{
  "schemaVersion": "plugins-directory/1.0.0",
  "snapshotId": "plugins-2026-09-12.p6",
  "localBriefFormat": "gptsapp-plugin-decision-brief/1.0.0",
  "plugin": {
    "id": "gpa:plugin:d428f8df7357b760136d95a6404928d09759c9533eff08d5c8abd6a89b308142",
    "key": "p5-trailofbits-static-analysis",
    "name": "Static Analysis",
    "ecosystem": "claude-code",
    "packageRole": null,
    "deliveryNote": "Claude-format distribution. The publisher describes Codex marketplace compatibility, not a separate native Codex package. Other interfaces and component activation remain unverified.",
    "sourceIssues": [],
    "sourceOwner": "trailofbits",
    "declaredAuthor": "Axel Mierczuk & Paweł Płatek (manifest declaration)",
    "canonical": "https://plugins.gptsapp.io/plugins/claude-code/trailofbits/static-analysis",
    "repository": "https://github.com/trailofbits/skills",
    "packageRoot": "plugins/static-analysis",
    "installation": {
      "url": "https://github.com/trailofbits/skills",
      "label": "Maintainer installation",
      "note": "Independent maintainer marketplace: trailofbits. Entry: static-analysis. Exact package root: plugins/static-analysis. Review publisher instructions and Claude host requirements; no installation is performed here.",
      "observationOnly": true
    },
    "purpose": "Find source-listed CodeQL, Semgrep and SARIF review workflows without assuming the tools are present.",
    "tasks": [
      "security-review",
      "code-review"
    ],
    "documentedTargets": [
      {
        "id": "claude-code",
        "label": "Claude Code"
      }
    ],
    "version": "1.4.3",
    "revision": "d3323cefbcf645678b8dc481de204b02ad3d02dc",
    "observedAt": "2026-09-08T13:38:57.308Z",
    "componentDeclarations": [],
    "requirements": [],
    "access": "Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.",
    "sourceUrls": [
      "https://raw.githubusercontent.com/trailofbits/skills/d3323cefbcf645678b8dc481de204b02ad3d02dc/.claude-plugin/marketplace.json",
      "https://raw.githubusercontent.com/trailofbits/skills/d3323cefbcf645678b8dc481de204b02ad3d02dc/plugins/static-analysis/.claude-plugin/plugin.json",
      "https://github.com/trailofbits/skills/tree/d3323cefbcf645678b8dc481de204b02ad3d02dc/plugins/static-analysis",
      "https://raw.githubusercontent.com/trailofbits/skills/d3323cefbcf645678b8dc481de204b02ad3d02dc/README.md",
      "https://raw.githubusercontent.com/trailofbits/skills/d3323cefbcf645678b8dc481de204b02ad3d02dc/LICENSE"
    ],
    "licenseDeclaration": "Root README declares CC-BY-SA-4.0. This is not a manifest license or file-level clearance; only original reference metadata is retained here.",
    "coverage": "partial",
    "qualification": "manifest-inspected",
    "channel": {
      "curator": "Trail of Bits",
      "name": "trailofbits",
      "authority": "independent-maintainer-marketplace",
      "indexUrl": "https://raw.githubusercontent.com/trailofbits/skills/d3323cefbcf645678b8dc481de204b02ad3d02dc/.claude-plugin/marketplace.json",
      "indexRevision": "d3323cefbcf645678b8dc481de204b02ad3d02dc",
      "observedAt": "2026-09-08T13:38:52.299Z",
      "packagePins": [
        "d3323cefbcf645678b8dc481de204b02ad3d02dc"
      ],
      "revisionState": "source-pinned"
    },
    "distributions": [
      {
        "entry": "static-analysis",
        "marketplace": "trailofbits",
        "indexUrl": "https://raw.githubusercontent.com/trailofbits/skills/d3323cefbcf645678b8dc481de204b02ad3d02dc/.claude-plugin/marketplace.json",
        "indexRevision": "d3323cefbcf645678b8dc481de204b02ad3d02dc",
        "packageRevision": "d3323cefbcf645678b8dc481de204b02ad3d02dc",
        "resolvedSourceRevision": "d3323cefbcf645678b8dc481de204b02ad3d02dc",
        "packagePath": "plugins/static-analysis",
        "evidence": "manifest-and-index-observed"
      }
    ],
    "manifestObservation": {
      "sourceUrl": "https://raw.githubusercontent.com/trailofbits/skills/d3323cefbcf645678b8dc481de204b02ad3d02dc/plugins/static-analysis/.claude-plugin/plugin.json",
      "revision": "d3323cefbcf645678b8dc481de204b02ad3d02dc",
      "observedAt": "2026-09-08T13:38:57.308Z",
      "version": "1.4.3",
      "declaredAuthor": "Axel Mierczuk & Paweł Płatek",
      "componentPathsOnly": true
    },
    "componentObservationScope": "d3323cefbcf645678b8dc481de204b02ad3d02dc",
    "evidence": "Source metadata only; no install, connection, authorization or task execution observed."
  }
}