What does the Plugin Validator check?

It checks directory structure, JSON schemas, frontmatter formatting, script permissions, security vulnerabilities, and marketplace compliance.

Does it scan for security risks?

Yes, it scans for hardcoded secrets, API keys, private keys, and potentially dangerous shell commands.

Can it fix errors automatically?

Yes, it can automatically resolve issues like incorrect script permissions, JSON formatting, and missing license files.

How do I trigger the validation?

Simply use natural language commands like 'validate plugin,' 'check plugin,' or 'verify plugin' within your Claude Code environment.

Is it compatible with GitHub Actions?

It is designed to mirror the checks used in standard Claude Code plugin CI workflows, ensuring local results match build server logs.

Plugin Validator

Name: Plugin Validator
Author: jeremylongshore

byjeremylongshore

•

883

Security & Testing

Validates Claude Code plugins for structural integrity, schema compliance, and security standards.

About

Plugin Validator is a comprehensive quality assurance tool designed specifically for the Claude Code ecosystem. It automates the verification of plugin structures, JSON schemas, and frontmatter requirements while performing deep security scans for hardcoded secrets. By ensuring alignment with repository-specific standards and marketplace compliance, it streamlines the development-to-publication workflow and helps developers resolve common issues like incorrect permissions or version mismatches before committing code.

Key Features

883 GitHub stars
Automated JSON schema and frontmatter verification
Automated fixes for script permissions and JSON formatting
Directory structure and marketplace compliance auditing
CI/CD compatibility with local reporting and status summaries
Deep security scanning for hardcoded secrets and API keys

Use Cases

Debugging CI/CD failures by running identical checks locally
Pre-commit validation to ensure a plugin meets repository standards
Auditing third-party plugins for security vulnerabilities or broken links

About

Key Features

883 GitHub stars
Automated JSON schema and frontmatter verification
Automated fixes for script permissions and JSON formatting
Directory structure and marketplace compliance auditing
CI/CD compatibility with local reporting and status summaries
Deep security scanning for hardcoded secrets and API keys

Use Cases

Debugging CI/CD failures by running identical checks locally
Pre-commit validation to ensure a plugin meets repository standards
Auditing third-party plugins for security vulnerabilities or broken links