feat: add 10 pluginpool plugins (scanner verify+lint pass 97/100)

Adds all 10 plugins from mturac/pluginpool as installable Codex plugin
bundles under plugins/mturac/. Each plugin includes the required
.codex-plugin/plugin.json with full interface metadata (displayName,
shortDescription, longDescription, category, capabilities, brandColor,
composerIcon), skills/<name>/SKILL.md with proper frontmatter (name,
license), SECURITY.md, .codexignore, README.md, LICENSE, and assets.

Plugins added (all under plugins/mturac/):
- commit-narrator — semantic commit message from staged diff
- pr-storyteller — PR title + body + test plan from commits
- test-gap — diff lines lacking test coverage
- deps-doctor — multi-ecosystem dependency audit (npm/pip/cargo/go)
- env-lint — .env vs .env.example key parity
- secret-guard — pre-commit secret scanner
- standup-gen — standup notes from git activity
- todo-harvest — TODO/FIXME/HACK scan with git blame
- flaky-detector — per-test flakiness % from N runs
- changelog-forge — conventional commits → CHANGELOG

Validator results (codex-plugin-scanner):
- All 10 plugins: lint policy PASS, effective_score=97/100
- All 10 plugins: verify PASS (manifest, interface, skills, assets)
- Remaining warnings are info-level (no logo/screenshots — optional)

Marketplace entries added to .agents/plugins/marketplace.json with
local source paths so installation works offline through the curated
marketplace. README.md updated under Development & Workflow with 10
direct links to bundles.

