Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/developer-overheid-nl/skills-marketplaceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/developer-overheid-nl/skills-marketplace/marketplace)<a href="https://agentmods.dev/plugins/developer-overheid-nl/skills-marketplace/marketplace"><img src="https://agentmods.dev/badge/plugins/developer-overheid-nl/skills-marketplace/marketplace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/developer-overheid-nl/skills-marketplace/marketplace"><img src="https://agentmods.dev/badge/plugins/developer-overheid-nl/skills-marketplace/marketplace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
overheid-plugins marketplace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
The source is not reproduced here
Licensed EUPL-1.2
The repository is licensed EUPL-1.2, which this catalogue does not treat as permission to reproduce the file. Read it at the source.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +22 lines a092ba510081
- 11d ago Changed 950f8607784b
- 12d ago Changed 431cc49ada86
- 16d ago Changed b67a5b5a5b5b
- 17d ago Changed 56447ed92be0
- 18d ago Changed · +43 lines b273d14e3e76
- 22d ago Changed 7fa70e334cb7
- 25d ago Changed feb187981ac2
- 27d ago Changed f9993147f400
- 1mo ago First seen · 165 lines scan A a445c859af7c
overheid-plugins marketplace is a plugin published in the GitHub repository developer-overheid-nl/skills-marketplace (11 stars, last pushed 4d ago), licensed EUPL-1.2. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
sigistry marketplace
Discover plugins that supercharge your Claude Code workflow with advanced security, architecture, and performance insights.
records
Validate FHIR R4 resources, diagnose Implementation Guide projects, explain conformance issues, and generate reviewed CI quality gates.
a11y-i18n-remediator
Goes past detecting accessibility and localization issues to fixing them: cross-element ARIA and keyboard-focus remediation, color-contrast rewrites, hardcoded-string extraction, ICU MessageFormat correctness, and RTL readiness.
api-contract-keeper
Keeps your API and its spec in sync: detects and fixes OpenAPI/GraphQL spec-vs-code drift, hardens endpoints with request validation, RFC 9457 error envelopes and idempotency, guards against breaking changes, and audits job-queue reliability.
mcp-server-smith
Scaffold, audit, and harden Model Context Protocol servers for the MCP 2026-07-28 spec: stateless Streamable HTTP core, OAuth 2.1 / OIDC authorization, versioned extensions, well-designed tools, and a security review that catches confused-deputy, token-passthrough, and prompt-injection risks.
release-conductor
Owns everything around the diff: craft Conventional Commits and PR descriptions, recommend the right semver bump by reasoning about behavioral breaking changes, assemble changelogs from messy history, and guide merge-conflict resolution, rebase planning, and git-history archaeology.