skills/software-data-ai-copilot/references/official_source_registry.md

# Official Source Registry

Use current primary documentation whenever a recommendation depends on a specific version, API, framework, runtime, package, cloud service, or security requirement.

## OpenAI plugin packaging
- Package plugins: https://developers.openai.com/plugins/build/plugins
- Build skills: https://developers.openai.com/plugins/build/skills
- Submit plugins: https://developers.openai.com/plugins/deploy/submission
- Submission validation/errors: https://developers.openai.com/plugins/deploy/submission-errors

## Secure software development
- OWASP Top 10:2025: https://top10.owasp.org/2025/
- OpenSSF developer resources: https://best.openssf.org/developers.html
- OpenSSF secure software guiding principles: https://best.openssf.org/SecureSoftwareGuidingPrinciples.html
- OpenSSF guides: https://openssf.org/resources/guides/

## Usage rule
Prefer the official documentation for the exact framework, SDK, database, cloud provider, package manager, or model API named by the user.

Do not treat this registry as frozen product truth. Version-sensitive implementation advice should be verified against current primary documentation.