Author: mturac

.agents/plugins/marketplace.json

@@ -60,7 +60,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Development & Workflow",
-      "description": "Multi-agent codebase knowledge graph generator with context-aware planning and automatic scope management — turns codebases into coherent agent workspaces."
+      "description": "Multi-agent codebase knowledge graph generator with context-aware planning and automatic scope management \u2014 turns codebases into coherent agent workspaces."
     },
     {
       "name": "archcore",
@@ -103,7 +103,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Development & Workflow",
-      "description": "AI code reviews grounded in six classic engineering books — decay risk diagnostics with book citations, severity labels, and four analysis modes (PR review, architecture audit, tech debt, test quality).",
+      "description": "AI code reviews grounded in six classic engineering books \u2014 decay risk diagnostics with book citations, severity labels, and four analysis modes (PR review, architecture audit, tech debt, test quality).",
       "icon": "./plugins/hyhmrright/brooks-lint/assets/logo.svg"
     },
     {
@@ -148,7 +148,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Development & Workflow",
-      "description": "223 production-ready skills, 23 agents, and 298 Python tools across 9 domains — engineering, marketing, product, compliance, and more."
+      "description": "223 production-ready skills, 23 agents, and 298 Python tools across 9 domains \u2014 engineering, marketing, product, compliance, and more."
     },
     {
       "name": "claude-octopus",
@@ -176,7 +176,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Development & Workflow",
-      "description": "Analyze git history to understand a codebase before reading any code — auto-scales by repo size and cross-references hotspots with bug magnets to surface high-risk files, bus factor, and team momentum."
+      "description": "Analyze git history to understand a codebase before reading any code \u2014 auto-scales by repo size and cross-references hotspots with bug magnets to surface high-risk files, bus factor, and team momentum."
     },
     {
       "name": "ateam",
@@ -396,7 +396,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Development & Workflow",
-      "description": "Session orchestration for Claude Code, Codex, and Cursor IDE — structured planning, wave-based execution, VCS integration (GitLab + GitHub), quality gates, and clean session close-out with issue tracking.",
+      "description": "Session orchestration for Claude Code, Codex, and Cursor IDE \u2014 structured planning, wave-based execution, VCS integration (GitLab + GitHub), quality gates, and clean session close-out with issue tracking.",
       "icon": "./plugins/Kanevry/session-orchestrator/assets/icon.svg"
     },
     {
@@ -411,7 +411,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Development & Workflow",
-      "description": "Three-phase Requirements → Design → Tasks workflow for Claude Code and Codex — EARS notation acceptance criteria, autonomous execution loop, cross-spec dependencies, and post-implementation acceptance testing."
+      "description": "Three-phase Requirements \u2192 Design \u2192 Tasks workflow for Claude Code and Codex \u2014 EARS notation acceptance criteria, autonomous execution loop, cross-spec dependencies, and post-implementation acceptance testing."
     },
     {
       "name": "stark",
@@ -482,7 +482,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Development & Workflow",
-      "description": "Role-based team delivery framework — Tech Lead-orchestrated 8-role system with 195+ skills, 27 specialist agents, 80+ commands, hooks, and ECC harness for Claude Code, Codex, and OpenCode."
+      "description": "Role-based team delivery framework \u2014 Tech Lead-orchestrated 8-role system with 195+ skills, 27 specialist agents, 80+ commands, hooks, and ECC harness for Claude Code, Codex, and OpenCode."
     },
     {
       "name": "tool-advisor",
@@ -539,7 +539,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Development & Workflow",
-      "description": "Developer personality portrait generator — analyzes AI conversation history to produce MBTI type (16 color themes), capability radar, developer rating, 3-dimension famous match, and a persona skill that lets any AI \"think like you\"."
+      "description": "Developer personality portrait generator \u2014 analyzes AI conversation history to produce MBTI type (16 color themes), capability radar, developer rating, 3-dimension famous match, and a persona skill that lets any AI \"think like you\"."
     },
     {
       "name": "writers-loop",
@@ -897,7 +897,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Tools & Integrations",
-      "description": "Decentralized e-commerce skills — deploy self-hosted stores, import products from Shopify/Amazon, configure custom domains and Telegram bots, set up Tor privacy, and manage your store via MCP."
+      "description": "Decentralized e-commerce skills \u2014 deploy self-hosted stores, import products from Shopify/Amazon, configure custom domains and Telegram bots, set up Tor privacy, and manage your store via MCP."
     },
     {
       "name": "morning-ai",
@@ -1027,7 +1027,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Tools & Integrations",
-      "description": "Russian text quality — ~1,040 rules for typography, info-style, editorial, UX writing, and business correspondence."
+      "description": "Russian text quality \u2014 ~1,040 rules for typography, info-style, editorial, UX writing, and business correspondence."
     },
     {
       "name": "rust-reverse-engineering",
@@ -1055,7 +1055,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Tools & Integrations",
-      "description": "Build websites from Markdown via MCP — 22 tools for creating pages, generating content, validating, running SEO audits, configuring settings, and deploying static sites to Cloudflare Pages."
+      "description": "Build websites from Markdown via MCP \u2014 22 tools for creating pages, generating content, validating, running SEO audits, configuring settings, and deploying static sites to Cloudflare Pages."
     },
     {
       "name": "n8n-mcp-synta-codex",
@@ -1113,7 +1113,7 @@
         "authentication": "ON_INSTALL"
       },
       "category": "Tools & Integrations",
-      "description": "Strip AI writing patterns from text output — removes filler phrases, hedging language, and generic constructs to produce cleaner written content. Install: `npm install -g unslop`."
+      "description": "Strip AI writing patterns from text output \u2014 removes filler phrases, hedging language, and generic constructs to produce cleaner written content. Install: `npm install -g unslop`."
     },
     {
       "name": "upwork-autopilot",
@@ -1143,6 +1143,156 @@
       "category": "Tools & Integrations",
       "description": "GitHub-ready Codex plugin bundle for Yandex Direct, Wordstat, Metrika, and Roistat.",
       "icon": "./plugins/nebelov/yandex-direct-for-all/assets/icon.png"
+    },
+    {
+      "name": "mturac-commit-narrator",
+      "displayName": "Commit Narrator",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/commit-narrator"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Generate semantic commit message from staged diff, including the why behind changes.",
+      "icon": "./plugins/mturac/commit-narrator/assets/icon.svg"
+    },
+    {
+      "name": "mturac-pr-storyteller",
+      "displayName": "PR Storyteller",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/pr-storyteller"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Generate PR title, body, and test plan from commits and diff vs base branch.",
+      "icon": "./plugins/mturac/pr-storyteller/assets/icon.svg"
+    },
+    {
+      "name": "mturac-test-gap",
+      "displayName": "Test Gap",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/test-gap"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Find lines in your diff lacking test coverage (Cobertura, lcov, or coverage.json).",
+      "icon": "./plugins/mturac/test-gap/assets/icon.svg"
+    },
+    {
+      "name": "mturac-deps-doctor",
+      "displayName": "Deps Doctor",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/deps-doctor"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Multi-ecosystem dependency audit covering npm, pip, cargo, and go in one report.",
+      "icon": "./plugins/mturac/deps-doctor/assets/icon.svg"
+    },
+    {
+      "name": "mturac-env-lint",
+      "displayName": "Env Lint",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/env-lint"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": ".env vs .env.example key parity \u2014 never prints values.",
+      "icon": "./plugins/mturac/env-lint/assets/icon.svg"
+    },
+    {
+      "name": "mturac-secret-guard",
+      "displayName": "Secret Guard",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/secret-guard"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Pre-commit secret scanner using pattern and entropy detection, redacted output.",
+      "icon": "./plugins/mturac/secret-guard/assets/icon.svg"
+    },
+    {
+      "name": "mturac-standup-gen",
+      "displayName": "Standup Generator",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/standup-gen"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Daily standup notes from git activity across one or many repositories.",
+      "icon": "./plugins/mturac/standup-gen/assets/icon.svg"
+    },
+    {
+      "name": "mturac-todo-harvest",
+      "displayName": "TODO Harvest",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/todo-harvest"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Scan for TODO/FIXME/HACK comments with git blame author and age.",
+      "icon": "./plugins/mturac/todo-harvest/assets/icon.svg"
+    },
+    {
+      "name": "mturac-flaky-detector",
+      "displayName": "Flaky Detector",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/flaky-detector"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Run a test command N times and report per-test flakiness percentage.",
+      "icon": "./plugins/mturac/flaky-detector/assets/icon.svg"
+    },
+    {
+      "name": "mturac-changelog-forge",
+      "displayName": "Changelog Forge",
+      "source": {
+        "source": "local",
+        "path": "./plugins/mturac/changelog-forge"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Development & Workflow",
+      "description": "Convert conventional commits into a CHANGELOG section + semver bump suggestion.",
+      "icon": "./plugins/mturac/changelog-forge/assets/icon.svg"
     }
   ]
-}
+}

