@shnitzel/plugscout 0.3.34 → 0.3.35

package/README.md

@@ -78,7 +78,7 @@ npm install
 npm run setup
 ```
 
-## Your first scan (30 seconds)
+## Your first scan
 
 ```bash
 plugscout setup                                         # install deps, write config, sync catalogs
@@ -97,7 +97,7 @@ skill:secure-prompting            skill               openai      low(0)    fals
 
 Review any result with `plugscout show --id <id>`, then install with `plugscout install --id <id> --yes`.
 
-## Quick Start (2-minute path)
+## Quick Start
 
 ```bash
 npm install -g @shnitzel/plugscout
@@ -197,6 +197,8 @@ plugscout sync               # skip registries synced within the last 6 hours
 plugscout sync --force       # re-fetch everything regardless of cache age
 ```
 
+**First sync timing:** The MCP registry (`registry.modelcontextprotocol.io`) contains 10,000+ servers and is fetched in paginated batches. The first full sync takes 5–8 minutes. Subsequent syncs are cached for 6 hours and complete in seconds. Progress is printed per page so you can see it working.
+
 Cursor and Gemini extension lists are served from `raw.githubusercontent.com` and auto-update on each sync.
 
 ## Core Commands

package/config/providers.json

@@ -61,6 +61,16 @@
         "mode": "daily",
         "rateLimitPerMinute": 60
       }
+    },
+    {
+      "id": "skills-il",
+      "enabled": true,
+      "officialOnly": false,
+      "trustLevel": "medium",
+      "poll": {
+        "mode": "daily",
+        "rateLimitPerMinute": 60
+      }
     }
   ]
 }

package/config/registries.json

@@ -3363,6 +3363,21 @@
         "official": true,
         "licenseHint": "community"
       }
+    },
+    {
+      "id": "agentskills-il",
+      "kind": "skill",
+      "adapter": "agentskills-il-v1",
+      "sourceType": "vendor-feed",
+      "officialOnly": false,
+      "entries": [],
+      "remote": {
+        "url": "https://raw.githubusercontent.com/amitrintzler/plugscout/main/assets/registries/agentskills-il.json",
+        "format": "json-array",
+        "timeoutMs": 15000,
+        "fallbackToLocal": true,
+        "provider": "skills-il"
+      }
     }
   ]
 }

package/dist/catalog/adapter.js

@@ -1,6 +1,7 @@
 import { adaptAwesomeClaudeCodeEntries } from './adapters/awesome-claude-code-v1.js';
 import { adaptCursorExtensionsEntries } from './adapters/cursor-extensions-v1.js';
 import { adaptGeminiExtensionsEntries } from './adapters/gemini-extensions-v1.js';
+import { adaptAgentskillsIlEntries } from './adapters/agentskills-il-v1.js';
 import { adaptClaudeConnectorsScrapeEntries } from './adapters/claude-connectors-scrape-v1.js';
 import { adaptClaudeCodeMarketplaceEntries } from './adapters/claude-code-marketplace-v1.js';
 import { adaptClaudePluginsEntries } from './adapters/claude-plugins-v0.1.js';
@@ -47,5 +48,8 @@ export function adaptRegistryEntries(registry, entries) {
     if (registry.adapter === 'gemini-extensions-v1') {
         return adaptGeminiExtensionsEntries(registry.id, entries);
     }
+    if (registry.adapter === 'agentskills-il-v1') {
+        return adaptAgentskillsIlEntries(registry.id, entries);
+    }
     return entries;
 }

