From b219242f858d30df8482c8e740e475297aaa7741 Mon Sep 17 00:00:00 2001
From: saintl1022 <saintl1022@users.noreply.github.com>
Date: Thu, 27 Aug 2026 16:32:14 +0800
Subject: [PATCH] Add CallLint to the Copilot plugins marketplace

CallLint is a preflight risk linter for MCP servers and agent tools. It
reports SAFE / REVIEW / BLOCK / UNKNOWN with evidence for every finding,
and never executes the server it judges.

The entry mirrors the existing `workiq` shape field for field and points
at plugins/calllint in calllint/calllint, which carries the plugin
manifest and .mcp.json. Append-only: one entry, 24 lines, no existing
entry altered and the .claude-plugin/marketplace.json symlink untouched.
---
 .github/plugin/marketplace.json | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/.github/plugin/marketplace.json b/.github/plugin/marketplace.json
index 30364bd..101fd81 100644
--- a/.github/plugin/marketplace.json
+++ b/.github/plugin/marketplace.json
@@ -468,6 +468,30 @@
         "flowagent"
       ],
       "license": "MIT"
+    },
+    {
+      "name": "calllint",
+      "description": "Preflight risk linting for MCP & agent tools. Before you add or edit an agent-tool config, CallLint recommends scanning the blast radius — SAFE / REVIEW / BLOCK / UNKNOWN with evidence. Advisory and non-blocking; never executes the server it judges.",
+      "version": "0.1.0",
+      "author": {
+        "name": "saintL",
+        "url": "https://calllint.com"
+      },
+      "homepage": "https://calllint.com",
+      "keywords": [
+        "mcp",
+        "security",
+        "audit",
+        "preflight",
+        "agent-tools"
+      ],
+      "license": "Apache-2.0",
+      "repository": "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/calllint/calllint",
+      "source": {
+        "source": "github",
+        "repo": "calllint/calllint",
+        "path": "plugins/calllint"
+      }
     }
   ]
 }