Frame Security Scan

Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. The workflow checks that the Frame CLI is installed (and points you to the README install steps if it is not, without installing anything itself), runs frame scan, optionally adds the AI layer through a chat-completions endpoint you choose after warning that code snippets are sent to that endpoint, and reads each finding with its CWE ID, location, source and confidence. It separates symbolic findings, which the Frame README describes as proven reachable, from model-only findings that are leads to check. It then triages false positives, proposes fixes with frame fix as a diff for you to review, changes files only after you agree, and re-scans to confirm. Benchmark numbers are quoted only from the Frame README, with caveats. A clean scan is not proof that code is safe. This plugin contains instructions only; the Frame tool runs on your own machine.