Bump mercadopago to 63ff263c (v2 + PreToolUse hook gating) (#1949 )

Bumps the mercadopago plugin pin from 1de8d97e to 63ff263c (latest main). v2 replaces the mcp-launcher.sh keychain-read / npx -y mcp-remote wrapper with a plain type:"http" MCP entry pointing at https://mcp.mercadopago.com/mcp, and consolidates 13 skills into 4 orchestration skills. The pinned SHA also includes the May 19 fix that gates the PreToolUse hook on project relevance so it no longer runs on unrelated projects. Description updated to match the partner's v2 self-description. https://claude.ai/code/session_01KRC2Uv6UaFFdrt7sjn45yT Co-authored-by: Claude <noreply@anthropic.com>
Merge pull request #1935 from anthropics/fix/quote-claude-plugin-root-paths
2026-05-20 21:52:41 +00:00 · 2026-05-20 22:47:38 +01:00 · 2026-05-19 17:54:18 -07:00 · 2026-05-19 17:53:52 -07:00 · 2026-05-19 18:55:48 +01:00 · 2026-05-19 08:20:20 -05:00
3 changed files with 65 additions and 33 deletions
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -446,6 +446,38 @@
      },
      "homepage": "https://carta.com"
    },
+    {
+      "name": "carta-crm",
+      "description": "Manage the Carta CRM conversationally — search, add, update, and enrich investors, companies, contacts, deals, notes, and fundraisings via the Carta CRM MCP Server.",
+      "author": {
+        "name": "Carta Engineering"
+      },
+      "category": "productivity",
+      "source": {
+        "source": "git-subdir",
+        "url": "https://github.com/carta/plugins.git",
+        "path": "plugins/carta-crm",
+        "ref": "main",
+        "sha": "e72e8d59a3c49c1983f63f20a02e440de4e30a2f"
+      },
+      "homepage": "https://carta.com"
+    },
+    {
+      "name": "carta-investors",
+      "description": "Carta Investors plugin — skills for querying investor data, performance benchmarks, regulatory reporting, AGM deck generation, brand extraction, and more via the Carta MCP Server.",
+      "author": {
+        "name": "Carta Engineering"
+      },
+      "category": "productivity",
+      "source": {
+        "source": "git-subdir",
+        "url": "https://github.com/carta/plugins.git",
+        "path": "plugins/carta-investors",
+        "ref": "main",
+        "sha": "e72e8d59a3c49c1983f63f20a02e440de4e30a2f"
+      },
+      "homepage": "https://carta.com"
+    },
    {
      "name": "cds-mcp",
      "description": "AI-assisted development of SAP Cloud Application Programming Model (CAP) projects. Search CDS models and CAP documentation.",
@@ -1166,7 +1198,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/huggingface/skills.git",
-        "sha": "7c71cfb2b12920002c3177474c779feeec4e9ad1"
+        "sha": "d640d38d200d4586658d9925415c3812369734e8"
      },
      "homepage": "https://github.com/huggingface/skills.git"
    },
@@ -1211,7 +1243,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/intercom/claude-plugin-external.git",
-        "sha": "52653572c47700443eb61154c4e4334a355e755e"
+        "sha": "62773a7d4b8aac31545d6888fe6479be3bc53804"
      },
      "homepage": "https://github.com/intercom/claude-plugin-external"
    },
@@ -1327,7 +1359,7 @@
        "url": "https://github.com/Shopify/liquid-skills.git",
        "path": "plugins/liquid-lsp",
        "ref": "main",
-        "sha": "a00ca039d82114a7af1b4cbc3025b16c624a42fa"
+        "sha": "ae3e4cc3f454923e388bbd841fd931f0c7bf5be4"
      },
      "homepage": "https://github.com/Shopify/liquid-skills/tree/main/plugins/liquid-lsp"
    },
@@ -1343,7 +1375,7 @@
        "url": "https://github.com/Shopify/liquid-skills.git",
        "path": "plugins/liquid-skills",
