From 25447669455103d497029373ade1b60f93a77c55 Mon Sep 17 00:00:00 2001 From: Gr-i-niy Date: Thu, 30 Jul 2026 17:08:18 +0000 Subject: [PATCH 1/2] add simple plugins --- .agents/plugins/marketplace.json | 20 ++++++++++++++++++++ .claude-plugin/marketplace.json | 24 ++++++++++++++++++++++++ .claude-plugin/plugin.json | 21 +++++++++++++++++++++ .codex-plugin/plugin.json | 30 ++++++++++++++++++++++++++++++ .gitignore | 5 +++++ 5 files changed, 100 insertions(+) create mode 100644 .agents/plugins/marketplace.json create mode 100644 .claude-plugin/marketplace.json create mode 100644 .claude-plugin/plugin.json create mode 100644 .codex-plugin/plugin.json diff --git a/.agents/plugins/marketplace.json b/.agents/plugins/marketplace.json new file mode 100644 index 000000000..63d61861c --- /dev/null +++ b/.agents/plugins/marketplace.json @@ -0,0 +1,20 @@ +{ + "name": "opentaint", + "interface": { + "displayName": "OpenTaint" + }, + "plugins": [ + { + "name": "opentaint", + "source": { + "source": "local", + "path": "./" + }, + "policy": { + "installation": "AVAILABLE", + "authentication": "ON_INSTALL" + }, + "category": "Security" + } + ] +} diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json new file mode 100644 index 000000000..6b9a3c732 --- /dev/null +++ b/.claude-plugin/marketplace.json @@ -0,0 +1,24 @@ +{ + "$schema": "https://anthropic.com/claude-code/marketplace.schema.json", + "name": "opentaint", + "description": "OpenTaint application-security skills for AI coding agents", + "owner": { + "name": "OpenTaint", + "url": "https://github.com/Gr-i-niy/opentaint" + }, + "plugins": [ + { + "name": "opentaint", + "source": "./", + "description": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives.", + "version": "0.3.0", + "author": { + "name": "OpenTaint" + }, + "license": "Apache-2.0", + "category": "security", + "homepage": "https://github.com/Gr-i-niy/opentaint", + "repository": "https://github.com/Gr-i-niy/opentaint" + } + ] +} diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json new file mode 100644 index 000000000..e60ff72fd --- /dev/null +++ b/.claude-plugin/plugin.json @@ -0,0 +1,21 @@ +{ + "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json", + "name": "opentaint", + "displayName": "OpenTaint", + "version": "0.3.0", + "description": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives.", + "author": { + "name": "OpenTaint" + }, + "homepage": "https://github.com/Gr-i-niy/opentaint", + "repository": "https://github.com/Gr-i-niy/opentaint", + "license": "Apache-2.0", + "keywords": [ + "security", + "appsec", + "sast", + "taint-analysis", + "vulnerability-scanning" + ], + "skills": "./skills/" +} diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json new file mode 100644 index 000000000..eb98f0f52 --- /dev/null +++ b/.codex-plugin/plugin.json @@ -0,0 +1,30 @@ +{ + "name": "opentaint", + "version": "0.3.0", + "description": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives.", + "author": { + "name": "OpenTaint" + }, + "homepage": "https://github.com/Gr-i-niy/opentaint", + "repository": "https://github.com/Gr-i-niy/opentaint", + "license": "Apache-2.0", + "keywords": [ + "security", + "appsec", + "sast", + "taint-analysis", + "vulnerability-scanning" + ], + "skills": "./skills/", + "interface": { + "displayName": "OpenTaint", + "shortDescription": "Taint-analysis based application security scanning", + "longDescription": "Run an end-to-end OpenTaint analysis: build a project model, scan for vulnerabilities, author rules and dataflow approximations for uncovered library methods, triage findings, and reproduce true positives against a running application.", + "developerName": "OpenTaint", + "category": "Security", + "capabilities": [ + "Skill" + ], + "websiteURL": "https://github.com/Gr-i-niy/opentaint" + } +} diff --git a/.gitignore b/.gitignore index 8ec53bdf4..c8e7b796b 100644 --- a/.gitignore +++ b/.gitignore @@ -33,3 +33,8 @@ core/**/bin/ # Optional: Allow the .gitignore file itself to be tracked !.gitignore !.github + +# Agent plugin manifests +!.claude-plugin +!.codex-plugin +!.agents From 8a71002ef7bcfdf621c9ce2396aa9abff003d746 Mon Sep 17 00:00:00 2001 From: Gr-i-niy Date: Thu, 30 Jul 2026 18:11:45 +0000 Subject: [PATCH 2/2] update descriptions --- .agents/plugins/marketplace.json | 20 -------------------- .claude-plugin/marketplace.json | 12 ++++++------ .claude-plugin/plugin.json | 9 ++++----- .codex-plugin/plugin.json | 28 ++++++++++++++++++---------- .gitignore | 1 - 5 files changed, 28 insertions(+), 42 deletions(-) delete mode 100644 .agents/plugins/marketplace.json diff --git a/.agents/plugins/marketplace.json b/.agents/plugins/marketplace.json deleted file mode 100644 index 63d61861c..000000000 --- a/.agents/plugins/marketplace.