lowsecuritySECURITY_MD_MISSING
Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.
Add a SECURITY.md file with reporting guidance and supported versions.
lowsecurityLICENSE_MISSING
Plugins should ship a LICENSE file so consumers can review usage rights.
Add a LICENSE file that matches the manifest license metadata.
lowbest-practicesREADME_MISSING
Plugins should document installation, usage, and security expectations in README.md.
Add a README.md that explains setup, usage, and operational constraints.
infomanifest-validationPLUGIN_JSON_RECOMMENDED_REPOSITORY
The manifest is missing the documented recommended field "repository".
Add "repository" to strengthen the plugin manifest metadata.
infomanifest-validationPLUGIN_JSON_RECOMMENDED_LICENSE
The manifest is missing the documented recommended field "license".
Add "license" to strengthen the plugin manifest metadata.
infomanifest-validationPLUGIN_JSON_RECOMMENDED_KEYWORDS
The manifest is missing the documented recommended field "keywords".
Add "keywords" to strengthen the plugin manifest metadata.
infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO
The interface field "logo" must use HTTPS or point to a safe in-repo asset.
Update "logo" to use HTTPS or an existing relative asset path.
infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS
The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.
Update "screenshots" to use HTTPS or an existing relative asset path.
infobest-practicesCODEXIGNORE_MISSING
A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.
Add a .codexignore file with generated assets, local state, and secret paths.