        "ref": "main",
-        "sha": "bf7a7aa9f9809b0dcd80cb5f7fd2795a7208a7a3"
+        "sha": "ae3e4cc3f454923e388bbd841fd931f0c7bf5be4"
      },
      "homepage": "https://github.com/Shopify/liquid-skills/tree/main/plugins/liquid-skills"
    },
@@ -1359,7 +1391,7 @@
        "url": "https://github.com/pydantic/skills.git",
        "path": "plugins/logfire",
        "ref": "main",
-        "sha": "92bd097356e1a4947f815449fb3570a9a5cfc21b"
+        "sha": "ef575811123b85594e89d0adf2a04950ab3fd8ed"
      },
      "homepage": "https://github.com/pydantic/skills/tree/main/plugins/logfire"
    },
@@ -1451,7 +1483,7 @@
    },
    {
      "name": "mercadopago",
-      "description": "Mercado Pago full-product integration toolkit. Covers online checkout (Pro, Bricks, API), in-store (QR, Point), subscriptions, marketplace, wallet, money-out, security (3DS, PCI), reporting, SDKs, and specialized integrations. Hybrid architecture: 13 skills provide stable integration intelligence, MCP provides live API data.",
+      "description": "Mercado Pago full-product integration toolkit. One agent routes to four orchestration skills (mp-integrate wizard, mp-webhooks, mp-test-setup, mp-review) that pull every endpoint, payload, and snippet live from the official Mercado Pago MCP server. The MCP must always be connected — there is no offline mode.",
      "author": {
        "name": "Mercado Pago Developer Experience"
      },
@@ -1461,7 +1493,7 @@
        "url": "https://github.com/mercadopago/mercadopago-claude-marketplace.git",
        "path": "plugins/mercadopago",
        "ref": "main",
-        "sha": "1de8d97e1c875136e93bc8eea8494ebf982a08b8"
+        "sha": "63ff263c40e1eda642ae2038e87adaa5781f4939"
      },
      "homepage": "https://github.com/mercadopago/mercadopago-claude-marketplace/tree/main/plugins/mercadopago"
    },
@@ -1472,7 +1504,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/MicrosoftDocs/mcp.git",
-        "sha": "954c17e72d65b0ee1fc7009c10b8a57e6889d34a"
+        "sha": "caa3d670bf2814171dba4f7346ece5080964021e"
      },
      "homepage": "https://github.com/microsoftdocs/mcp"
    },
@@ -1499,7 +1531,7 @@
        "url": "https://github.com/miroapp/miro-ai.git",
        "path": "claude-plugins/miro",
        "ref": "main",
-        "sha": "00e619e63ca9a8fd788c2db9f294bc90773aac48"
+        "sha": "706b24b6564eaaea33e75ac66c83af9abf3b5a41"
      },
      "homepage": "https://miro.com"
    },
@@ -1510,7 +1542,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/mongodb/agent-skills.git",
-        "sha": "24529d9540b962d57f30e75d25071bebea5809ad"
+        "sha": "a2bc4ec7f97c9acd0f73eac0b4e2425115f33b62"
      },
      "homepage": "https://www.mongodb.com/docs/mcp-server/overview/"
    },
@@ -1523,7 +1555,7 @@
        "url": "https://github.com/neondatabase/agent-skills.git",
        "path": "plugins/neon-postgres",
        "ref": "main",
-        "sha": "1438d7db4560a649d62eba99e9d5008b77ac5758"
+        "sha": "b76e344eae92119f1aea3f73865c4ddbb1f4df1e"
      },
      "homepage": "https://github.com/neondatabase/agent-skills/tree/main/plugins/neon-postgres"
    },
@@ -1534,7 +1566,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/netlify/context-and-tools.git",
-        "sha": "a49ebc5965e0476edf958474d3feaeec754ffc6b"
+        "sha": "cffaf74f79128620b8200956222aeb819f5f8fd5"
      },
      "homepage": "https://github.com/netlify/context-and-tools"
    },
@@ -1576,7 +1608,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/Nimbleway/agent-skills.git",
-        "sha": "626930f102dc51ef3858a28f94318ceabfdea071"
