Sync from mcp-auth0-oidc@322bf2d

Author: vibeprospecting-distributer[bot]

.codex-plugin/plugin.json

@@ -39,6 +39,7 @@
       "Research the engineering leaders at Palo Alto Networks.",
       "Build a lead list of companies using Salesforce."
     ],
-    "brandColor": "#1769FF"
+    "brandColor": "#1769FF",
+    "composerIcon": "./assets/icon.png"
   }
 }

.codexignore

@@ -0,0 +1 @@
+.claude-plugin/

.github/workflows/hol-plugin-scanner.yml

@@ -0,0 +1,33 @@
+---
+name: HOL Plugin Scanner
+
+# yamllint disable-line rule:truthy
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  security-events: write
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        # yamllint disable-line rule:line-length
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+
+      - name: Scan plugin
+        # yamllint disable-line rule:line-length
+        uses: hashgraph-online/ai-plugin-scanner-action@b402d3b3aaa8f59df8e8aa427dc97694a0af2819  # v1.2.528
+        with:
+          plugin_dir: "."
+          mode: scan
+          min_score: 80
+          fail_on_severity: high
+          format: sarif
+          upload_sarif: true

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Explorium
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

SECURITY.md

@@ -0,0 +1,18 @@
+# Security Policy
+
+## Reporting a vulnerability
+
+Please report suspected vulnerabilities privately through this repository's
+[GitHub security advisory form](https://github.com/explorium-ai/vibeprospecting-plugin/security/advisories/new).
+
+Include the affected component or file, reproduction steps, the potential
+impact, and any suggested mitigation. Do not disclose the vulnerability in a
+public issue or discussion before Explorium has investigated it.
+
+We will acknowledge the report as soon as practical, investigate it, and keep
+you informed about remediation and coordinated disclosure.
+
+## Supported versions
+
+Security fixes are applied to the latest version published from the `main`
+branch. Please reproduce reports against the latest version when possible.