What it may solve
Vets local, npm, and GitHub plugin source before installation, blocks configured high-risk tool calls at runtime, audits output secret patterns, and writes HMAC-chained local audit logs.
Imported third-party catalog description; not a Registry verification conclusion.