Update to ECZ-ID SBOM & CRA Readiness

{
  "canonical_app_id": null,
  "connector_id": null,
  "created_at": "2026-09-03T14:56:27.135052Z",
  "discoverability": "LISTED",
  "id": "plugins_6a9984c1fdc081919f9074dc1e4bd7c3",
  "is_template": false,
  "name": "eczid-sbom-cra-readiness",
  "release": {
    "app_ids": [],
    "app_manifest": null,
    "app_templates": [],
    "description": "CRA reporting obligations apply from 11 September 2026. Review whether a workspace holds the SBOM, VEX / CSAF, disclosure, provenance and release evidence needed to identify an affected component within the reporting window. Filename and path only. Free.",
    "display_name": "ECZ-ID SBOM & CRA Readiness",
    "id": "pluginrel_eed036af1ce88191b42c3ba7863ecc57",
    "interface": {
      "brand_color": null,
      "capabilities": [
        "Read"
      ],
      "category": "Developer Tools",
      "composer_icon_dark_url": null,
      "composer_icon_url": "https://files.openai.com/content?id=file_00000000fbd881f484f282b34b373af2",
      "default_prompt": "Review this workspace for SBOM and CRA evidence gaps and tell me what needs attention first.",
      "default_prompts": [
        "Review this workspace for SBOM and CRA evidence gaps and tell me what needs attention first.",
        "Check whether this repository contains enough evidence to identify an affected software component within CRA reporting windows.",
        "Review the software-supply-chain evidence in this project and give me the Review Priority and next actions."
      ],
      "developer_name": "EcoCitizenz Ltd",
      "logo_url": "https://files.openai.com/content?id=file_0000000081b88210809fe6baa36e951c",
      "logo_url_dark": null,
      "long_description": "Review a workspace for software-supply-chain evidence relevant to SBOM and EU Cyber Resilience Act readiness. Check for machine-readable SBOMs, CycloneDX, SPDX, lockfiles, VEX/CSAF, vulnerability-disclosure evidence, provenance or attestations, and release records. Receive a deterministic Review Priority with clear guidance on what to review next. The workflow is local and read-only and does not certify compliance.",
      "plugin_category_id": "developer tools",
      "privacy_policy_url": "https://developers.ecocitizenz.com/plugins/sbom-cra-readiness/privacy/",
      "screenshot_urls": [],
      "short_description": "SBOM & CRA evidence review",
      "terms_of_service_url": "https://developers.ecocitizenz.com/plugins/sbom-cra-readiness/terms/",
      "website_url": "https://developers.ecocitizenz.com/sbom/"
    },
    "keywords": [
      "ecz-id",
      "sbom",
      "cra",
      "cyber-resilience-act",
      "cyclonedx",
      "spdx",
      "vex",
      "csaf"
    ],
    "mcp_servers": [],
    "onboarding_skill_name": null,
    "requires_local_executor": false,
    "skills": [
      {
        "description": "Could your team identify an affected software component and its evidence chain within the reporting window? Runs a local, filename-and-path-only evidence review and reports EVIDENCE OBSERVED / NOT OBSERVED, a deterministic Review Priority with reasons, why each class matters and what to review next. Use when asked about SBOM & CRA Readiness evidence, readiness, gaps or what to review next in a repository.",
        "interface": {
          "brand_color": null,
          "default_prompt": "Use $sbom-cra-evidence-review to review this workspace for SBOM and CRA evidence gaps.",
          "display_name": "ECZ-ID SBOM & CRA Readiness",
          "icon_large_url": "https://files.openai.com/content?id=file_00000000025481f48cd34f392b1c905b",
          "icon_small_url": "https://files.openai.com/content?id=file_00000000834c81f5a224d70e7c527fd4",
          "iconography": "radar",
          "short_description": "Review SBOM and CRA evidence"
        },
        "name": "sbom-cra-evidence-review",
        "plugin_release_skill_id": "pluginrsk_6a9984c6b35081918e78dc317566f8f1"
      }
    ],
    "version": "0.1.1"
  },
  "scope": "GLOBAL",
  "share_url": "https://chatgpt.com/plugins/plugins_6a9984c1fdc081919f9074dc1e4bd7c3?open_in_app",
  "status": "ENABLED"
}