Does this skill check for security vulnerabilities?

Yes, it performs security scans to detect hardcoded secrets, API keys, AWS credentials, and dangerous shell commands like 'rm -rf' or 'eval'.

What are the mandatory files for a valid Claude Code plugin?

A valid plugin requires a .claude-plugin/plugin.json file, a README.md, a LICENSE, and at least one component directory such as commands, agents, or skills.

Can it automatically fix the errors it finds?

It can automatically fix several common issues including script permissions (chmod +x), JSON formatting via jq, and marketplace version synchronization.

Is this skill compatible with official GitHub Actions?

Yes, the validation logic is designed to match the checks performed by the official claude-code-plugins repository workflows, ensuring local passes reflect CI results.

Plugin Validator

Name: Plugin Validator
Author: BbgnsurfTech

byBbgnsurfTech

•

Security & Testing

Validates Claude Code plugin structures, schemas, and marketplace compliance to ensure production readiness and CI/CD compatibility.

About

The Plugin Validator skill provides a comprehensive suite of automated checks designed to ensure Claude Code plugins meet strict repository standards. It evaluates directory structures, JSON schemas, frontmatter metadata, and script permissions while performing security scans for hardcoded secrets or dangerous commands. By mimicking the logic of official GitHub Actions workflows, this skill allows developers to catch errors locally, auto-fix common issues like file permissions or version mismatches, and guarantee seamless integration into the Claude Code marketplace.

Key Features

CI-compatible validation reports with severity levels and fix commands
Directory structure and marketplace compliance auditing
Auto-fix capabilities for script permissions and JSON formatting
Security scanning for API keys and sensitive credentials
Automated JSON schema and frontmatter validation
3 GitHub stars

Use Cases

Pre-commit validation to ensure plugins pass repository CI/CD pipelines
Standardizing third-party plugins for repository compliance
Troubleshooting plugin errors or marketplace submission rejections

About

Key Features

CI-compatible validation reports with severity levels and fix commands
Directory structure and marketplace compliance auditing
Auto-fix capabilities for script permissions and JSON formatting
Security scanning for API keys and sensitive credentials
Automated JSON schema and frontmatter validation
3 GitHub stars

Use Cases

Pre-commit validation to ensure plugins pass repository CI/CD pipelines
Standardizing third-party plugins for repository compliance
Troubleshooting plugin errors or marketplace submission rejections