cuioss/plan-marshall-plugin
marketplace/bundles/pm-dev-oci/skills/plan-marshall-plugin/SKILL.md
OCI container domain manifest for plan-marshall workflow integration
$ install --global
skillsauthnpx skillsauth add cuioss/plan-marshall plan-marshall-pluginInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 29, 2026, 3:05 AM80.4s2 files scanned
SKILL.md
- name:
- plan-marshall-plugin
- description:
- OCI container domain manifest for plan-marshall workflow integration
- user-invocable:
- false
Plan Marshall Plugin - OCI Container Domain
Domain manifest skill providing OCI container capabilities to plan-marshall workflows.
Enforcement
Execution mode: Extension manifest; modify only via Extension API contract.
Prohibited actions:
- Do not modify extension.py without updating this manifest documentation
- Do not bypass ExtensionBase inheritance for domain registration
- Do not hardcode skill paths; use bundle notation
Constraints:
- Extension must implement
get_skill_domains()fromExtensionBase - Domain identity must match the bundle name convention (oci-containers)
- Profile-based skill organization must align with plugin.json registration
Purpose
Declares the OCI container domain configuration including:
- Domain identity (key: oci-containers)
- Profile-based skill organization (security)
Configuration
All configuration is in extension.py which implements the Extension API:
get_skill_domains()- Domain metadata with profilesprovides_triage()- Triage skill reference or Noneprovides_outline_skill()- Domain-specific outline skill reference or None
Detection
This domain is applicable when Dockerfile, docker-compose.yml, or Containerfile exists in the project, indicating OCI container usage.
Integration
This manifest is read by:
skill-domains get-available- Lists available domainsskill-domains configure- Applies domain configuration to marshal.jsonmarshall-stewardwizard - Domain selection during project setup
Related Skills
cuioss/ext-self-review-plan-marshall
tools
VerifiedTrustedCommunity
Plan-marshall-domain implementor of the ext-self-review-{domain} extension point. Surfaces deterministic candidates (regexes, user-facing strings, markdown sections, symmetric-pair functions, flag-guard pairs, contract sources, schema-bearing files) for pre-submission structural self-review.
5SKILL.mdUpdated Jun 6, 2026
cuioss/untrusted-ingestion
development
VerifiedTrustedCommunity
The single shared contract every untrusted-external-content ingestion surface loads — reader/orchestrator/writer isolation, the deterministic validator script as the containment boundary, and the output-schema discipline for candidate structs parsed from web pages, GitHub issue/PR/comment bodies, and Sonar issue messages
5SKILL.mdUpdated Jun 6, 2026
cuioss/recipe-simplify-codebase
development
VerifiedTrustedCommunity
Domain-invariant recipe for deliberate wide-scope simplification campaigns across a scope x thoroughness cell, with a T4+ relation-graph pre-deliverable
5SKILL.mdUpdated Jun 6, 2026
cuioss/test-skill
testing
VerifiedTrustedCommunity
A test skill for README generation
5SKILL.mdUpdated May 29, 2026