about

what it is

Omarchy plugins run unsandboxed inside omarchy-shell (the same process as the lock screen and the polkit agent), and omarchy plugin add clones whatever upstream HEAD is today. A review only means something for the commit it reviewed. This site publishes commit-bound reviews of every plugin listed on plugins.omarchy.org: per-provider verdicts, the combined verdict, what the plugin can do, and file:line evidence.

trust model

• Scanners are ground truth. Static tools decide; they alone can block. The AI reviewer is escalate-only: it may add findings and raise a verdict one level, never lower one, never block, never clear a hard fail.
• Providers sign what they publish. Each review is an in-toto statement signed keyless with Sigstore in the provider's own CI; the registry pins each provider's workflow identity and validity window.
• Combined = worst of trusted providers. Core and verified providers count fully; community providers and the unsigned marketplace baseline are shown but count as at most caution, and never make a plugin safe.
• The marketplace owns identity. Plugin ids, names, categories and repositories come only from plugins.omarchy.org; anything else is unlisted and never scanned.
• Coarse by design. Reports show categories, severities and evidence locations, never rule identifiers, weights or formulas, so the scanner is no free evasion oracle.
• One signed snapshot. Clients verify store.json (or the client bundle manifest) with ssh-keygen -Y verify before using any verdict; expired or rolled-back snapshots are refused.

states

• safe / caution / risky: the trusted combined verdict for the reviewed commit.
• blocked: a trusted provider found blocking evidence at a file:line.
• unreviewed: no trusted review yet (only the unsigned baseline, or nothing).
• stale: the commit you run differs from the reviewed one, in commit and tree.
• unlisted: not on plugins.omarchy.org. retired: removed from it; no verdict.

install omarchy-store

One command adds the store, the bar shield and the checker as one Omarchy plugin. Click the shield: the first run downloads the signed snapshot and verifies it on your machine with the key shipped in the plugin.

• Installs are gated. The store installs through omarchy-plugin-check --add --pin: blocked and retired plugins are refused, anything not safe asks first, and the reviewed commit is checked out and its tree verified.
• Nothing else changes unless you ask. A menu entry, a keybind and terminal commands are one button on the store's status tab, which lists every change first, backs up each edited file and can undo them.
• Remove with omarchy plugin remove io.github.prometheusroot.omarchy-store.