How do I trigger an audit for my plugin?

Simply mention keywords like 'audit plugin', 'security review', or 'best practices check' while referencing your plugin directory.

What security vulnerabilities does Plugin Auditor detect?

It scans for hardcoded secrets (API keys, passwords), AWS credentials, private keys, dangerous shell commands like 'rm -rf /', and command injection vectors.

Does it support Model Context Protocol (MCP) plugins?

Yes, it includes specific audit categories for MCP plugins, checking for valid SDK dependencies, build scripts, and proper TypeScript configurations.

Can this skill fix identified issues automatically?

Yes, it has built-in capabilities to fix script permissions, format JSON/Markdown files, and synchronize versioning across plugin files.

Plugin Auditor

Name: Plugin Auditor
Author: BbgnsurfTech

byBbgnsurfTech

•

セキュリティとテスト

Audits Claude Code plugins for security vulnerabilities, repository compliance, and architectural best practices.

概要

Plugin Auditor is a specialized diagnostic tool designed for the Claude Code ecosystem to ensure all plugins meet high-quality security and structural standards. It automates the review process by scanning for critical risks like hardcoded secrets and command injections, while simultaneously verifying adherence to CLAUDE.md standards and marketplace requirements. This skill helps developers maintain repository hygiene, improve code quality, and prepare plugins for production deployment with actionable reports and automated fixes.

主な機能

Automated checks for directory structure, semantic versioning, and documentation standards.
Git hygiene monitoring to prevent the commitment of sensitive files or large binaries.
Comprehensive security scanning for hardcoded secrets, AWS keys, and dangerous commands.
Auto-fix capabilities for script permissions, JSON formatting, and versioning inconsistencies.
3 GitHub stars
Validation of CLAUDE.md compliance and marketplace-specific metadata requirements.

ユースケース

Identifying best practice violations and quality gaps during local development cycles.
Conducting a pre-publication security review to ensure no sensitive data is leaked.
Verifying that a new plugin adheres to the standard directory and metadata structure.

概要

主な機能

Automated checks for directory structure, semantic versioning, and documentation standards.
Git hygiene monitoring to prevent the commitment of sensitive files or large binaries.
Comprehensive security scanning for hardcoded secrets, AWS keys, and dangerous commands.
Auto-fix capabilities for script permissions, JSON formatting, and versioning inconsistencies.
3 GitHub stars
Validation of CLAUDE.md compliance and marketplace-specific metadata requirements.

ユースケース

Identifying best practice violations and quality gaps during local development cycles.
Conducting a pre-publication security review to ensure no sensitive data is leaked.
Verifying that a new plugin adheres to the standard directory and metadata structure.