{
  "listing": {
    "skills": [
      {
        "path": "skills/sonatype-guide/SKILL.md",
        "name": "sonatype-guide",
        "description": "MUST use before installing, adding, or upgrading any dependency. Trigger when: running pip install, npm install, cargo add, go get, or any package manager command; adding a package to requirements.txt, package.json, pyproject.toml, Cargo.toml, go.mod, pom.xml, build.gradle, or Gemfile; choosing which library to use for a task; upgrading or changing dependency versions; or auditing existing dependencies. Uses the Sonatype Guide MCP server to check vulnerabilities, Developer Trust Scores, license risks, malicious package detection, and policy compliance. Do not install or recommend a dependency without checking it here first.",
        "files": {
          "skills/sonatype-guide/SKILL.md": "941b3481e431086ce50c376870e033a35039def54d6fa4b0754600b304a46ece",
          "skills/sonatype-guide/references/purl-ecosystems.md": "47df4896e848116c0a336a2835b68099539539fdf785f8efc517d78813c621d7"
        }
      }
    ],
    "hooks": [],
    "executions": []
  }
}