Comment by pedrovhb

That's not really the entire js of the plugin, but its schema; it's generated from the OpenAPI spec which you have to provide when writing actions/plugins. When I was looking through the requests for the available plugins the spec URL was visible and necessarily publicly accessible. I haven't checked for Actions with the new "GPTs" thing but I'd imagine it still is.