Can this skill fix issues automatically?

Yes, it can automatically resolve script permission errors, JSON and Markdown formatting inconsistencies, and version synchronization issues between configuration files.

What security threats does the Plugin Auditor detect?

It scans for hardcoded API keys, AWS credentials, private keys, dangerous shell commands like 'rm -rf /', command injection vectors, and obfuscated code patterns.

Does it work with Model Context Protocol (MCP) plugins?

Absolutely, it includes specific checks for MCP-based plugins, verifying package dependencies, TypeScript configurations, and proper MCP-specific JSON setup.

How do I trigger an audit for my plugin?

You can activate the skill by asking Claude to 'audit plugin', perform a 'security review', or 'check for best practices' followed by the plugin name.

Plugin Auditor

Name: Plugin Auditor
Author: jeremylongshore

byjeremylongshore

•

883

보안 및 테스팅

Audits Claude Code plugins for security vulnerabilities, best practices, and repository compliance standards.

소개

The Plugin Auditor skill provides a comprehensive automated review system for Claude Code plugins, ensuring they meet high security and quality standards. It performs deep scans for hardcoded secrets, dangerous shell commands, and non-HTTPS URLs while simultaneously verifying repository structure, documentation completeness, and marketplace compliance according to CLAUDE.md standards. This tool is essential for developers looking to publish production-ready plugins with high quality scores.

주요 기능

Automated security scanning for secrets, AWS keys, and dangerous commands
Best practices validation for directory structure, versioning, and documentation
883 GitHub stars
CLAUDE.md and marketplace catalog compliance verification
Detailed audit reporting with severity-rated findings and quality scores
Auto-fixing capabilities for script permissions and formatting issues

사용 사례

Standardizing documentation and directory structures across a large suite of plugins
Performing a comprehensive security review before publishing a plugin to a public repository
Ensuring a plugin meets the strict quality thresholds required for featured status

소개

주요 기능

Automated security scanning for secrets, AWS keys, and dangerous commands
Best practices validation for directory structure, versioning, and documentation
883 GitHub stars
CLAUDE.md and marketplace catalog compliance verification
Detailed audit reporting with severity-rated findings and quality scores
Auto-fixing capabilities for script permissions and formatting issues

사용 사례

Standardizing documentation and directory structures across a large suite of plugins
Performing a comprehensive security review before publishing a plugin to a public repository
Ensuring a plugin meets the strict quality thresholds required for featured status