+        "sha": "b3ab05d3c7c88857940c575e0f46752297b2249b"
      },
      "homepage": "https://docs.nimbleway.com/integrations/agent-skills/plugin-installation"
    },
@@ -1603,7 +1635,7 @@
        "url": "https://github.com/oracle-samples/oracle-aidp-samples.git",
        "path": "ai/claude-code-plugins/oracle-ai-data-platform-workbench-spark-connectors",
        "ref": "main",
-        "sha": "f436f3a40dfaedbef6a076ad3992b697ba5dcef6"
+        "sha": "f7ea9cae6fce69a4e3798dfc1d5216ac1d0dd7e8"
      },
      "homepage": "https://docs.oracle.com/en/cloud/paas/ai-data-platform/index.html"
    },
@@ -1619,7 +1651,7 @@
        "url": "https://github.com/growthxai/output.git",
        "path": "coding_assistants/claude/plugins/outputai",
        "ref": "main",
-        "sha": "756d32d1d4fad028850ae5a28921432b825060f2"
+        "sha": "fb7438aacee1406ac409ad9ce252b891bd5c9187"
      },
      "homepage": "https://output.ai"
    },
@@ -1667,7 +1699,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/gopigment/ai-plugins.git",
-        "sha": "5bdf088652ef9d2065cf25e2e42df9b19a1486e1"
+        "sha": "41bd78fb01e4fd805365de6d9e28117d0c32edef"
      },
      "homepage": "https://www.pigment.com"
    },
@@ -1678,7 +1710,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/pinecone-io/pinecone-claude-code-plugin.git",
-        "sha": "7dc3cfe091335f5053ec9e6eb05403e674a73c5e"
+        "sha": "53f52059f9ff9bb064f3dc9f299934e8773a642f"
      },
      "homepage": "https://github.com/pinecone-io/pinecone-claude-code-plugin"
    },
@@ -1689,7 +1721,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/planetscale/claude-plugin.git",
-        "sha": "f1066cac5bb956bbbb05918f5b07fe0e873d44ea"
+        "sha": "849552445a90b17f2b17267593d0a10d41d4b316"
      },
      "homepage": "https://planetscale.com/"
    },
@@ -1729,7 +1761,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/PostHog/ai-plugin.git",
-        "sha": "ff08c376af53d7c5ba2e909b8065f786c7c3b506"
+        "sha": "ecc5244bb70e30532da9559b93740527e08761ca"
      },
      "homepage": "https://posthog.com/docs/model-context-protocol"
    },
@@ -1739,7 +1771,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/gitroomhq/postiz-agent.git",
-        "sha": "37d627244c53a4b3a7ca94c52cc2db13aaaf468e"
+        "sha": "238aede6c72672b3201ae0ee533ec0cd53eb51d1"
      },
      "homepage": "https://postiz.com/agent"
    },
@@ -1750,7 +1782,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/Postman-Devrel/postman-claude-code-plugin.git",
-        "sha": "416e40da03a237df7bf03f4362cf6fc7b989b567"
+        "sha": "812678b3d1d1956815252d8f25e3ccc10d1bca8f"
      },
      "homepage": "https://learning.postman.com/docs/developer/postman-mcp-server/"
    },
@@ -1784,7 +1816,7 @@
        "url": "https://github.com/pydantic/skills.git",
        "path": "plugins/ai",
        "ref": "main",
-        "sha": "92bd097356e1a4947f815449fb3570a9a5cfc21b"
+        "sha": "ef575811123b85594e89d0adf2a04950ab3fd8ed"
      },
      "homepage": "https://github.com/pydantic/skills/tree/main/plugins/ai"
    },
@@ -1822,7 +1854,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/qdrant/skills.git",
-        "sha": "9f935f8bbb13ec62a07f0da0d42e89722029fb25"
+        "sha": "f108892268ea7518b528889f4604d5689f731747"
      },
      "homepage": "https://skills.qdrant.tech"
    },
@@ -1833,7 +1865,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/qodo-ai/qodo-skills.git",
-        "sha": "8fb6b5502dbe7876bbd672a27d6efa299f5820d7"
+        "sha": "b1eb0389480ee6de8df874f40a230ed2625ef0d3"
      },
