What is included in the Audit Report?

The report includes a security audit summary, best practices checklist, compliance status, and an overall quality score with prioritized recommendations.

How do I trigger a plugin audit?

You can trigger it by asking Claude to 'audit plugin', 'run a security review', or 'check best practices' followed by the plugin directory name.

What security vulnerabilities does the Plugin Auditor check for?

The auditor scans for hardcoded secrets, AWS keys, private keys, dangerous system commands, command injection vectors, and suspicious URLs.

Does it support Model Context Protocol (MCP) plugins?

Yes, it includes specific audit checks for MCP standards, including package.json validation, TypeScript configuration, and dependency analysis.

Can this skill automatically fix plugin issues?

Yes, it can automatically resolve script permissions, JSON formatting, Markdown structure, and version synchronization issues.

Plugin Auditor

Name: Plugin Auditor
Author: intent-solutions-io

byintent-solutions-io

0•

Security & Testing

Performs comprehensive security and compliance audits for Claude Code plugins to ensure high-quality standards and marketplace readiness.

The Plugin Auditor is a specialized skill designed to automate the review process for Claude Code plugins. It provides deep inspection across multiple categories including security, best practices, and CLAUDE.md compliance. By scanning for sensitive data leaks, dangerous command patterns, and structural inconsistencies, it helps developers build secure, performant, and marketplace-compliant tools. The skill generates detailed audit reports with quality scores and offers auto-fix capabilities for common issues like file permissions and formatting, making it an essential companion for plugin maintainers and reviewers.

Key Features

01Comprehensive best practices verification for plugin structure and documentation

02Detailed quality scoring and multi-level severity reporting

03Auto-fix capabilities for script permissions and JSON/Markdown formatting

040 GitHub stars

05CLAUDE.md and marketplace catalog compliance checking

06Automated security scanning for hardcoded secrets and dangerous commands

Use Cases

01Quality assurance checks to verify a plugin meets 'featured' status requirements

02Pre-publication security reviews to identify leaked credentials or vulnerabilities

03Standardizing repository hygiene across multiple plugin projects

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add intent-solutions-io/plugins-nixtla plugin-auditor

For use in Claude.ai and ChatGPT

Download Skill