How do I trigger an audit for my plugin?

Simply mention keywords like 'audit plugin', 'security review', or 'best practices check' while referencing your plugin directory.

What security vulnerabilities does Plugin Auditor detect?

It scans for hardcoded secrets (API keys, passwords), AWS credentials, private keys, dangerous shell commands like 'rm -rf /', and command injection vectors.

Does it support Model Context Protocol (MCP) plugins?

Yes, it includes specific audit categories for MCP plugins, checking for valid SDK dependencies, build scripts, and proper TypeScript configurations.

Can this skill fix identified issues automatically?

Yes, it has built-in capabilities to fix script permissions, format JSON/Markdown files, and synchronize versioning across plugin files.

Plugin Auditor

Name: Plugin Auditor
Author: BbgnsurfTech

byBbgnsurfTech

•

Security & Testing

Audits Claude Code plugins for security vulnerabilities, repository compliance, and architectural best practices.

About

Plugin Auditor is a specialized diagnostic tool designed for the Claude Code ecosystem to ensure all plugins meet high-quality security and structural standards. It automates the review process by scanning for critical risks like hardcoded secrets and command injections, while simultaneously verifying adherence to CLAUDE.md standards and marketplace requirements. This skill helps developers maintain repository hygiene, improve code quality, and prepare plugins for production deployment with actionable reports and automated fixes.

Key Features

Automated checks for directory structure, semantic versioning, and documentation standards.
Git hygiene monitoring to prevent the commitment of sensitive files or large binaries.
Comprehensive security scanning for hardcoded secrets, AWS keys, and dangerous commands.
Auto-fix capabilities for script permissions, JSON formatting, and versioning inconsistencies.
3 GitHub stars
Validation of CLAUDE.md compliance and marketplace-specific metadata requirements.

Use Cases

Identifying best practice violations and quality gaps during local development cycles.
Conducting a pre-publication security review to ensure no sensitive data is leaked.
Verifying that a new plugin adheres to the standard directory and metadata structure.

About

Key Features

Automated checks for directory structure, semantic versioning, and documentation standards.
Git hygiene monitoring to prevent the commitment of sensitive files or large binaries.
Comprehensive security scanning for hardcoded secrets, AWS keys, and dangerous commands.
Auto-fix capabilities for script permissions, JSON formatting, and versioning inconsistencies.
3 GitHub stars
Validation of CLAUDE.md compliance and marketplace-specific metadata requirements.

Use Cases

Identifying best practice violations and quality gaps during local development cycles.
Conducting a pre-publication security review to ensure no sensitive data is leaked.
Verifying that a new plugin adheres to the standard directory and metadata structure.