How are the audit results organized?

Results are categorized by severity: Critical (fix immediately), Major (fix soon), and Minor (cosmetic/style issues), each with a location, impact description, and fix guide.

Can I use this skill to create new plugins?

No, this skill is strictly for auditing, refactoring, and improving existing plugins. It should not be used for scaffolding or initial development tasks.

What kind of security issues does it detect?

It specifically scans for unrestricted Bash permissions, missing model invocation disables, and forbidden tool usage patterns that violate marketplace security models.

Does it support different marketplace standards?

Yes, the skill includes a discovery phase that reads local marketplace documentation and READMEs to adapt its audit criteria to specific platform requirements.

Plugin Compliance Auditor

Name: Plugin Compliance Auditor
Author: Git-Fg

byGit-Fg

•

보안 및 테스팅

Audits Claude Code plugins for marketplace compliance, security protocols, and architectural best practices.

The Plugin Compliance Auditor is a specialized capability designed to ensure Claude Code plugins meet rigorous marketplace standards and security requirements. It automates the review of plugin architecture, frontmatter metadata, and tool permissions, identifying critical risks like unrestricted bash access or inconsistent naming conventions. By systematically discovering and applying domain-specific marketplace guidelines, this skill helps developers refactor and polish their work for professional distribution while maintaining high quality and security benchmarks. It is an essential tool for maintaining repository integrity and ensuring code is production-ready.

주요 기능

01Marketplace-specific guideline discovery and adaptation

02Frontmatter structure and metadata auditing

03Severity-based issue reporting with actionable fix instructions

04Security permission and tool whitelist validation

05Architectural pattern analysis including progressive disclosure

061 GitHub stars

사용 사례

01Conducting security reviews of third-party or custom-built skills

02Preparing plugins for official marketplace submission and validation

03Standardizing plugin architecture and naming across large repositories

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add git-fg/thecattoolkit auditing-plugins

For use in Claude.ai and ChatGPT

Download Skill