      "homepage": "https://github.com/qodo-ai/qodo-skills.git"
    },
@@ -1847,7 +1879,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/TheQtCompanyRnD/agent-skills.git",
-        "sha": "62a98e2339e6eefcff108cfc3fe9db8a7301856c"
+        "sha": "24e77fd4ce529adceb8d4c259eb93196a4ef3d9f"
      },
      "homepage": "https://www.qt.io/"
    },
@@ -1861,7 +1893,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/quarkusio/quarkus-agent-mcp.git",
-        "sha": "c17280236a8080aab2bc10ff8e334922a2619a5f"
+        "sha": "e0f207d70f3e8e11b54cf101c013aade7ebef1eb"
      },
      "homepage": "https://quarkus.io"
    },
@@ -1874,7 +1906,7 @@
        "url": "https://github.com/railwayapp/railway-skills.git",
        "path": "plugins/railway",
        "ref": "main",
-        "sha": "eaa89d8f594412b0b837b6531241e7d166e12202"
+        "sha": "380a2abbb0f9474e9d856add387760f61c886a4e"
      },
      "homepage": "https://docs.railway.com/ai/claude-code-plugin"
    },
@@ -2254,7 +2286,7 @@
        "url": "https://github.com/Snowflake-Labs/snowflake-ai-kit.git",
        "path": "plugins/cortex-code",
        "ref": "main",
-        "sha": "b16692d548e9c785be640c06f3f3220ddf46c065"
+        "sha": "c3f720020a3b6c8927f97362c2e5884e959acd53"
      },
      "homepage": "https://docs.snowflake.com/en/user-guide/cortex-code"
    },
--- a/plugins/hookify/hooks/hooks.json
+++ b/plugins/hookify/hooks/hooks.json
@@ -6,7 +6,7 @@
        "hooks": [
          {
            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/pretooluse.py",
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/pretooluse.py\"",
            "timeout": 10
          }
        ]
@@ -17,7 +17,7 @@
        "hooks": [
          {
            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/posttooluse.py",
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/posttooluse.py\"",
            "timeout": 10
          }
        ]
@@ -28,7 +28,7 @@
        "hooks": [
          {
            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/stop.py",
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/stop.py\"",
            "timeout": 10
          }
        ]
@@ -39,7 +39,7 @@
        "hooks": [
          {
            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/userpromptsubmit.py",
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/userpromptsubmit.py\"",
            "timeout": 10
          }
        ]
--- a/plugins/security-guidance/hooks/hooks.json
+++ b/plugins/security-guidance/hooks/hooks.json
@@ -6,7 +6,7 @@
        "hooks": [
          {
            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py\""
          }
        ],
        "matcher": "Edit|Write|MultiEdit"
Author	SHA1	Message	Date
claude[bot]	d68033bd1a	Bump mercadopago to 63ff263c (v2 + PreToolUse hook gating) (#1949 ) Bumps the mercadopago plugin pin from 1de8d97e to 63ff263c (latest main). v2 replaces the mcp-launcher.sh keychain-read / npx -y mcp-remote wrapper with a plain type:"http" MCP entry pointing at https://mcp.mercadopago.com/mcp, and consolidates 13 skills into 4 orchestration skills. The pinned SHA also includes the May 19 fix that gates the PreToolUse hook on project relevance so it no longer runs on unrelated projects. Description updated to match the partner's v2 self-description. https://claude.ai/code/session_01KRC2Uv6UaFFdrt7sjn45yT Co-authored-by: Claude <noreply@anthropic.com>	2026-05-20 22:47:38 +01:00
Mohamed Hegazy	bef2b9b246	Merge pull request #1935 from anthropics/fix/quote-claude-plugin-root-paths fix: quote ${CLAUDE_PLUGIN_ROOT} in hookify and security-guidance hook commands	2026-05-19 17:54:18 -07:00
