaround. Exact head: 6bb03cacb79a1cad614fb9554f56d2c53dd64490; current parent: 3b5f6416c5cba8f6ce16c53c0e6b74575448e059; Git compare is 0 behind and preserves this PR's unique Hex/Conda detector/test delta. Assignment-value negatives and environment-prefix/direct/substitution positives are present in the exact tree. This custom-base PR remains Draft until its own hosted integration and independent current-head review are terminal. Earlier head strings in this body are historical evidence only.

Current heredoc-safe restack — 2026-09-08

Canonical #1173 exact head 184b4b4f55906284ac1d8059e46cec8f0d9cfc9a fixes closed literal here-document payload false positives with RED 6f6be77d... → GREEN 12faf2f.... This branch was integrated non-destructively on parent bde44516021aa6c1fd6c2be7c7beb9345a671d97; exact head is e350ee0ad6e2e313c2d1e38cbdc4f0418477280e. GitHub compare reports behind_by=0, ahead_by=8; the PR's unique detector delta remains in the tree. Exact-head hosted integration and independent review are not terminal, so this PR remains Draft. Earlier head strings are historical evidence only.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}