OpenHands

Shouldn't the `extensions/plugins` directory follow the Plugin packaging spec?
• repo: <https://github.com/OpenHands/extensions/tree/main/plugins>
• Plugin spec: <https://docs.openhands.dev/sdk/guides/plugins#plugin-structure>
A few things I am noticing:
• no `.plugin/plugin.json`
• vulnerability-remediation is structured more as a github workflow, rather than set of agent skills that can be used for vuln remediation <https://github.com/OpenHands/extensions/tree/main/plugins/vulnerability-remediation>

<@U090ER7JPHA>
1. open a PR adding .plugin/plugin.json to all plugins on that repo
2. update the OpenHands docs to mention that workflows can optionally be included in the plugin

> vulnerability-remediation is structured more as a github workflow, rather than set of agent skills that can be used for vuln remediation
I think it is structured as a set of skills that can be used for vulnerability remediation though? (in addition to the workflow)

The Skills directory has a symbolic link to this, which isn't really remediation guidance... moreso general security advice. Has anyone tested the skill for remediation? <https://github.com/OpenHands/extensions/tree/main/skills/security>