README.md

@@ -158,6 +158,16 @@ Third-party plugins built by the community. [PRs welcome](#contributing)!
 - [Universal Design Principles](https://github.com/HDeibler/universal-design-principles) - Cross-agent UX and product-design marketplace with a root Codex collection plugin, five focused plugin bundles, and 137 Agent Skills for design review, accessibility, layout, interaction, cognition, and product polish.
 - [VibePortrait](https://github.com/dadwadw233/VibePortrait) - Developer personality portrait generator — analyzes AI conversation history to produce MBTI type (16 color themes), capability radar, developer rating, 3-dimension famous match, and a persona skill that lets any AI "think like you".
 - [Writer's Loop](https://github.com/xxsang/writers-loop) - Structured AI writing workflow for planning, critique, revision, translation, style distillation, and opt-in local preference learning.
+- [Commit Narrator](./plugins/mturac/commit-narrator) - Generate semantic commit message from staged diff, including the *why*.
+- [PR Storyteller](./plugins/mturac/pr-storyteller) - PR title + body + test plan from commits and diff vs base branch.
+- [Test Gap](./plugins/mturac/test-gap) - Find lines in your diff lacking test coverage (Cobertura, lcov, coverage.json).
+- [Deps Doctor](./plugins/mturac/deps-doctor) - Multi-ecosystem dependency audit (npm, pip, cargo, go) in one report.
+- [Env Lint](./plugins/mturac/env-lint) - `.env` vs `.env.example` key parity — never prints values.
+- [Secret Guard](./plugins/mturac/secret-guard) - Pre-commit secret scanner using pattern and entropy detection.
+- [Standup Generator](./plugins/mturac/standup-gen) - Daily standup notes from git activity across repos.
+- [TODO Harvest](./plugins/mturac/todo-harvest) - TODO/FIXME/HACK scan with `git blame` author + age.
+- [Flaky Detector](./plugins/mturac/flaky-detector) - Run a test command N times, report per-test flakiness %.
+- [Changelog Forge](./plugins/mturac/changelog-forge) - Conventional commits → CHANGELOG section + semver bump.
 ### Tools & Integrations
 
 - [Agent Message Queue](https://github.com/avivsinai/agent-message-queue) - File-based inter-agent messaging with co-op mode, cross-project federation, and orchestrator integrations.

plugins/mturac/changelog-forge/.codex-plugin/plugin.json

@@ -0,0 +1,37 @@
+{
+  "name": "changelog-forge",
+  "version": "0.1.0",
+  "description": "Conventional commits \u2192 CHANGELOG + semver bump.",
+  "author": {
+    "name": "Mehmet Turac",
+    "url": "https://github.com/mturac"
+  },
+  "homepage": "https://github.com/mturac/pluginpool-changelog-forge",
+  "repository": "https://github.com/mturac/pluginpool-changelog-forge",
+  "license": "MIT",
+  "keywords": [
+    "changelog",
+    "semver",
+    "codex-plugin"
+  ],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "Changelog Forge",
+    "shortDescription": "Conventional commits \u2192 CHANGELOG + semver bump.",
+    "longDescription": "Converts conventional commits into a CHANGELOG section with a semver bump suggestion.",
+    "developerName": "Mehmet Turac",
+    "category": "Productivity",
+    "capabilities": [
+      "Interactive",
+      "Write"
+    ],
+    "websiteURL": "https://github.com/mturac/pluginpool-changelog-forge",
+    "privacyPolicyURL": "https://github.com/mturac/pluginpool-changelog-forge/blob/main/LICENSE",
+    "termsOfServiceURL": "https://github.com/mturac/pluginpool-changelog-forge/blob/main/LICENSE",
+    "defaultPrompt": [
+      "Use Changelog Forge to conventional commits \u2192 changelog + semver bump."
+    ],
+    "brandColor": "#7c3aed",
+    "composerIcon": "./assets/icon.svg"
+  }
+}

plugins/mturac/changelog-forge/.codexignore

@@ -0,0 +1,6 @@
+# Files to exclude from Codex plugin packaging
+tests/
+examples/
+*.pyc
+__pycache__/
+.DS_Store

plugins/mturac/changelog-forge/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 pluginpool contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.