therohitdas 20f8eeb807 Add Codex plugin manifest set for marketplace listing ...

- .codex-plugin/plugin.json: manifest per hashgraph-online/awesome-codex-plugins
  spec (semver, kebab-case name, full interface metadata, brand color from the
  real mark, privacy/terms URLs verified 200)
- SECURITY.md: vulnerability disclosure policy (private email channel, SLA,
  scope, credential handling)
- assets/icon.svg: the real TranscriptAPI brand favicon, byte-identical to
  https://transcriptapi.com/brand/favicon.svg (already 512x512)
- assets/screenshot-transcriptapi.png: live homepage capture for the
  marketplace screenshots field
- .codexignore: exclude repo plumbing from plugin installs
- .github/dependabot.yml: weekly github-actions updates (scanner op-sec item)

Local HOL scanner (plugin-scanner==2.0.1116, wheel sha256 verified against the
reviewed release): 95/100 (A). Remaining: 12 RISKY_SKILL_INSTRUCTION highs,
one per SKILL.md, all the same class (literal curl examples calling the
plugin's own API); resolution touches published skill copy and goes through
its own review gate. Scanner CI workflow file pending workflow-scoped token.

Co-Authored-By: CRHQ <noreply@crhq.ai>

2026-08-11 10:06:25 +00:00

..

plugin.json

Add Codex plugin manifest set for marketplace listing

2026-08-11 10:06:25 +00:00