What is included in the Audit Report?

The report includes a security audit summary, best practices checklist, compliance status, and an overall quality score with prioritized recommendations.

How do I trigger a plugin audit?

You can trigger it by asking Claude to 'audit plugin', 'run a security review', or 'check best practices' followed by the plugin directory name.

What security vulnerabilities does the Plugin Auditor check for?

The auditor scans for hardcoded secrets, AWS keys, private keys, dangerous system commands, command injection vectors, and suspicious URLs.

Does it support Model Context Protocol (MCP) plugins?

Yes, it includes specific audit checks for MCP standards, including package.json validation, TypeScript configuration, and dependency analysis.

Can this skill automatically fix plugin issues?

Yes, it can automatically resolve script permissions, JSON formatting, Markdown structure, and version synchronization issues.

Plugin Auditor

Name: Plugin Auditor
Author: intent-solutions-io

byintent-solutions-io

Security & Testing

Performs comprehensive security and compliance audits for Claude Code plugins to ensure high-quality standards and marketplace readiness.

About

The Plugin Auditor is a specialized skill designed to automate the review process for Claude Code plugins. It provides deep inspection across multiple categories including security, best practices, and CLAUDE.md compliance. By scanning for sensitive data leaks, dangerous command patterns, and structural inconsistencies, it helps developers build secure, performant, and marketplace-compliant tools. The skill generates detailed audit reports with quality scores and offers auto-fix capabilities for common issues like file permissions and formatting, making it an essential companion for plugin maintainers and reviewers.

Key Features

Comprehensive best practices verification for plugin structure and documentation
Detailed quality scoring and multi-level severity reporting
Auto-fix capabilities for script permissions and JSON/Markdown formatting
0 GitHub stars
CLAUDE.md and marketplace catalog compliance checking
Automated security scanning for hardcoded secrets and dangerous commands

Use Cases

Quality assurance checks to verify a plugin meets 'featured' status requirements
Pre-publication security reviews to identify leaked credentials or vulnerabilities
Standardizing repository hygiene across multiple plugin projects

About

Key Features

Comprehensive best practices verification for plugin structure and documentation
Detailed quality scoring and multi-level severity reporting
Auto-fix capabilities for script permissions and JSON/Markdown formatting
0 GitHub stars
CLAUDE.md and marketplace catalog compliance checking
Automated security scanning for hardcoded secrets and dangerous commands

Use Cases

Quality assurance checks to verify a plugin meets 'featured' status requirements
Pre-publication security reviews to identify leaked credentials or vulnerabilities
Standardizing repository hygiene across multiple plugin projects