Agent Plugins Marketplace
← All plugins

trustabl

v0.1.4

Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the agent reliability scanner for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP. Ships two skills: trustabl-scan scans your agent code with Trustabl (via a bundled MCP server) right after you write or change it, before you commit — optionally matching your declared dependencies against the OSV database for known CVEs — and trustabl-enrich applies the scan findings directly to your source files as targeted code edits.

CodexClaude Code2 Skills1 MCP serverstdio

By TrustablLicense: Apache-2.040 GitHub starsUpdated 15 hours ago

Directory evidence

Runtimes
Codex and Claude Code
Parsed components
3 skill or MCP entries
Source updated
Aug 26, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install plugin

Installs for the current user
codex plugin marketplace add IchenDEV/agent-plugin-mkt
codex plugin marketplace upgrade agent-plugin-marketplace
codex plugin add trustabl@agent-plugin-marketplace

Paste and run these commands in a terminal with Codex. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/trustabl/trustabl

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The repository root is the plugin root.

Plugin files

trustabl/
├── .codex-plugin/plugin.json
├── .claude-plugin/plugin.json
├── skills/trustabl-enrich/SKILL.md
├── skills/trustabl-scan/SKILL.md
└── .mcp.json

Included Skills2

trustabl-enrichskills/trustabl-enrich/SKILL.md

Enriches source files flagged by a Trustabl scan — adds what is missing and corrects what is wrong, guided entirely by the scan's own explanation and fix text. Use after `trustabl scan` to apply findings directly to source files without manual editing.

trustabl-scanskills/trustabl-scan/SKILL.md

Use right after you write or modify AI agent, tool, subagent, or MCP-server code (OpenAI Agents SDK, Claude Agent SDK, Google ADK, MCP) to self-audit it for security and reliability misconfigurations with Trustabl before committing. Triggers on adding or editing an agent definition, a tool / @function_tool / @tool / tool() handler, a subagent markdown file, an MCP server registration, agent guardrails, or .claude/settings.json permissions. Runs Trustabl's `scan` tool via the plugin's bundled MCP server and guides remediation of the findings.

MCP servers1

trustablstdio
command
${CLAUDE_PLUGIN_ROOT}/scripts/trustabl-mcp.sh

Plugin manifests2

.codex-plugin/plugin.json
{
  "name": "trustabl",
  "version": "0.1.4",
  "description": "Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the agent reliability scanner for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP. Ships two skills: trustabl-scan scans your agent code with Trustabl (via a bundled MCP server) right after you write or change it, before you commit — optionally matching your declared dependencies against the OSV database for known CVEs — and trustabl-enrich applies the scan findings directly to your source files as targeted code edits.",
  "author": {
    "name": "Trustabl",
    "url": "https://github.com/trustabl"
  },
  "homepage": "https://github.com/trustabl/trustabl",
  "repository": "https://github.com/trustabl/trustabl",
  "license": "Apache-2.0",
  "keywords": [
    "security",
    "static-analysis",
    "agents",
    "mcp",
    "openai-agents-sdk",
    "claude-agent-sdk",
    "google-adk"
  ],
  "skills": "./skills/",
  "interface": {
    "displayName": "Trustabl",
    "shortDescription": "Find and fix reliability and security defects in AI agent and MCP-server code.",
    "longDescription": "Trustabl audits agent code built with the OpenAI Agents SDK, Claude Agent SDK, Google ADK, MCP, LangChain, CrewAI, and more. Ships two skills: trustabl-scan scans your agent code right after you write or change it — optionally matching declared dependencies against the OSV database for known CVEs — and trustabl-enrich applies the scan findings as targeted code edits directly to your source files.",
    "developerName": "Trustabl",
    "category": "security",
    "capabilities": [
      "scan",
      "analyze",
      "fix"
    ],
    "websiteURL": "https://github.com/trustabl/trustabl"
  }
}
.claude-plugin/plugin.json
{
  "name": "trustabl",
  "version": "0.1.4",
  "description": "Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the agent reliability scanner for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP. Ships two skills (trustabl-scan and trustabl-enrich) and a subagent (trustabl) that together form a scan → enrich → review → apply pipeline.",
  "homepage": "https://github.com/trustabl/trustabl",
  "author": {
    "name": "Trustabl",
    "url": "https://github.com/trustabl"
  },
  "license": "Apache-2.0",
  "hooks": "./hooks/hooks.json"
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[trustabl on Agent Plugins Marketplace](https://pluginsmp.com/plugins/trustabl)