receipts: show a sample receipt in the README

You can't tell what this produces from a description, and the obvious
way to show it — screenshot a real run — would put someone's actual repo
names in a public README.

So the sample is generated: assets/make-sample.mjs builds a throwaway
HOME of invented repos, invented files and invented sessions, and the
real miner runs against that. The picture is what the tool genuinely
produces, from data that never existed. The generator ships next to the
asset so the next person can regenerate rather than edit a screenshot.

Also widen validate's path filter. It's a required check, so a PR that
only touches a plugin's README or assets matched no pattern, never
reported, and could not be merged — the same trap the workflow-file and
policy-file entries above already work around. Adding the plugin doc
paths lets this PR (and the next one) clear the gate on its own.

No-Verification-Needed: docs asset, dev-only generator, and CI trigger paths — no plugin runtime surface

.claude-plugin/marketplace.json

@@ -173,7 +173,7 @@
         "url": "https://github.com/amd/skills.git",
         "path": "skills",
         "ref": "main",
-        "sha": "228980933abd97a8aa4a2656c8ea3ae9e8b590c7"
+        "sha": "7ef8dd99ffd6d82208f1a0ae211a782ec2edee82"
       },
       "strict": false,
       "skills": [
@@ -207,7 +207,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/apolloio/apollo-mcp-plugin.git",
-        "sha": "2adde980e45f421b7e9383d92870455627936bce"
+        "sha": "1fa5c26b6c99283883db5858804234fbe1c10818"
       },
       "homepage": "https://www.apollo.io/"
     },
@@ -253,7 +253,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/astronomer/agents.git",
-        "sha": "87d780cd5dc85a25c7ceb1f1720031fa4e48f781"
+        "sha": "5432198caa8ef9ec33218124bcd44016db2d31bf"
       },
       "homepage": "https://github.com/astronomer/agents"
     },
@@ -306,7 +306,7 @@
         "url": "https://github.com/auth0/agent-skills.git",
         "path": "plugins/auth0",
         "ref": "main",
-        "sha": "d1b19854e60c6dfde048df91e4d97e536dba2491"
+        "sha": "de929462cae879bab1c880fc4b9ad3645bf8588b"
       },
       "homepage": "https://auth0.com"
     },
@@ -367,7 +367,7 @@
         "url": "https://github.com/aws/agent-toolkit-for-aws.git",
         "path": "plugins/aws-core",
         "ref": "main",
-        "sha": "493b45323dd3163fb561792b9e091de3d4966709"
+        "sha": "eb96852087e2b2757b67d358d6d38c17c5c28205"
       },
       "homepage": "https://github.com/aws/agent-toolkit-for-aws"
     },
@@ -565,7 +565,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/buildkite/skills.git",
-        "sha": "e854e111766e9494d742fe6836d5b6ecefd10b68"
+        "sha": "369d93ebb0d6f9112615b7b8693f98f6fc241e5e"
       },
       "homepage": "https://buildkite.com"
     },
@@ -629,7 +629,7 @@
         "url": "https://github.com/carta/plugins.git",
         "path": "plugins/carta-investors",
         "ref": "main",
-        "sha": "80da56af79af8779f0dd1a08b8eaaf372fa48c9c"
+        "sha": "a007723c7149acab9f9357eaa74b98635bb63934"
       },
       "homepage": "https://carta.com"
     },
@@ -656,7 +656,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/ChromeDevTools/chrome-devtools-mcp.git",
-        "sha": "b4546ef86b86e8733f88f075169d2124f436dd1e"
+        "sha": "dcbaf495183a34d9bb0e3d9e8f3e566de6b425f8"
       },
       "homepage": "https://github.com/ChromeDevTools/chrome-devtools-mcp"
     },
@@ -885,7 +885,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/coderabbitai/skills.git",
-        "sha": "c61c4908d36dda6fb08a343cc8b19c59fbb47de3"
+        "sha": "2fd091d9582deccf19929e21f934921d0e8f686e"
       },
       "homepage": "https://github.com/coderabbitai/skills"
     },
@@ -924,7 +924,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/spotify/confidence-ai-plugins.git",
-        "sha": "a6e3760e5c274dd273e6e4677235422f98f01f4a"
+        "sha": "c96d060b79e8b8068dab3ba4489be2343b7f2caf"
       },
       "homepage": "https://confidence.spotify.com"
     },
@@ -1038,7 +1038,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/astronomer/agents.git",
-        "sha": "87d780cd5dc85a25c7ceb1f1720031fa4e48f781"
+        "sha": "5432198caa8ef9ec33218124bcd44016db2d31bf"
