How do I trigger a plugin audit?

You can trigger the skill by asking Claude to 'validate plugin', 'audit plugin structure', or 'check if my plugin is correct'.

Does it support hooks and autonomous agents?

Absolutely; it verifies hooks.json syntax, event names, and ensures agents are placed in the correct directory with valid YAML frontmatter.

What specifically does Plugin Checker validate?

It validates manifest JSON files, directory structures, agent frontmatter, skill triggers, command hints, security credentials, and hook portability.

How do I fix a 'plugin not found' error using this skill?

The skill identifies if your .claude-plugin/plugin.json is missing or contains invalid syntax and provides the specific code to fix the manifest.

Can it detect security vulnerabilities in my plugin?

Yes, it scans for hardcoded API keys, passwords, and insecure HTTP URLs, recommending the use of environment variables instead.

Plugin Checker

Name: Plugin Checker
Author: a-ariff

bya-ariff

•

安全与测试

Validates and audits Claude Code plugin structures to ensure compliance with official specifications and best practices.

关于

Plugin Checker is a comprehensive diagnostic utility designed to streamline the development and troubleshooting of Claude Code plugins. It provides automated validation for manifest files, directory architectures, agent configurations, and hook implementations, helping developers identify structural issues, security vulnerabilities, and misconfigured triggers. By following a rigorous 7-point checklist and offering actionable fix recommendations, this skill ensures that plugins are production-ready, portable, and fully compatible with the Claude Code ecosystem.

主要功能

1 GitHub stars
Security auditing for hardcoded credentials and unsafe script patterns
Comprehensive manifest validation for .claude-plugin/plugin.json
Directory structure auditing for agents, skills, commands, and hooks
Automated validation reporting with prioritized fix recommendations
YAML frontmatter and trigger phrase verification for agents and skills

使用场景

Pre-deployment auditing to ensure a plugin meets repository standards
Debugging 'plugin not found' or 'skill not triggering' errors during development
Verifying hook portability and script execution permissions before distribution

关于

主要功能

1 GitHub stars
Security auditing for hardcoded credentials and unsafe script patterns
Comprehensive manifest validation for .claude-plugin/plugin.json
Directory structure auditing for agents, skills, commands, and hooks
Automated validation reporting with prioritized fix recommendations
YAML frontmatter and trigger phrase verification for agents and skills

使用场景

Pre-deployment auditing to ensure a plugin meets repository standards
Debugging 'plugin not found' or 'skill not triggering' errors during development
Verifying hook portability and script execution permissions before distribution