zapier — 4 skills

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-20

Run UTC: 2026-10-20T00:19:19Z
Reviewed: 2026-10-20
Published: 2026-10-20
Updated: 2026-10-20

Observations · Limitations · Evidence

Works with:

Works with Claude Code

Works with Codex

Works with Gemini CLI

Works with Grok Build

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 4 skill declarations. Ran 19 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-20T00:19:19Z, tree 782a361e4a5a772d59db498a2a39f187f44157899a58ed3d13769ecf1073ca8b.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: zapier — 4 skills
slug: source-skills-c3b2fe8ef0ae87752cca76e0
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 4 skill declarations. Ran 19 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): zapier-demo; zapier-explore; zapier-onboard; zapier-status"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/zapier/zapier-mcp.git
documentation url: https://github.com/zapier/zapier-mcp.git
commit: 5360f152b96735712e5f925ad728732cb86888df
tree sha256: 782a361e4a5a772d59db498a2a39f187f44157899a58ed3d13769ecf1073ca8b
file sha256: {"plugins/zapier/.claude-plugin/plugin.json":"c7bb77ea2f7b1c677f31bd5a6821977e3dcbd00f7fa86025653622b26f3480a7","plugins/zapier/.codex-plugin/plugin.json":"cdd3dc3d7122f9b5c2f266c99b4996cf641774e663bd90ad6fce69598492c868","plugins/zapier/.cursor-plugin/plugin.json":"f17e17133f005ffdbcbe08012eaaa0008cef058abd8ad064835a74d995969386","plugins/zapier/.github/plugin/plugin.json":"c869787f3e4bfb91aaab38485de9162cc8087beadd16332f24ee97e397b632e1","plugins/zapier/.mcp.json":"8b8c86a59594a732600b39cd14589c416159086c496ac81341ebbc170e8ad587","plugins/zapier/README.md":"8947b4a7eed7232f953279830fc948f7d8dc30d9997c35de4a03da2ba2c9a236","plugins/zapier/agents/zapier-mcp.agent.md":"bffb02a65dfe93ec12ab91ae6fd5f427f6a797a8d1eeb1f066b546e3ba405cda","plugins/zapier/assets/icon.svg":"27609bad28e21ed329448a3d95c6d2a2e185ec35ba9f06c00e4f5cc34724109c","plugins/zapier/assets/logo.svg":"27609bad28e21ed329448a3d95c6d2a2e185ec35ba9f06c00e4f5cc34724109c","plugins/zapier/rules/zapier-lifecycle.mdc":"b9084b79fb22becab81bad9cea1c4095c9dc20379b44923230afd0e92a2e683d","plugins/zapier/skills/zapier-demo/SKILL.md":"11813724c0c99101a989a0d73add1aba1340cdcc1942c8d6e42aab8c58d4aa36","plugins/zapier/skills/zapier-explore/SKILL.md":"f047ce82ae5bdf4342247f10d56a30dc82772828d6c271a637e6d5aca50fd573","plugins/zapier/skills/zapier-onboard/SKILL.md":"6670bf36edd766cc0fd40897c6e9e8848eba322941a3df110e316a2815d32fc0","plugins/zapier/skills/zapier-status/SKILL.md":"9a1dd67ed0c041b320bfd6f8305efcaacb341608b907144c3363e6389f2ca2a6"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-20T00:19:19Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-20
reviewed date: 2026-10-20
published date: 2026-10-20
modified date: 2026-10-20
reviewer: Machine-checked
harness version: toolwitness harness at commit 80347ac5c68b1268b011b015a8797984151a16e7
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 19 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-20T00:19:19Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"zapier — 4 skills","operatingSystem":"Not exercised","softwareVersion":"5360f152b96735712e5f925ad728732cb86888df"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 4 skill declarations. Ran 19 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): zapier-demo; zapier-explore; zapier-onboard; zapier-status"}],"evidence_sha256":{"LOCK.json":"b7deddf08712db3bf7133e5cb2a0339a8bdf424a1d57e6c108a19a701b672cd1","commands.json":"81373723b202eea4d2172bd78de0dbae0523376c06b6b9e66512bb3239a8c7e2","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"e68b3d9f6ead4617bb8eada3a4c7718f54458ca5b53046f4953be9ab10865d84","listing.json":"ef0ef887687263ec0471a0fefddbb190d707ba03551e0a11c96af741230a53aa","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"68224ca9d6fe872b97a7d4027bcee9756e1b0c40a876dacd869945c7c9197f60","date":"2026-10-20","gates":"659426901f50a447347b2a33fad0f61dd2b067746b0d78c22771ef8d54dcc683","grok":"4815a2bb912b9e85ae64570989b6e42ee0b928447a55afe723747cacb04b9859","kind":"machine-checked","reviewed_sha256":"de9ca3239b62dabc95ff9b9792a874e0c0e9c2efef21cb9e5ecf97a346dfce0d","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 19 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "plugins/zapier/skills/zapier-demo/SKILL.md",
        "name": "zapier-demo",
        "description": "Walk a new user through setting up their first Zapier action and running it live — the smallest possible win. Asks what app they use, recommends one read action to enable, guides them to mcp.zapier.com to add it, then demonstrates it working in the same chat. Use when the user asks \"show me how Zapier works\", \"set up my first action\", \"give me a quick demo\", \"I want to try it\", \"what's the fastest way to see this work\", \"minimal setup\", \"hello world\", or \"smallest example\".",
        "files": {
          "plugins/zapier/skills/zapier-demo/SKILL.md": "11813724c0c99101a989a0d73add1aba1340cdcc1942c8d6e42aab8c58d4aa36"
        }
      },
      {
        "path": "plugins/zapier/skills/zapier-explore/SKILL.md",
        "name": "zapier-explore",
        "description": "Explore what Zapier MCP can do for the user — interview them about their role and the apps they live in, suggest specific use cases as on-demand prompts, then walk them through enabling the actions to make those use cases real. The natural next step after `zapier-demo`. Use when the user asks \"what else can Zapier do for me\", \"set up more tools\", \"add a starter pack for my role\", \"what should I enable next\", \"suggest workflows\", \"help me figure out what to do with Zapier\", \"I don't know where to start\", or \"give me Zapier examples\".",
        "files": {
          "plugins/zapier/skills/zapier-explore/SKILL.md": "f047ce82ae5bdf4342247f10d56a30dc82772828d6c271a637e6d5aca50fd573"
        }
      },
      {
        "path": "plugins/zapier/skills/zapier-onboard/SKILL.md",
        "name": "zapier-onboard",
        "description": "Onboard a new user to Zapier MCP — introduce what it can do, walk through authentication, and route into the right flow based on the state of their setup. Use when getting started, troubleshooting conn

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-20