Source: github.com/endorlabs/ai-plugins @ 2de00883bd2be8b8578b46ab09baf2c8731376de · found via anthropics/claude-plugins-official
Indexed in place — Talents stores metadata + attestation, never a copy. Installs resolve from this source, pinned to the ref above.
Indexed in place — Talents stores metadata + attestation, never a copy. Installs resolve from this source, pinned to the ref above.
About
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
Components
No components declared.
Declaration (derived by the registry from the source — the publisher wrote no manifest)
- undeclared Undeclared: No components could be derived from plugin.json — what this plugin can do is undeclared; it runs only in sandbox/Playground until the publisher confirms a declaration
Undeclared — sandbox / Playground only until the publisher confirms
- No components could be derived from plugin.json — what this plugin can do is undeclared; it runs only in sandbox/Playground until the publisher confirms a declaration
Derived from: plugin.json in endorlabs/ai-plugins
Validation
⚠ warning pluginjson-version — plugin.json has no version — entry is pinned by commit SHA instead of a version tag
Files hashed
.claude-plugin/plugin.json
Use this skill — no import, no export
In Claude Code, once:
/plugin marketplace add talents
Then install by name:
/plugin install endorlabs/ai-plugins
Or ask any connected agent:
Use endorlabs/ai-plugins@2de00883bd2be8b8578b46ab09baf2c8731376de
Attestation
Algorithmed25519
Content hasha4aa0447fece28f6bb92e90ce5ab1fffa6b204c2c50f1707bdcd6cefcf984012
Signed2026-11-10T14:33:23.402Z
SignatureqUYKP/nsszLheg0VcMNu8uMI92Mju7fpNVemFy9wnE0m…
The registry signs the hash of the source at the pinned ref. If the source changes after pinning, the hash fails and integrating hosts refuse it.
Record
Kindplugin
Source typegithub
Statuslisted
Publishertalents.sh/endorlabs
Indexed2026-11-10T14:33:23.402Z