Mohamed Hegazy	b58bdbf551	fix: quote \${CLAUDE_PLUGIN_ROOT} in hookify and security-guidance hook commands Paths containing spaces (common on Windows, e.g. C:\Users\Some User\...) cause shell word-splitting when CLAUDE_PLUGIN_ROOT is unquoted, resulting in hooks erroring with "No such file or directory" on every tool call. Wraps the path in double quotes for all five affected hook commands. Fixes the pattern reported in issue #57946. Closes the fix surfaced in PR #1921. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-19 17:53:52 -07:00
Bryan Thompson	ae21a93679	Bump snowflake-cortex-code to v3.1.0 (#1932 )	2026-05-19 18:55:48 +01:00
Tobin South	6a05dc286d	Add 24 first-party plugins from major-brand orgs (#1919 ) Promote first-party plugins from recognizable companies that publish deep, actively-maintained Claude Code plugins from their official GitHub orgs. All entries are SHA-pinned to current default-branch HEAD. Development: - apollo-skills (Apollo GraphQL): 14 GraphQL skills + Apollo MCP server - appwrite (Appwrite): 11 SDK skills + 2 commands + dual MCP - forge-skills (Atlassian): Forge scaffold/review/debug + 2 hosted MCPs - buildkite (Buildkite): 6 CI/CD skills + hosted MCP - circle-skills (Circle): 16 USDC/stablecoin dev skills + hosted MCP - codspeed (CodSpeed): perf profiling skills + remote MCP - dominodatalab (Domino Data Lab): 22 skills + 3 agents + bundled MCP - lumen (Ory): local semantic code-search MCP + auto-index hooks - mcp-apps (Model Context Protocol): MCP Apps SDK skills - resend (Resend): email API/CLI/React Email skills + bundled MCP - teamcity-cli (JetBrains): TeamCity CI/CD CLI agent skill - togetherai-skills (Together AI): 12 inference/training/GPU skills Database: - clickhouse-best-practices (ClickHouse): 28 schema/query/ingestion rules - datahub-skills (DataHub): 12 catalog/lineage/quality skills + 4 agents - duckdb-skills (DuckDB): 9 file-query/docs/extension skills - redis-development (Redis): data structures, query engine, vector search Security: - duende-skills (Duende): 22 OAuth/OIDC/IdentityServer skills + 2 agents - workos (WorkOS): AuthKit/SSO/Directory Sync/RBAC router skill Monitoring: - rootly (Rootly): 18 incident-management skills + 3 agents + hosted MCP - sentry-cli (Sentry): Sentry CLI agent skill Design: - hyperframes (HeyGen): 15 HTML-to-video framework skills - runway-api (Runway): 17 video/image/audio generation skills Productivity / Location: - hunter (Hunter.io): 9 prospecting skills + remote MCP - mapbox (Mapbox): 19 geospatial skills + 3 remote MCP servers Source structure: 19 repo-root plugins (url source), 5 subdirectory plugins (git-subdir source). All cross-referenced against existing entries to avoid duplicates. Two candidates excluded pending upstream fixes: - launchdarkly: plugin.json has unrecognized 'logo' key (schema error) - medusa-dev: skill has malformed YAML frontmatter	2026-05-19 08:20:20 -05:00
Tobin South	d42e163958	Bump 25 plugin SHA pins to upstream HEAD (huggingface–railway) (#1914 ) * Bump 26 plugin SHA pins to upstream HEAD * Revert mercadopago SHA bump The new upstream SHA adds a PreToolUse hook that fires on every Bash/Edit/Write/Read in all sessions and globally blocks reading .env files, regardless of project relevance. The policy scan flags this as out of scope for what the plugin description advertises. Leave at the prior pin until the upstream gates the hook on project relevance.	2026-05-19 08:19:35 -05:00
Bryan Thompson	4bf08583c3	Add carta-crm and carta-investors plugins (#1877 )	2026-05-19 05:04:40 +01:00