v0.1.0

First release. A skill and four scripts for getting a plugin through the plugin directory's upload scan.

• check-plugin-safety.ts: the gate, nine checks (unscoped grants, whole-environment reads, committed binaries, big files, command words alone, credential-named placeholders, image globs, a host beside an environment reference, and a self-check)
• install-gate.ts: copy the gate and a CI workflow into a plugin repo; --check reports drift
• read-report.ts: a scan report in a screenful, with the files that could be masking a hold
• make-probe.ts: pin a stubborn hold to one line with a throwaway repo in about three uploads
• skills/check: the workflow, with references on the scan's rules, bundling third-party code and the AI policy review

The gate is an approximation built from observed behavior, not the directory's scan.