How do I trigger a plugin audit with this skill?

You can trigger it by asking Claude to 'validate plugin', 'check plugin structure', 'verify plugin', or 'audit my plugin'.

What specifically does the Plugin Checker validate?

It validates the plugin.json manifest, directory hierarchies, agent/skill/command YAML frontmatter, hook logic in hooks.json, and security vulnerabilities like hardcoded secrets.

Can it detect pathing issues in hooks?

Yes, it checks for path portability and ensures that scripts use the ${CLAUDE_PLUGIN_ROOT} variable instead of hardcoded absolute paths.

Does it provide a report of the findings?

Yes, it generates a standardized Plugin Validation Report including a summary, critical issues that must be fixed, warnings, and positive findings.

Claude Plugin Validator

Name: Claude Plugin Validator
Author: a-ariff

bya-ariff

セキュリティとテスト

Validates Claude Code plugin structures, configurations, and security practices to ensure seamless integration and deployment.

概要

The Plugin Checker skill provides a comprehensive auditing framework for Claude Code developers to verify their plugin components against official standards. It automates the inspection of manifest files, directory structures, agent frontmatter, and hook configurations, identifying common issues like incorrect naming conventions, missing files, or path portability errors. By following a standardized validation checklist, this skill helps developers build robust, secure, and production-ready plugins while minimizing manual troubleshooting during the development lifecycle.

主な機能

Agent and skill frontmatter syntax and trigger phrase auditing
0 GitHub stars
Hook configuration verification and script portability checking
Detailed validation reports with prioritized fix recommendations
Security auditing for hardcoded credentials and unsafe URL protocols
Automated manifest (plugin.json) and directory structure validation

ユースケース

Auditing a new plugin before local testing or public distribution
Ensuring security compliance and best practices in complex hook configurations
Troubleshooting 'plugin not found' or 'skill not triggering' errors

概要

主な機能

Agent and skill frontmatter syntax and trigger phrase auditing
0 GitHub stars
Hook configuration verification and script portability checking
Detailed validation reports with prioritized fix recommendations
Security auditing for hardcoded credentials and unsafe URL protocols
Automated manifest (plugin.json) and directory structure validation

ユースケース

Auditing a new plugin before local testing or public distribution
Ensuring security compliance and best practices in complex hook configurations
Troubleshooting 'plugin not found' or 'skill not triggering' errors