How do I trigger an audit?

Simply use keywords like 'audit plugin', 'security review', or 'best practices check' within your Claude Code environment to initiate a scan.

Can it fix issues automatically?

Yes, the skill can automatically resolve script permissions, JSON/Markdown formatting, and version synchronization issues across plugin files.

What does the Plugin Auditor check for?

It scans for security vulnerabilities (like hardcoded API keys), verifies directory structure, checks marketplace metadata, and assesses documentation quality against CLAUDE.md standards.

Is this skill specific to a certain repository?

While it can audit any plugin, it is specifically optimized for the standards and marketplace requirements of the claude-code-plugins repository.

Plugin Auditor

Name: Plugin Auditor
Author: jeremylongshore

byjeremylongshore

•

883

Security & Testing

Audits Claude Code plugins for security vulnerabilities, best practices, and marketplace compliance.

About

The Plugin Auditor skill is a comprehensive quality assurance tool designed specifically for developers building Claude Code plugins. It automates the rigorous process of checking for security leaks like hardcoded secrets, ensuring compliance with CLAUDE.md repository standards, and verifying marketplace requirements. By providing detailed reports and auto-fix capabilities for script permissions and formatting, it streamlines the path from development to production-ready status while maintaining high code quality and security standards.

Key Features

Validation of plugin structure and marketplace schema compliance
883 GitHub stars
Best practices audit for code quality, documentation, and Git hygiene
Detailed audit reports with severity levels and quality scores
Automated security scanning for hardcoded secrets and dangerous commands
Auto-fix capabilities for script permissions and common formatting issues

Use Cases

Performing a pre-publish security review of a new Claude Code plugin
Ensuring repository-specific compliance with CLAUDE.md standards
Continuous integration checks to maintain high quality scores for featured plugins

About

Key Features

Validation of plugin structure and marketplace schema compliance
883 GitHub stars
Best practices audit for code quality, documentation, and Git hygiene
Detailed audit reports with severity levels and quality scores
Automated security scanning for hardcoded secrets and dangerous commands
Auto-fix capabilities for script permissions and common formatting issues

Use Cases

Performing a pre-publish security review of a new Claude Code plugin
Ensuring repository-specific compliance with CLAUDE.md standards
Continuous integration checks to maintain high quality scores for featured plugins