wingspan — 8 skills

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked ·

Run UTC
Reviewed
Published
Updated

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 8 skill declarations. Ran 24 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-20T00:19:08Z, tree 7b893519ed07e44e2aee1892028c0c41c630d06dda2d27db3543a52dc5cb8522.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record
name
wingspan — 8 skills
slug
source-skills-e5eb7740f02de5a937cc2f45
type
skills
category
developer-tools
example
false
evidence state
pinned_source_listing
stamp
Pinned source listing — machine-checked
summary
Pinned source declarations and file hashes were listed.
outcome
Listed 8 skill declarations. Ran 24 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results
["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): checking-payments; connect; creating-draft-payables; finding-contractors; onboarding-contractors; outstanding; troubleshooting-connection; using-wingspan-tools"]
task
What declarations and files are present in this pinned source?
setup
Git blob acquisition followed by static source inspection.
limitations
Scope: acquisition and static inspection. Command results: commands.json.
source url
https://github.com/wingspanHQ/mcp-claude-plugin.git
documentation url
https://github.com/wingspanHQ/mcp-claude-plugin.git
commit
7f99cb3d1789a91390fa7abf1571328736b5e0a6
tree sha256
7b893519ed07e44e2aee1892028c0c41c630d06dda2d27db3543a52dc5cb8522
file sha256
{".claude-plugin/marketplace.json":"29dce6ecdf726dd74c0554d220004412330a57dc30727a5eaf0b03111219066d",".claude-plugin/plugin.json":"e622a60d5c9420e58dacbbc0bd015af50c8b1baa70b6026250339befd3234838",".codex-plugin/plugin.json":"dbd546786587746959b6a1b5162afc5030d8d12522e0c0f2240fd090c09dd4d3",".gitignore":"ed6cfbce214958ad4dfe1f387ebb95caa900597410363397763d5179b1736e6c",".mcp.json":"aee2ff98295b09807187645f72b8bc2e37048331dd9167fdecbe26d96108a0b5","CHANGELOG.md":"6f5d1a2ce40e24696f8085683e435afcd73910cdd57e652814986bc4c256c192","LICENSE":"704b8165fcce6e3e000d4830ec3cb4fc33056ece355532a89a8654abe098c96a","README.md":"289e259520409a2ed0abf662a8cbd8b0ebb05caa26fcf601cfeffa112edf3c6f","docs/tool-surface.md":"184f0a9a0295d1cd4969d2886887ddc612b0cd4b1342849edb981afca5b27910","skills/checking-payments/SKILL.md":"1316bf64b85f32a133a34d99cf6d85d6a98f7824bdc4f31287b2c62fca6ca245","skills/connect/SKILL.md":"ef98b08786c4098310a732b0c0dfe7877675dcd3391361dff76de79af2ff9bc1","skills/creating-draft-payables/SKILL.md":"035d1c2b93c1ac2b80ef575302d9a852e3d659015c5631129747c4dcc660e8e6","skills/finding-contractors/SKILL.md":"c2a635d7dadb38f3518b5c293c28d8fa21aad09fa2a78ac1ce902b7e2c922bb4","skills/finding-contractors/requirement-types.md":"8708285fa85304a1bfd5fca6c6181de08d7fcd7de71ab62a8dc07ba0504bfce6","skills/onboarding-contractors/SKILL.md":"bb02c50147755d9948160302e322df2e876d9b26c759a29f58f1233268c5b897","skills/outstanding/SKILL.md":"d7702672f4c4fe46b01e6ff82bf55434336b4462abbdf6d8630ff07a3199db8e","skills/troubleshooting-connection/SKILL.md":"82b709692c17752f464e409cfedae4059245fee765e19df7431898020d9a05bc","skills/using-wingspan-tools/SKILL.md":"70c95e6f2f320fcf5f94e8e668909c3f825c4081626717e62dc70d59e45f64e4","skills/using-wingspan-tools/glossary.md":"205e73f06649216c84452fcc99a293c2d2f066d80ce924baf886708d0c6254c4"}
lockfiles
["LOCK.json"]
utc date
2026-10-20T00:19:08Z
source date
2026-10-16
discovered date
2026-10-16
retested date
2026-10-20
reviewed date
2026-10-20
published date
2026-10-20
modified date
2026-10-20
reviewer
Machine-checked
harness version
toolwitness harness at commit 80347ac5c68b1268b011b015a8797984151a16e7
claude code version
Not applicable: static source inspection (commands.json).
model id
Not applicable: static source inspection (commands.json).