package/dist/catalog/adapters/agentskills-il-v1.js

@@ -0,0 +1,180 @@
+import { dedupe, readString } from './shared.js';
+export function adaptAgentskillsIlEntries(sourceId, entries) {
+    return entries
+        .map((entry) => mapEntry(sourceId, entry))
+        .filter((entry) => entry !== null);
+}
+function mapEntry(sourceId, entry) {
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+        return null;
+    }
+    const record = entry;
+    const source = readString(record, ['_source']);
+    if (source === 'mcp') {
+        return mapMcpEntry(sourceId, record);
+    }
+    return mapSkillEntry(sourceId, record);
+}
+function mapSkillEntry(sourceId, record) {
+    const slug = readString(record, ['_slug']);
+    if (!slug)
+        return null;
+    const displayName = resolveLocalized(record['display_name'], 'en') ?? slug;
+    const displayDescription = resolveLocalized(record['display_description'], 'en') ?? `AgentSkills IL skill: ${slug}`;
+    const tagsEn = extractStringArray(resolveLocalized(record['tags'], 'en'));
+    const tagsHe = extractStringArray(resolveLocalized(record['tags'], 'he'));
+    const category = readString(record, ['category']) ?? readString(record, ['_repo']) ?? 'general';
+    const repoUrl = readString(record, ['_repoUrl']);
+    const supportedAgents = extractStringArray(record['supported_agents']);
+    const compatibility = dedupe(['general', ...agentsToCompatibility(supportedAgents)]);
+    const capabilities = dedupe([...tagsEn, categoryToCapability(category)].filter(Boolean));
+    return {
+        id: `skill:agentskills-il/${slug}`,
+        kind: 'skill',
+        provider: 'skills-il',
+        name: displayName,
+        description: displayDescription,
+        capabilities,
+        compatibility,
+        source: sourceId,
+        install: {
+            kind: 'manual',
+            instructions: `npx skills-il ${slug}`,
+            url: repoUrl ?? `https://agentskills.co.il/skills/${slug}`
+        },
+        adoptionSignal: 55,
+        maintenanceSignal: 72,
+        provenanceSignal: 85,
+        freshnessSignal: 75,
+        securitySignals: {
+            knownVulnerabilities: 0,
+            suspiciousPatterns: 0,
+            injectionFindings: 0,
+            exfiltrationSignals: 0,
+            integrityAlerts: 0
+        },
+        metadata: {
+            repositoryUrl: repoUrl,
+            category,
+            tagsHe,
+            descriptionHe: resolveLocalized(record['display_description'], 'he'),
+            version: readString(record, ['version']),
+            sourceType: 'vendor-feed',
+            sourceConfidence: 'official'
+        }
+    };
+}
+function mapMcpEntry(sourceId, record) {
+    const slug = readString(record, ['_slug']);
+    const pkgName = readString(record, ['name']);
+    if (!slug && !pkgName)
+        return null;
+    const id = slug ?? pkgName ?? '';
+    const name = toTitle(slug ?? pkgName?.replace(/^@[^/]+\//, '') ?? id);
+    const description = readString(record, ['description']) ?? `AgentSkills IL MCP server: ${id}`;
+    const keywords = extractStringArray(record['keywords']);
+    const repoUrl = readString(record, ['_repoUrl']);
+    const capabilities = dedupe(keywords.length > 0 ? keywords : ['israel']);
+    return {
+        id: `mcp:agentskills-il/${slug ?? id}`,
+        kind: 'mcp',
+        provider: 'skills-il',
+        name,
+        description,
+        transport: 'stdio',
+        authModel: 'none',
+        capabilities,
+        compatibility: ['general', 'node'],
+        source: sourceId,
+        install: {
+            kind: 'skill.sh',
+            target: pkgName ?? `@skills-il/${slug}`,
+            args: []
+        },
+        adoptionSignal: 50,
+        maintenanceSignal: 70,
+        provenanceSignal: 85,
+        freshnessSignal: 75,
+        securitySignals: {
+            knownVulnerabilities: 0,
+            suspiciousPatterns: 0,
+            injectionFindings: 0,
+            exfiltrationSignals: 0,
+            integrityAlerts: 0
+        },
+        metadata: {
+            repositoryUrl: repoUrl,
+            packageIdentifier: pkgName,
+            packageRegistryType: 'npm',
+            packageRuntime: 'node',
+            version: readString(record, ['version']),
+            sourceType: 'vendor-feed',
+            sourceConfidence: 'official'
+        }
+    };
+}
+function resolveLocalized(value, lang) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        if (typeof value === 'string')
+            return value;
+        if (Array.isArray(value))
+            return value;
+        return undefined;
+    }
+    const rec = value;
+    const v = rec[lang];
+    if (typeof v === 'string')
+        return v;
+    if (Array.isArray(v))
+        return v;
+    return undefined;
+}
+function extractStringArray(value) {
+    if (Array.isArray(value)) {
+        return value.filter((v) => typeof v === 'string' && v.trim().length > 0);
+    }
+    if (typeof value === 'string' && value.trim().length > 0) {
+        return [value];
+    }
+    return [];
+}
+function agentsToCompatibility(agents) {
+    const map = {
+        'claude-code': 'claude',
+        cursor: 'cursor',
+        'github-copilot': 'github',
+        windsurf: 'windsurf',
+        'gemini-cli': 'gemini',
+        codex: 'openai',
+        opencode: 'general',
+        antigravity: 'general',
+    };
+    return agents.map((a) => map[a]).filter((v) => Boolean(v));
+}
+function categoryToCapability(category) {
+    const map = {
+        'tax-and-finance': 'finance',
+        localization: 'localization',
+        'government-services': 'government',
+        'security-compliance': 'security',
+        communication: 'communication',
+        'developer-tools': 'automation',
+        'food-and-dining': 'food',
+        'health-services': 'health',
+        'marketing-growth': 'marketing',
+        'legal-tech': 'legal',
+        education: 'education',
+        accounting: 'finance',
+        'design-systems': 'design',
+        courses: 'education',
+    };
+    return map[category] ?? category;
+}
+function toTitle(slug) {
+    return slug
+        .replace(/^@[^/]+\//, '')
+        .split(/[-_]/g)
+        .filter(Boolean)
+        .map((part) => part[0].toUpperCase() + part.slice(1))
+        .join(' ');
+}

