{
  "schemaVersion": "plugins-directory/1.0.0",
  "snapshotId": "plugins-2026-09-12.p6",
  "localBriefFormat": "gptsapp-plugin-decision-brief/1.0.0",
  "plugin": {
    "id": "gpa:plugin:6fe5b009a4324406ffc512ca1fd4a1d7f6c44b6b921604d5643cd6e7aaf35c44",
    "key": "claude-security-guidance",
    "name": "Security Guidance",
    "ecosystem": "claude-code",
    "packageRole": null,
    "deliveryNote": null,
    "sourceIssues": [],
    "sourceOwner": "anthropics",
    "declaredAuthor": "Anthropic source repository",
    "canonical": "https://plugins.gptsapp.io/plugins/claude-code/anthropics/security-guidance",
    "repository": "https://github.com/anthropics/claude-plugins-official",
    "packageRoot": "plugins/security-guidance",
    "installation": {
      "url": "https://code.claude.com/docs/en/discover-plugins",
      "label": "Official installation",
      "note": "Find security-guidance and review the hook layers and privacy section before installation.",
      "observationOnly": true
    },
    "purpose": "Review the package's pattern warnings and model-backed code-review hooks before enabling them.",
    "tasks": [
      "code-review",
      "workflow-rules",
      "security-review"
    ],
    "documentedTargets": [
      {
        "id": "claude-code",
        "label": "Claude Code"
      }
    ],
    "version": null,
    "revision": null,
    "observedAt": "2026-09-07",
    "componentDeclarations": [
      {
        "kind": "hook",
        "label": "Pattern, diff and commit-review hooks",
        "members": null,
        "scope": "Three documented review layers; not a security certification; retained prior package observation, not revalidated by marketplace refresh"
      }
    ],
    "requirements": [
      {
        "key": "host-version",
        "label": "Claude Code CLI 2.1.144 or later, as stated by the observed README",
        "necessity": "required",
        "tasks": [
          "code-review",
          "workflow-rules"
        ],
        "source": 0
      },
      {
        "key": "python",
        "label": "Python 3.8 or later and a working model-access path",
        "necessity": "required",
        "tasks": [
          "code-review",
          "workflow-rules"
        ],
        "source": 0
      }
    ],
    "access": "Model-backed layers can send code and diffs to the configured model endpoint. Review data handling and usage costs.",
    "sourceUrls": [
      "https://github.com/anthropics/claude-plugins-official/tree/main/plugins/security-guidance",
      "https://github.com/anthropics/claude-plugins-official/blob/3deb821cb71ccfaaf2ffa9935e977df314ce5cd5/.claude-plugin/marketplace.json",
      "https://github.com/anthropics/claude-plugins-official/tree/3deb821cb71ccfaaf2ffa9935e977df314ce5cd5/plugins/security-guidance"
    ],
    "licenseDeclaration": "Consult the exact source terms; no hooks redistributed",
    "coverage": "partial",
    "qualification": "workflow-notes",
    "channel": {
      "curator": "Anthropic",
      "name": "anthropic-official",
      "indexUrl": "https://github.com/anthropics/claude-plugins-official/blob/3deb821cb71ccfaaf2ffa9935e977df314ce5cd5/.claude-plugin/marketplace.json",
      "indexRevision": "3deb821cb71ccfaaf2ffa9935e977df314ce5cd5",
      "observedAt": "2026-09-12",
      "packagePins": [
        "3deb821cb71ccfaaf2ffa9935e977df314ce5cd5"
      ],
      "revisionState": "source-pinned"
    },
    "distributions": [
      {
        "entry": "security-guidance",
        "marketplace": "anthropic-official",
        "indexUrl": "https://github.com/anthropics/claude-plugins-official/blob/3deb821cb71ccfaaf2ffa9935e977df314ce5cd5/.claude-plugin/marketplace.json",
        "indexRevision": "3deb821cb71ccfaaf2ffa9935e977df314ce5cd5",
        "packageRevision": null,
        "resolvedSourceRevision": "3deb821cb71ccfaaf2ffa9935e977df314ce5cd5",
        "packagePath": "plugins/security-guidance",
        "evidence": "catalog-entry-observed"
      }
    ],
    "manifestObservation": null,
    "componentObservationScope": "observed-2026-09-07",
    "evidence": "Source metadata only; no install, connection, authorization or task execution observed."
  }
}