What happens if a plugin is missing its SKILL.md file?

The validation will return a FAIL result for Check 3, as at least one SKILL.md with valid frontmatter is required for a plugin to be functional.

How does it detect sensitive data?

It uses pattern matching to search for strings like 'api_key', 'token', and 'password' followed by assignments, helping prevent the accidental exposure of credentials.

Can I run this on a plugin that isn't in the plugins/ directory?

The skill is designed to look specifically within the 'plugins/' directory of the repository to maintain consistency with the claude-play marketplace structure.

What specifically does the validate-plugin skill check?

It performs seven specific checks: directory naming, plugin.json field completeness, SKILL.md frontmatter validity, README existence, absence of hardcoded paths, sensitive data scanning, and marketplace registration status.

Does this skill automatically fix the errors it finds?

No, this is a read-only validation skill. It identifies and reports issues so that developers can fix them manually before committing changes.

Marketplace Plugin Validator

Name: Marketplace Plugin Validator
Author: odeciojunior

byodeciojunior

0•

セキュリティとテスト

Validates Claude plugin directories against marketplace quality standards to ensure proper configuration and security.

The Marketplace Plugin Validator is an essential quality assurance tool for developers building or reviewing Claude plugins within the claude-play ecosystem. It automates the tedious process of verifying directory structures, mandatory metadata in plugin.json, and YAML frontmatter in SKILL.md files. By scanning for security risks like hardcoded absolute paths and sensitive data patterns such as API keys, this skill ensures that every plugin meets professional standards before it is committed or published to the marketplace.

主な機能

01Security scanning for sensitive data patterns like tokens and passwords

02Structured summary reporting with prioritized OK, WARN, and FAIL statuses

03Automated verification of plugin.json required fields and naming conventions

04Comprehensive SKILL.md frontmatter validation and schema checking

05Detection of hardcoded absolute paths to ensure environment portability

060 GitHub stars

ユースケース

01Pre-commit quality checks to ensure plugin metadata is complete

02Auditing existing plugins for sensitive data leaks or path errors

03Reviewing third-party plugin submissions for marketplace compliance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add odeciojunior/claude-play validate-plugin

For use in Claude.ai and ChatGPT

主な機能

01Security scanning for sensitive data patterns like tokens and passwords

02Structured summary reporting with prioritized OK, WARN, and FAIL statuses

03Automated verification of plugin.json required fields and naming conventions

04Comprehensive SKILL.md frontmatter validation and schema checking

05Detection of hardcoded absolute paths to ensure environment portability

060 GitHub stars

ユースケース

01Pre-commit quality checks to ensure plugin metadata is complete

02Auditing existing plugins for sensitive data leaks or path errors

03Reviewing third-party plugin submissions for marketplace compliance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add odeciojunior/claude-play validate-plugin

For use in Claude.ai and ChatGPT