Audits Claude Code plugins for security vulnerabilities, best practices, and marketplace compliance standards.
Plugin Auditor is a specialized capability designed to ensure Claude Code plugins meet high-quality standards before deployment or publication. It automatically scans repositories for security risks like hardcoded secrets and command injection, verifies compliance with CLAUDE.md and marketplace schemas, and evaluates best practices ranging from directory structure to performance optimization. This skill streamlines the review process, providing detailed reports with severity-rated findings and auto-fix capabilities for common issues like file permissions and formatting.
主要功能
01Auto-fix capabilities for script permissions, JSON formatting, and version synchronization
02884 GitHub stars
03Detailed audit reports with severity levels and actionable recommendations
04Automated security scanning for secrets, AWS keys, and dangerous command patterns
05Comprehensive compliance checks for CLAUDE.md and marketplace.extended.json standards
06Best practice evaluation for code quality, documentation, and directory structure
使用场景
01Pre-publication review to ensure a plugin is safe and ready for the marketplace
02Enforcing repository standards and CLAUDE.md compliance across a team of contributors
03Automated security auditing during the development of new Claude Code plugins
