How do I trigger a plugin audit?

You can trigger the skill by asking Claude to 'validate plugin', 'audit plugin structure', or 'check if my plugin is correct'.

Does it support hooks and autonomous agents?

Absolutely; it verifies hooks.json syntax, event names, and ensures agents are placed in the correct directory with valid YAML frontmatter.

What specifically does Plugin Checker validate?

It validates manifest JSON files, directory structures, agent frontmatter, skill triggers, command hints, security credentials, and hook portability.

How do I fix a 'plugin not found' error using this skill?

The skill identifies if your .claude-plugin/plugin.json is missing or contains invalid syntax and provides the specific code to fix the manifest.

Can it detect security vulnerabilities in my plugin?

Yes, it scans for hardcoded API keys, passwords, and insecure HTTP URLs, recommending the use of environment variables instead.

Plugin Checker

Name: Plugin Checker
Author: a-ariff

bya-ariff

•

Security & Testing

Validates and audits Claude Code plugin structures to ensure compliance with official specifications and best practices.

Plugin Checker is a comprehensive diagnostic utility designed to streamline the development and troubleshooting of Claude Code plugins. It provides automated validation for manifest files, directory architectures, agent configurations, and hook implementations, helping developers identify structural issues, security vulnerabilities, and misconfigured triggers. By following a rigorous 7-point checklist and offering actionable fix recommendations, this skill ensures that plugins are production-ready, portable, and fully compatible with the Claude Code ecosystem.

Key Features

011 GitHub stars

02Security auditing for hardcoded credentials and unsafe script patterns

03Comprehensive manifest validation for .claude-plugin/plugin.json

04Directory structure auditing for agents, skills, commands, and hooks

05Automated validation reporting with prioritized fix recommendations

06YAML frontmatter and trigger phrase verification for agents and skills

Use Cases

01Pre-deployment auditing to ensure a plugin meets repository standards

02Debugging 'plugin not found' or 'skill not triggering' errors during development

03Verifying hook portability and script execution permissions before distribution

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add a-ariff/ariff-claude-plugins plugin-checker

For use in Claude.ai and ChatGPT

Download Skill