Understand ZIP security checks

File preparation and malware scanning are separate checks. Being able to browse a ZIP in Architect does not mean its security scan is complete.

• Scan in progress: you can continue the draft steps and work on the plan once the file tree is available. Hub installation tests remain blocked until the relevant ZIPs have a valid scan result.
• Scan not validated: the check could not be completed. This message alone does not mean malware was detected. Hub tests and publication remain blocked until a successful check.
• Malware detected: the affected ZIP and the plan items derived from it are removed. Read the message before preparing a corrected source.

Plan validation, the scan result and Rikoooo’s review serve different purposes. If submission is available while a scan remains pending, submitting does not bypass the remaining checks. A scan finding no threats also does not establish that the add-on works in the simulator.