scanner version
Not applicable: static source inspection.
rulepack version
Not applicable: static source inspection.
agents
[]
commands
["Ran 24 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list
["Not applicable: static source inspection (commands.json)."]
history
["2026-10-20T00:19:08Z: pinned source inspection"]
application
{"applicationCategory":"DeveloperApplication","name":"wingspan — 8 skills","operatingSystem":"Not exercised","softwareVersion":"7f99cb3d1789a91390fa7abf1571328736b5e0a6"}
review input
{"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 8 skill declarations. Ran 24 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): checking-payments; connect; creating-draft-payables; finding-contractors; onboarding-contractors; outstanding; troubleshooting-connection; using-wingspan-tools"}],"evidence_sha256":{"LOCK.json":"a28ff35d3ab3948d417cb2d4ed5129167efe5c816adc8a004c538475f85b4765","commands.json":"ff6386e700ab84d7816a5ab7b089e0147d23609974a3da188cd827a087d3f2df","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"c2d8ae44a25973c61e6b655001c556498c899e13b110bae2b6a0362ba19c68cd","listing.json":"47fb439b8b9170da0b834d234889fa69ebfaea85c089f673d86ed8be570c5ada","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review
{"codex":"9ab22ba9c8fe309b4a9ece41435966a1ac908b1900ba2cffea0efaf4b43ccf7e","date":"2026-10-20","gates":"c2230b05fa0d07172c9fdd65cd94f2a4a48677964cd089ff80a9e87e1356fa81","grok":"0e0c9aa728429ff880a7cd68a966807b86e5b0d2fd8e1220b3bad4c833544379","kind":"machine-checked","reviewed_sha256":"d037a062f1008f6e0d76392817e465c8a7ad158a8abf2cf6578f1f62082032b7","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 24 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/checking-payments/SKILL.md",
        "name": "checking-payments",
        "description": "Look up what a company owes its contractors through Wingspan and what has happened to a particular payment. Use for \"what do we owe\", \"what did we pay last month\", \"how much is outstanding\", \"what is awaiting approval\", \"show me [name]'s payments\", \"what happened to this payment\", \"why has this not been paid yet\", \"has this been paid\", \"is this payment disputed\".",
        "files": {
          "skills/checking-payments/SKILL.md": "1316bf64b85f32a133a34d99cf6d85d6a98f7824bdc4f31287b2c62fca6ca245"
        }
      },
      {
        "path": "skills/connect/SKILL.md",
        "name": "connect",
        "description": "Check the Wingspan connection and report who it is signed in as. Run this after installing the plugin or after re-authorizing, or whenever you want to confirm Claude is reading the right Wingspan account.",
        "files": {
          "skills/connect/SKILL.md": "ef98b08786c4098310a732b0c0dfe7877675dcd3391361dff76de79af2ff9bc1"
        }
      },
      {
        "path": "skills/creating-draft-payables/SKILL.md",
        "name": "creating-draft-payables",
        "description": "Create draft payables — new payment obligations to contractors — in Wingspan. Nothing is paid. Use for \"log a payment\", \"pay [name] $500 for [work]\", \"record these payments\", \"add these payments to the [engagement] engagement\", \"create payables\", \"log 12 hours at $85 for [name]\", \"bill this month's work\". Writes to the company's Wingspan account, so it always previews first.",
        "files": {
          "skills/creating-draft-payables/SKILL.md": "035d1c2b93c1ac2b80ef575302d9a852e3d659015c5631129747c4dcc660e8e6"
        }
      },
      {
        "path": "skills/finding-contractors/SKILL.md",
        "name": "finding-contractors",
        "description": "Find, filter and inspect the contractors a c

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated