What files does the Plugin Validator check?

It verifies essential files including .claude-plugin/plugin.json, README.md, LICENSE, and valid component directories like commands, agents, and skills.

Is it compatible with GitHub Actions?

Yes, the validation results are designed to match the official claude-code-plugins CI format, allowing you to run local checks that mirror CI/CD workflows.

Does it validate documentation?

Yes, it checks README.md for installation instructions, usage examples, proper markdown formatting, and broken links.

Can it fix plugin errors automatically?

Yes, it can automatically handle certain fixes such as updating script permissions (chmod +x), reformating JSON, and syncing marketplace versions.

How does it handle security concerns?

The skill scans for hardcoded API keys, secrets, AWS keys, private keys, and dangerous commands like 'eval()' or 'rm -rf /' to ensure safety.

Claude Code Plugin Validator

Name: Claude Code Plugin Validator
Author: BbgnsurfTech

byBbgnsurfTech

•

Security & Testing

Ensures Claude Code plugins meet structural, security, and marketplace standards through automated validation and linting.

About

The Plugin Validator is a specialized tool designed to automate the rigorous testing of Claude Code plugin structures, JSON schemas, and repository compliance. It performs deep scans for required files, validates frontmatter for commands and agents, checks script permissions, and identifies potential security risks like hardcoded secrets. By aligning local checks with CI/CD workflows, it helps developers catch errors early, ensuring that plugins are ready for marketplace submission and function reliably within the Claude Code ecosystem.

Key Features

Automated security scans for hardcoded secrets and dangerous commands
Comprehensive structure and JSON schema validation
Frontmatter verification for commands, agents, and skills
3 GitHub stars
Marketplace compliance checking against repository standards
Auto-fix capabilities for script permissions and JSON formatting

Use Cases

Debugging CI/CD failures by running localized validation checks
Verifying plugin integrity before committing to a repository
Ensuring new plugins meet marketplace submission requirements

About

Key Features

Automated security scans for hardcoded secrets and dangerous commands
Comprehensive structure and JSON schema validation
Frontmatter verification for commands, agents, and skills
3 GitHub stars
Marketplace compliance checking against repository standards
Auto-fix capabilities for script permissions and JSON formatting

Use Cases

Debugging CI/CD failures by running localized validation checks
Verifying plugin integrity before committing to a repository
Ensuring new plugins meet marketplace submission requirements