       },
       "homepage": "https://github.com/astronomer/agents"
     },
@@ -1062,7 +1062,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/astronomer/agents.git",
-        "sha": "87d780cd5dc85a25c7ceb1f1720031fa4e48f781"
+        "sha": "5432198caa8ef9ec33218124bcd44016db2d31bf"
       },
       "homepage": "https://github.com/astronomer/agents"
     },
@@ -1175,7 +1175,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/confident-ai/deepeval.git",
-        "sha": "c6293c1201515293541d515a2da1b4de387e2c01"
+        "sha": "ae2cb499653628ef7b1f44337715456b680aee5f"
       },
       "homepage": "https://github.com/confident-ai/deepeval"
     },
@@ -1492,7 +1492,7 @@
         "url": "https://github.com/grafana/ai-marketplace.git",
         "path": "plugins/grafana-cloud-mcp",
         "ref": "main",
-        "sha": "12be5634a492f73c189d466c5449d09b853ad7a4"
+        "sha": "a5c72f2d74c640e9675eb0249526447968535015"
       },
       "homepage": "https://grafana.com"
     },
@@ -1596,7 +1596,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/heygen-com/hyperframes.git",
-        "sha": "696cbdbbd0e5c83faf72c767126d4a153110f130"
+        "sha": "ff3627d5d97c32b88d9faf79ad8d6126ab673074"
       },
       "homepage": "https://hyperframes.heygen.com"
     },
@@ -1667,7 +1667,7 @@
         "source": "github",
         "repo": "jfrog/claude-plugin",
         "commit": "259c8e718266c16e99b4f30ae9b1ed0f9f00d98d",
-        "sha": "11177f6698405976ee0eecbbfb4857ed9657f19f"
+        "sha": "427d2e68848b2d04df586bd6be4904a5934828fb"
       },
       "homepage": "https://jfrog.com"
     },
@@ -1856,7 +1856,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/gemini-cli-extensions/looker.git",
-        "sha": "8ca746f8d6b0079d1f872c96bd3e0530bf4571d3"
+        "sha": "e05aac7d0287e337ff13cfa3183f39675d67dd97"
       },
       "homepage": "https://github.com/gemini-cli-extensions/looker"
     },
@@ -2069,20 +2069,6 @@
       },
       "homepage": "https://miro.com"
     },
-    {
-      "name": "mlflow",
-      "description": "Skills for tracing, evaluating, and improving AI agents with MLflow. Supports the full agent improvement loop: instrument → trace → evaluate → iterate → validate.",
-      "author": {
-        "name": "MLflow Team"
-      },
-      "category": "monitoring",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/mlflow/skills.git",
-        "sha": "c33bb3d303a2c6113bbaed6dbfe756e88e80f1df"
-      },
-      "homepage": "https://mlflow.org/"
-    },
     {
       "name": "monday-crm",
       "description": "Run your monday CRM in plain language. Build a pipeline from scratch, start the day with a ranked deal briefing, spin up a forecast dashboard, audit board health, clean up messy data in bulk, and turn meeting notes into deal updates. Every skill writes back into monday as a real update, doc, or dashboard. Built on the official monday MCP connector.",
@@ -2180,7 +2166,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/nvsecurity/nightvision-skills.git",
-        "sha": "928d334e24354161a20f91de39ca60029338ba47"
+        "sha": "97c72cbcddf51ab2d8387b61c68d5d999fec645e"
       },
       "homepage": "https://github.com/nvsecurity/nightvision-skills"
     },
@@ -2501,7 +2487,7 @@
         "url": "https://github.com/pydantic/skills.git",
         "path": "plugins/ai",
         "ref": "main",
-        "sha": "97f67e13e353a9370b208c7b259dbe7c3768a80b"
+        "sha": "ec86ff6b8e978b7461a4cb195241cf9fa4fe5e9c"
       },
       "homepage": "https://github.com/pydantic/skills/tree/main/plugins/ai"
     },
@@ -2591,7 +2577,7 @@
         "url": "https://github.com/railwayapp/railway-skills.git",
         "path": "plugins/railway",
         "ref": "main",
-        "sha": "191601b4954527a87f4f004eaa355c8f30a855bf"
+        "sha": "2405547f2044071c9d43bf6782edeb5d93e5bb4e"
       },
       "homepage": "https://docs.railway.com/ai/claude-code-plugin"
     },
@@ -2790,7 +2776,7 @@
         "url": "https://github.com/awslabs/agent-plugins.git",
         "path": "plugins/sagemaker-ai",
         "ref": "main",
-        "sha": "153b28e3c10de3661b8744b80d72c3a96fcdb0ab"
+        "sha": "c65ee436b0db77bb75d380aef6fbdc9b114edf2a"
       },
       "homepage": "https://github.com/awslabs/agent-plugins"
     },
