Browse and judge a package

What the Marketplace is

PGB Marketplace (marketplace.pgbhub.com) is a catalogue of packages that extend PGB. A package can be an agent, a tool, an integration, a function, a template, a workflow, a database package or a business resource. Anyone can publish, which makes judging a package a skill worth having.

Find something

1. Open the Marketplace home page. Use the search box, or choose a type under Browse by type.
2. On Browse, use the left filters:
   • Type (Agents, Tools, Integrations, Functions, Templates, Workflows, Database, Business resources).
   • Category (for example AI agents, Finance, Marketing).
   • Portability (Portable, Compatible, PGB Native).
   • Sort by (Most installed, or Best match after a search; Newest; Name (A to Z)).
3. Open a card.

Try opening Invoice Chaser, an official agent that finds overdue invoices and drafts polite reminders.

Read the package page

Work down the page in this order:

1. The header: type, Portability, name, summary and trust labels.
2. About this package: what the publisher says it does.
3. What it can access: the permissions, each with a risk level.
4. Setup it needs: settings you provide and secrets you add yourself.
5. Also installs: dependencies.
6. The sidebar: Publisher, Details, Versions and About the labels.

For Invoice Chaser you should see that it can read your project data and write email drafts, and that it asks for a table name.

Trust labels, one by one

• Official: published by PGB.
• Verified Publisher: PGB confirmed who the publisher is. It says nothing about quality.
• Security Checked: this version passed automated checks of structure, permissions and exposed secrets. It is not a manual review.
• Featured: an editorial pick for the front page, not a safety rating.
• Community: an independent, unverified author. Read the permissions carefully.

The labels answer separate questions. A package can be Featured without being Verified Publisher, and Security Checked is not a guarantee.

Portability

• Portable works on its own and can go anywhere.
• Compatible follows open conventions and works best on PGB.
• PGB Native uses PGB features directly.

Portability matters if you may leave PGB some day or want to reuse something elsewhere.

Red flags

• A package that asks for more access than its purpose needs, for example a function that reads your mail.
• A summary and description that do not match what it does.
• A Deprecated banner or a Yanked version.
• A brand-new community publisher with high-risk permissions.

Try it yourself

1. Browse Agents and open three of them. For each, note the labels and the highest risk level among its permissions.
2. Use Portability to list only Portable packages.
3. Open How trust works from the home page and compare it with this lesson.

Recap

• Filter by type, category and portability, then read the package page top to bottom.
• Trust labels are separate signals; none is a guarantee.
• Permissions are the most important part of the page.