Sources, coverage and limits

This snapshot

40 additional Trail of Bits packages have individually observed manifests. Only 3 Skill files and two configuration files were sampled; a complete tree and complete component inventory were not obtained. Empty manifest fields do not mean zero components. Publisher-described Codex compatibility does not create another native-format identity.

20 additional financial workflow and administrator packages: 117 Skill paths, 10 Agent paths and 56 Command paths. Direct file observations do not establish runtime activation, complete prerequisites or advice. A recorded malformed MCP configuration is retained as a source issue, not repaired.

23 additional manifest-observed packages from publisher and independent marketplaces. 192 skill paths, 8 agent paths and 16 command paths are scoped source-file observations, not separately counted plugins or runtime capabilities.

360 marketplace entries resolve to 355 unique official-source package identities. 5 extra alias or version-pinned entries are not counted as additional plugins. 62 OpenAI manifests were separately inspected.

Source-linked packages: 439 distinct installation identities
Ecosystems: OpenAI / Codex and Claude Code — separate package formats
Apps referenced: 2 independent public App references
Observation date: 2026-09-12
Runtime tests of plugins: None. We do not install or run these packages.
Data snapshot: plugins-2026-09-12.p6

Coverage is not exhaustive. Unknown requirements, versions and interface support remain visible. A source repository or marketplace listing is not a security, compatibility, availability or authorization certificate.

How facts enter the directory

We inspect public official documentation, marketplace distribution records and exact repository locations. We write minimal factual navigation notes, distinguish repository ownership from declared authorship, and record component scope. The qualified snapshot is tied to a review of its exact bytes. A changed upstream record cannot automatically replace it.

Reference-only metadata does not include copied README text, source code, executable hooks, logos or screenshots. A package license declaration is distinct from this directory’s original factual notes, and from the terms of external services.

What the labels mean

Included: Declared in this package. It is not advice to install the same component twice.
Required: A documented prerequisite for the named task — not a global compatibility result.
Optional: A documented addition for some capabilities; its absence does not automatically block the entire package.
Unknown: Not established. It does not mean no account, no fee, no dependency or no permission.
Last qualified observation: Older evidence retained when a source cannot be reconciled. Its date is not rewritten to look current.

Changes, withdrawals and corrections

Source changes require another reviewed observation. Failed or incomplete checks cannot silently delete the catalog. Confirmed removals are excluded from search, direct details and exports; their suppression record stays separate from rollbackable snapshots.

This directory has no deployed scheduler or guaranteed refresh interval. The source date above is the actual boundary of its evidence. Correction notes can be prepared and downloaded locally; the page does not pretend they were submitted.

Prepare a correction note →

Sources, coverage and limits.

This snapshot

How facts enter the directory

What the labels mean

Changes, withdrawals and corrections