[Kudo]

Keep @latest in source skills and pin EAS CLI only in the upload copy, resolving its current version with npm view. Preserve submit-expo-feedback@latest and remove the latest tag from create-expo-app to match the passing upload. Other explicit npm latest helpers are resolved once per package; existing exact versions stay unchanged.

Package tracked portable files and preserve assets, source files, and plugin version 1.14.0. Exclude hooks and Claude-specific configuration, reject escaping paths, and refuse to overwrite an existing ZIP. Remove the experimental --unversioned mode and document the single submission command.

Test plan

• Validated the integrated stack with skill limits/metadata/catalog checks, overview routing, Claude marketplace/plugin validation, version validation, and git diff --check.
• bun test scripts/create-chatgpt-plugin.test.ts: 11 tests pass, covering version lookups, command exceptions, source/binary preservation, tracked-file selection, output preservation, invalid metadata, private errors, and symlink rejection.
• The uploader confirmed rescan 28 passed. The revised script-generated ZIP has 125 of 126 files byte-identical to that package; only the packaging README differs.
• Ran the script against npm: EAS CLI resolved to 24.11.0. The ZIP contains 126 files / 24 skills; all skill files, executable helpers, assets, manifest, and MCP configuration match passing rescan 28.
• Both plugin manifests remain 1.14.0.