What specific security risks does Plugin Auditor detect?

It scans for hardcoded API keys, AWS credentials, private keys, dangerous shell commands, and potential command injection vectors to ensure your plugin is safe for use.

Does it work with Model Context Protocol (MCP) plugins?

Absolutely. It includes specific checks for MCP SDK usage, TypeScript configurations, and valid MCP-specific JSON settings.

How is the quality score calculated?

The skill evaluates plugins across four dimensions—Security, Best Practices, Compliance, and Documentation—assigning a weighted score for an overall readiness assessment.

Can this skill fix issues automatically?

Yes, Plugin Auditor can automatically fix several common issues including script permissions, JSON/Markdown formatting errors, and version synchronization issues.

When should I run a plugin audit?

It is best used throughout the development cycle for best practice checks and as a final gatekeeper before publishing a plugin to a public marketplace.

Plugin Auditor

Name: Plugin Auditor
Author: intent-solutions-io

byintent-solutions-io

Security & Testing

Audits Claude Code plugins for security vulnerabilities, repository compliance, and code quality standards.

About

Plugin Auditor is a specialized utility designed to ensure Claude Code plugins meet high-quality and security standards before publication. It performs deep scans for hardcoded secrets, AWS keys, and dangerous command patterns while verifying structural compliance with CLAUDE.md and marketplace requirements. By providing automated reports and quality scores, it helps developers build production-ready integrations that are safe, performant, and correctly documented.

Key Features

Comprehensive security scanning for secrets and injection vectors
Automated CLAUDE.md and marketplace schema compliance checks
Quality scoring across security, documentation, and performance
Auto-fix capabilities for common issues like file permissions and formatting
Deep analysis of MCP-specific plugin configurations and dependencies
0 GitHub stars

Use Cases

Performing a final security review before publishing a plugin to the marketplace
Automated quality checks for plugin repositories and MCP services
Validating plugin structure and CLAUDE.md compliance during development

About

Key Features

Comprehensive security scanning for secrets and injection vectors
Automated CLAUDE.md and marketplace schema compliance checks
Quality scoring across security, documentation, and performance
Auto-fix capabilities for common issues like file permissions and formatting
Deep analysis of MCP-specific plugin configurations and dependencies
0 GitHub stars

Use Cases

Performing a final security review before publishing a plugin to the marketplace
Automated quality checks for plugin repositories and MCP services
Validating plugin structure and CLAUDE.md compliance during development