diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
new file mode 100644
index 000000000..e41b080cc
--- /dev/null
+++ b/.claude-plugin/marketplace.json
@@ -0,0 +1,24 @@
+{
+  "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
+  "name": "opentaint",
+  "description": "OpenTaint application-security skills for AI coding agents",
+  "owner": {
+    "name": "Seqra",
+    "url": "https://opentaint.org/"
+  },
+  "plugins": [
+    {
+      "name": "opentaint",
+      "source": "./",
+      "description": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives",
+      "version": "0.3.0",
+      "author": {
+        "name": "Seqra"
+      },
+      "license": "Apache-2.0",
+      "category": "security",
+      "homepage": "https://opentaint.org/",
+      "repository": "https://github.com/seqra/opentaint"
+    }
+  ]
+}
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
new file mode 100644
index 000000000..049fbda93
--- /dev/null
+++ b/.claude-plugin/plugin.json
@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
+  "name": "opentaint",
+  "displayName": "OpenTaint",
+  "version": "0.3.0",
+  "description": "Taint-analysis based application-security workflow skills",
+  "author": {
+    "name": "Seqra"
+  },
+  "homepage": "https://opentaint.org/",
+  "repository": "https://github.com/seqra/opentaint",
+  "license": "Apache-2.0",
+  "keywords": [
+    "security",
+    "sast",
+    "taint-analysis",
+    "vulnerability-scanning"
+  ],
+  "skills": "./skills/"
+}
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
new file mode 100644
index 000000000..624ed4a0e
--- /dev/null
+++ b/.codex-plugin/plugin.json
@@ -0,0 +1,38 @@
+{
+  "name": "opentaint",
+  "version": "0.3.0",
+  "description": "Taint-analysis based application-security workflow skills",
+  "author": {
+    "name": "Seqra"
+  },
+  "homepage": "https://opentaint.org/",
+  "repository": "https://github.com/seqra/opentaint",
+  "license": "Apache-2.0",
+  "keywords": [
+    "security",
+    "sast",
+    "taint-analysis",
+    "vulnerability-scanning"
+  ],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "OpenTaint",
+    "shortDescription": "Taint-analysis based application-security workflow skills",
+    "longDescription": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives",
+    "developerName": "Seqra",
+    "category": "Security",
+    "capabilities": [
+      "Read",
+      "Write"
+    ],
+    "defaultPrompt": [
+      "Use the appsec-agent skill to run a deep scan with static triage",
+      "Use the appsec-agent skill to run a normal scan with static triage",
+      "Use the appsec-agent skill to run a lite scan with dynamic confirmation"
+    ],
+    "brandColor": "#CA2121",
+    "logo": "./logos/opentaint-logo-light.svg",
+    "logoDark": "./logos/opentaint-logo-dark.svg",
+    "websiteURL": "https://opentaint.org/"
+  }
+}
diff --git a/.gitignore b/.gitignore
index 8ec53bdf4..11390c9bf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,3 +33,7 @@ core/**/bin/
 # Optional: Allow the .gitignore file itself to be tracked
 !.gitignore
 !.github
+
+# Agent plugin manifests
+!.claude-plugin
+!.codex-plugin