package/dist/catalog/adapters/mcp-registry-v0.1.js

@@ -1,9 +1,26 @@
 import { dedupe, extractStringArray, readNestedString, readString } from './shared.js';
 export function adaptMcpRegistryEntries(sourceId, entries) {
     return entries
+        .filter((entry) => isMcpEntryLatest(entry))
         .map((entry) => mapMcpRegistryEntry(sourceId, entry))
         .filter((entry) => entry !== null);
 }
+function isMcpEntryLatest(entry) {
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+        return true;
+    }
+    const record = entry;
+    const meta = record._meta;
+    if (!meta || typeof meta !== 'object' || Array.isArray(meta)) {
+        return true;
+    }
+    const official = meta['io.modelcontextprotocol.registry/official'];
+    if (!official || typeof official !== 'object' || Array.isArray(official)) {
+        return true;
+    }
+    const isLatest = official.isLatest;
+    return isLatest !== false;
+}
 function mapMcpRegistryEntry(sourceId, entry) {
     if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
         return null;

package/dist/catalog/remote-registry.js

@@ -21,7 +21,7 @@ export async function resolveRegistryEntries(registry, options = {}, fetchImpl =
         }
     }
     try {
-        const parsed = await fetchRemoteRegistryEntries(registry, options, fetchImpl);
+        const parsed = await fetchRemoteRegistryEntries(registry, options, fetchImpl, options.onProgress);
         if (parsed.length === 0 && registry.entries.length > 0) {
             const level = options.updatedSince ? 'info' : 'warn';
             const reason = options.updatedSince ? 'returned no updates' : 'returned no entries';
@@ -38,14 +38,16 @@ export async function resolveRegistryEntries(registry, options = {}, fetchImpl =
         throw error;
     }
 }
-export async function fetchRemoteRegistryEntries(registry, options = {}, fetchImpl = fetch) {
+export async function fetchRemoteRegistryEntries(registry, options = {}, fetchImpl = fetch, onProgress) {
     if (!registry.remote) {
         throw new Error(`Registry ${registry.id} has no remote definition`);
     }
     validateRemoteHost(registry);
     const allEntries = [];
     let cursor;
+    let page = 0;
     do {
+        page++;
         const payload = await fetchRemoteRegistryPayload(registry, fetchImpl, {
             cursor,
             updatedSince: options.updatedSince
@@ -53,6 +55,9 @@ export async function fetchRemoteRegistryEntries(registry, options = {}, fetchIm
         const parsed = extractEntries(payload, registry.remote.format, registry.remote.entryPath, registry.kind);
         allEntries.push(...parsed);
         cursor = resolveNextCursor(payload, registry.remote.pagination?.nextCursorPath);
+        if (cursor && onProgress) {
+            onProgress(`  ↓ ${registry.id} page ${page + 1}… (${allEntries.length} so far)`);
+        }
     } while (cursor && registry.remote.pagination);
     return allEntries;
 }

package/dist/catalog/sync.js

@@ -50,7 +50,7 @@ export async function syncCatalogs(today = new Date().toISOString().slice(0, 10)
         }
         progress(`  ↓ ${registry.id} (${registry.kind})…`);
         const updatedSince = registry.remote?.supportsUpdatedSince ? getUpdatedSince(syncState, registry.id) : undefined;
-        const resolved = await resolveRegistryEntries(registry, { updatedSince });
+        const resolved = await resolveRegistryEntries(registry, { updatedSince, onProgress: progress });
         const adaptedEntries = resolved.source === 'remote' ? adaptRegistryEntries(registry, resolved.entries) : resolved.entries;
         // Always include curated local entries so they persist even when remote succeeds
         const curatedEntries = resolved.source === 'remote' ? registry.entries : [];

package/dist/lib/validation/contracts.js

@@ -139,7 +139,8 @@ export const RegistrySchema = z.object({
         'claude-connectors-scrape-v1',
         'awesome-claude-code-v1',
         'cursor-extensions-v1',
-        'gemini-extensions-v1'
+        'gemini-extensions-v1',
+        'agentskills-il-v1'
     ])
         .default('direct'),
     enabled: z.boolean().default(true),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shnitzel/plugscout",
-  "version": "0.3.34",
+  "version": "0.3.35",
   "description": "Claude plugins + Claude connectors + Copilot extensions + Skills + MCP security intelligence framework",
   "private": false,
   "type": "module",