Anthropic's plugin marketplace runs four CI gates on supply chain risk, including a static pin check for auto-executing MCP launchers.

The .github/workflows directory holds bump-plugin-shas.yml, owner-liveness-sweep.yml, validate-plugins.yml and close-external-prs.yml, and the commit history shows them doing real work (GitHub). An August 19 commit added a deterministic static pin check for auto-exec MCP launchers; August 12 commits removed 10 entries whose upstream sources had gone unavailable and re-pointed one renamed source. For anyone running an internal skill or plugin registry, this is a working reference implementation of pin-plus-liveness enforcement rather than a policy document.