Can this skill fix issues automatically?

Yes, it can automatically resolve script permission errors, JSON and Markdown formatting inconsistencies, and version synchronization issues between configuration files.

What security threats does the Plugin Auditor detect?

It scans for hardcoded API keys, AWS credentials, private keys, dangerous shell commands like 'rm -rf /', command injection vectors, and obfuscated code patterns.

Does it work with Model Context Protocol (MCP) plugins?

Absolutely, it includes specific checks for MCP-based plugins, verifying package dependencies, TypeScript configurations, and proper MCP-specific JSON setup.

How do I trigger an audit for my plugin?

You can activate the skill by asking Claude to 'audit plugin', perform a 'security review', or 'check for best practices' followed by the plugin name.

Plugin Auditor

Name: Plugin Auditor
Author: jeremylongshore

byjeremylongshore

•

883

•

Seguridad y Pruebas

Audits Claude Code plugins for security vulnerabilities, best practices, and repository compliance standards.

The Plugin Auditor skill provides a comprehensive automated review system for Claude Code plugins, ensuring they meet high security and quality standards. It performs deep scans for hardcoded secrets, dangerous shell commands, and non-HTTPS URLs while simultaneously verifying repository structure, documentation completeness, and marketplace compliance according to CLAUDE.md standards. This tool is essential for developers looking to publish production-ready plugins with high quality scores.

Características Principales

01Automated security scanning for secrets, AWS keys, and dangerous commands

02Best practices validation for directory structure, versioning, and documentation

03883 GitHub stars

04CLAUDE.md and marketplace catalog compliance verification

05Detailed audit reporting with severity-rated findings and quality scores

06Auto-fixing capabilities for script permissions and formatting issues

Casos de Uso

01Standardizing documentation and directory structures across a large suite of plugins

02Performing a comprehensive security review before publishing a plugin to a public repository

03Ensuring a plugin meets the strict quality thresholds required for featured status

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills plugin-auditor

For use in Claude.ai and ChatGPT

Download Skill