@Jeffro -It is not possible to make a scanner which can reliably scan a plugin, so that wouldn't work. Something which plugin reviewers use to point me in the direction of security flaws would be a handy tool for them though I imagine.

The main use I see would be in alerting plugin developers that they may have problematic code. You couldn't automatically block it based on that though as there will always be perfectly good reasons for doing some things which the scanner may fire off warnings on.