How do I trigger a plugin audit with this skill?

You can trigger it by asking Claude to 'validate plugin', 'check plugin structure', 'verify plugin', or 'audit my plugin'.

What specifically does the Plugin Checker validate?

It validates the plugin.json manifest, directory hierarchies, agent/skill/command YAML frontmatter, hook logic in hooks.json, and security vulnerabilities like hardcoded secrets.

Can it detect pathing issues in hooks?

Yes, it checks for path portability and ensures that scripts use the ${CLAUDE_PLUGIN_ROOT} variable instead of hardcoded absolute paths.

Does it provide a report of the findings?

Yes, it generates a standardized Plugin Validation Report including a summary, critical issues that must be fixed, warnings, and positive findings.

Claude Plugin Validator

Name: Claude Plugin Validator
Author: a-ariff

bya-ariff

0•

Security & Testing

Validates Claude Code plugin structures, configurations, and security practices to ensure seamless integration and deployment.

The Plugin Checker skill provides a comprehensive auditing framework for Claude Code developers to verify their plugin components against official standards. It automates the inspection of manifest files, directory structures, agent frontmatter, and hook configurations, identifying common issues like incorrect naming conventions, missing files, or path portability errors. By following a standardized validation checklist, this skill helps developers build robust, secure, and production-ready plugins while minimizing manual troubleshooting during the development lifecycle.

Key Features

01Agent and skill frontmatter syntax and trigger phrase auditing

020 GitHub stars

03Hook configuration verification and script portability checking

04Detailed validation reports with prioritized fix recommendations

05Security auditing for hardcoded credentials and unsafe URL protocols

06Automated manifest (plugin.json) and directory structure validation

Use Cases

01Auditing a new plugin before local testing or public distribution

02Ensuring security compliance and best practices in complex hook configurations

03Troubleshooting 'plugin not found' or 'skill not triggering' errors

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add a-ariff/ariff-code-config plugin-checker

For use in Claude.ai and ChatGPT

Download Skill