{
  "id": "workflow:plugin-marketplace-review",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-cli-mcp.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Plugin Marketplace Review",
    "workflowKind": "governance",
    "triggerType": "event-driven",
    "typicalCadence": "per-submission",
    "complexity": "single-team",
    "description": "Reviews third-party plugin submissions for marketplace listing —\nscanning for malicious code, verifying API compatibility, checking\nlicensing terms, testing sandboxed execution, and publishing approved\nplugins. Excludes plugin development.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "role:code-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "role:license-auditor",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "skill-area:tool-use",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "skill-area:webhook-verification",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "domain:platform-engineering",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "domain:security",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "responsibility:run-security-scans",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "responsibility:dependency-audit",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "org-unit:platform-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:plugin-marketplace-review",
      "to": "org-unit:application-security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}