Treat official marketplace extensions as CI plugins, not harmless editor toys.

Treat official marketplace extensions as CI plugins, not harmless editor toys. The Claude Code backdoor and the OpenCode breach show AI coding tools can access local files, source code, and developer tooling; a compromised extension is an operational compromise. Your org should enforce an org-level allowlist with signed provenance, make revocation fast and auditable, and require a documented break-glass replacement path so developers can keep working when a tool is blocked.