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "name": "opentaint", - "interface": { - "displayName": "OpenTaint" - }, - "plugins": [ - { - "name": "opentaint", - "source": { - "source": "local", - "path": "./" - }, - "policy": { - "installation": "AVAILABLE", - "authentication": "ON_INSTALL" - }, - "category": "Security" - } - ] -} diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index 6b9a3c732..e41b080cc 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -3,22 +3,22 @@ "name": "opentaint", "description": "OpenTaint application-security skills for AI coding agents", "owner": { - "name": "OpenTaint", - "url": "https://github.com/Gr-i-niy/opentaint" + "name": "Seqra", + "url": "https://opentaint.org/" }, "plugins": [ { "name": "opentaint", "source": "./", - "description": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives.", + "description": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives", "version": "0.3.0", "author": { - "name": "OpenTaint" + "name": "Seqra" }, "license": "Apache-2.0", "category": "security", - "homepage": "https://github.com/Gr-i-niy/opentaint", - "repository": "https://github.com/Gr-i-niy/opentaint" + "homepage": "https://opentaint.org/", + "repository": "https://github.com/seqra/opentaint" } ] } diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json index e60ff72fd..049fbda93 100644 --- a/.claude-plugin/plugin.json +++ b/.claude-plugin/plugin.json @@ -3,16 +3,15 @@ "name": "opentaint", "displayName": "OpenTaint", "version": "0.3.0", - "description": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives.", + "description": "Taint-analysis based application-security workflow skills", "author": { - "name": "OpenTaint" + "name": "Seqra" }, - "homepage": "https://github.com/Gr-i-niy/opentaint", - "repository": "https://github.com/Gr-i-niy/opentaint", + "homepage": "https://opentaint.org/", + "repository": "https://github.com/seqra/opentaint", "license": "Apache-2.0", "keywords": [ "security", - "appsec", "sast", "taint-analysis", "vulnerability-scanning" diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json index eb98f0f52..624ed4a0e 100644 --- a/.codex-plugin/plugin.json +++ b/.codex-plugin/plugin.json @@ -1,16 +1,15 @@ { "name": "opentaint", "version": "0.3.0", - "description": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives.", + "description": "Taint-analysis based application-security workflow skills", "author": { - "name": "OpenTaint" + "name": "Seqra" }, - "homepage": "https://github.com/Gr-i-niy/opentaint", - "repository": "https://github.com/Gr-i-niy/opentaint", + "homepage": "https://opentaint.org/", + "repository": "https://github.com/seqra/opentaint", "license": "Apache-2.0", "keywords": [ "security", - "appsec", "sast", "taint-analysis", "vulnerability-scanning" @@ -18,13 +17,22 @@ "skills": "./skills/", "interface": { "displayName": "OpenTaint", - "shortDescription": "Taint-analysis based application security scanning", - "longDescription": "Run an end-to-end OpenTaint analysis: build a project model, scan for vulnerabilities, author rules and dataflow approximations for uncovered library methods, triage findings, and reproduce true positives against a running application.", - "developerName": "OpenTaint", + "shortDescription": "Taint-analysis based application-security workflow skills", + "longDescription": "Taint-analysis based application-security skills: build a project model, scan it, author rules and approximations, triage findings, and reproduce true positives", + "developerName": "Seqra", "category": "Security", "capabilities": [ - "Skill" + "Read", + "Write" ], - "websiteURL": "https://github.com/Gr-i-niy/opentaint" + "defaultPrompt": [ + "Use the appsec-agent skill to run a deep scan with static triage", + "Use the appsec-agent skill to run a normal scan with static triage", + "Use the appsec-agent skill to run a lite scan with dynamic confirmation" + ], + "brandColor": "#CA2121", + "logo": "./logos/opentaint-logo-light.svg", + "logoDark": "./logos/opentaint-logo-dark.svg", + "websiteURL": "https://opentaint.org/" } } diff --git a/.gitignore b/.gitignore index c8e7b796b..11390c9bf 100644 --- a/.gitignore +++ b/.gitignore @@ -37,4 +37,3 @@ core/**/bin/ # Agent plugin manifests !.claude-plugin !.codex-plugin -!.agents