@@ -2838,7 +2824,7 @@
         "url": "https://github.com/SAP/open-ux-tools.git",
         "path": "packages/fiori-mcp-server",
         "ref": "main",
-        "sha": "98cd40f91ba943df42382e5216af9f6f17a1c215"
+        "sha": "c288dadb279a9bb928f1e5246aac7a62efee1f6f"
       },
       "homepage": "https://github.com/SAP/open-ux-tools/tree/main/packages/fiori-mcp-server"
     },
@@ -2870,7 +2856,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/SAP/mdk-mcp-server.git",
-        "sha": "1a42cfc38a2f12cb2be2a98c6604074446b1639e"
+        "sha": "006c41c8c0962c1cf83e0a6416598595b8833ae0"
       },
       "homepage": "https://help.sap.com/docs/MDK"
     },
@@ -2910,7 +2896,7 @@
         "source": "git-subdir",
         "url": "https://github.com/semgrep/mcp-marketplace.git",
         "path": "plugin",
-        "sha": "7ae38e4bec51877cec71fcacc5857d746fb8b468"
+        "sha": "63fac121296f3f102651de6beb7c15649c8b11d3"
       },
       "homepage": "https://github.com/semgrep/mcp-marketplace.git"
     },
@@ -3087,26 +3073,10 @@
       "source": {
         "source": "url",
         "url": "https://github.com/spotify/ads-claude-plugin.git",
-        "sha": "9407475a5cd2a3986c48a58020fd47e23f9735e5"
+        "sha": "aedf7ed87312891ef2e357c02b9c22fcca8907b4"
       },
       "homepage": "https://github.com/spotify/ads-claude-plugin"
     },
-    {
-      "name": "stackhawk-api",
-      "description": "Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result presentation.",
-      "author": {
-        "name": "StackHawk"
-      },
-      "category": "security",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/stackhawk/agent-skills.git",
-        "path": "plugins/api",
-        "ref": "main",
-        "sha": "248e3fedba8ff80fadfd17f72a0454aa02b66a0b"
-      },
-      "homepage": "https://docs.stackhawk.com/ai-security/"
-    },
     {
       "name": "stripe",
       "description": "Stripe development plugin for Claude",
@@ -3116,7 +3086,7 @@
         "url": "https://github.com/stripe/ai.git",
         "path": "providers/claude/plugin",
         "ref": "main",
-        "sha": "a3267712f2268975e4ecc5912634d900ae4cb8e6"
+        "sha": "c29cd23cfd27830bf10961d58646a9fd127fa6df"
       },
       "homepage": "https://github.com/stripe/ai/tree/main/providers/claude/plugin"
     },
@@ -3291,7 +3261,7 @@
         "url": "https://github.com/UI5/plugins-coding-agents.git",
         "path": "plugins/ui5",
         "ref": "main",
-        "sha": "6b2d7f95a739857082fa9cb50bfd5ce8b1163fdc"
+        "sha": "c61e0b7fc7e38168f1df4f705f54c57e59d44c98"
       },
       "homepage": "https://github.com/UI5/plugins-coding-agents"
     },
@@ -3309,7 +3279,7 @@
         "url": "https://github.com/UI5/plugins-coding-agents.git",
         "path": "plugins/ui5-modernization",
         "ref": "main",
-        "sha": "6b2d7f95a739857082fa9cb50bfd5ce8b1163fdc"
+        "sha": "d1e3a43fa80ef160cb42689b88d665e25a5a81a1"
       },
       "homepage": "https://github.com/UI5/plugins-coding-agents"
     },
@@ -3327,7 +3297,7 @@
         "url": "https://github.com/UI5/plugins-coding-agents.git",
         "path": "plugins/ui5-typescript-conversion",
         "ref": "main",
-        "sha": "6b2d7f95a739857082fa9cb50bfd5ce8b1163fdc"
+        "sha": "d1e3a43fa80ef160cb42689b88d665e25a5a81a1"
       },
       "homepage": "https://github.com/UI5/plugins-coding-agents"
     },
@@ -3449,7 +3419,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/wix/skills.git",
-        "sha": "bef043f07972401e14fc4b129cf3895417f09352"
+        "sha": "5d7b1e90215fc5be8b62980f185f235e4d3bfb39"
       },
       "homepage": "https://dev.wix.com/docs/wix-cli/guides/development/about-wix-skills"
     },
@@ -3556,7 +3526,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/zscaler/zscaler-mcp-server.git",
-        "sha": "47fe874551023bf8d138c24612aa4ea0f16aaa56"
+        "sha": "23912913f8588c650b104d3bd30c0c755d6962cd"
       },
       "homepage": "https://github.com/zscaler/zscaler-mcp-server"
     },
@@ -3570,7 +3540,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/langfuse/skills.git",
-        "sha": "abe69fac6b0e0df94605dc5ae162da4726d0fb78"
+        "sha": "b6253b2c659c93a4033bb9a6e7c04d7e2ebc0de6"
       },
       "homepage": "https://langfuse.com"
     },