Audits Claude Code plugins for security vulnerabilities, repository compliance, and architectural best practices.
Plugin Auditor is a specialized diagnostic tool designed for the Claude Code ecosystem to ensure all plugins meet high-quality security and structural standards. It automates the review process by scanning for critical risks like hardcoded secrets and command injections, while simultaneously verifying adherence to CLAUDE.md standards and marketplace requirements. This skill helps developers maintain repository hygiene, improve code quality, and prepare plugins for production deployment with actionable reports and automated fixes.
Key Features
01Automated checks for directory structure, semantic versioning, and documentation standards.
02Git hygiene monitoring to prevent the commitment of sensitive files or large binaries.
03Comprehensive security scanning for hardcoded secrets, AWS keys, and dangerous commands.
04Auto-fix capabilities for script permissions, JSON formatting, and versioning inconsistencies.
053 GitHub stars
06Validation of CLAUDE.md compliance and marketplace-specific metadata requirements.
Use Cases
01Identifying best practice violations and quality gaps during local development cycles.
02Conducting a pre-publication security review to ensure no sensitive data is leaked.
03Verifying that a new plugin adheres to the standard directory and metadata structure.
