What does the Plugin Validator check for?

It checks for required files (README, LICENSE, plugin.json), JSON schema validity, frontmatter correctness, security vulnerabilities like hardcoded secrets, and marketplace compliance.

Is this skill specific to a certain repository?

While optimized for the claude-code-plugins repository standards, its core validation logic is applicable to general Claude Code plugin structure and development.

Does it handle security scans?

Yes, it scans for API keys, AWS tokens, private keys, and potentially dangerous shell commands to ensure the plugin is safe for distribution.

Can it fix errors automatically?

Yes, it can automatically fix script permissions (chmod +x), reformat JSON using jq, sync marketplace versions, and add missing license files from the root directory.

How do I trigger the validation process?

Simply ask Claude to 'validate plugin', 'check plugin', or 'verify plugin' within your project directory to initiate the comprehensive scan.

Plugin Validator

Name: Plugin Validator
Author: intent-solutions-io

byintent-solutions-io

0•

Security & Testing

Ensures Claude Code plugins meet structural, security, and marketplace standards through automated validation and auto-fixing.

The Plugin Validator is a specialized tool for developers building Claude Code plugins, designed to enforce repository standards and prevent common deployment errors. It automatically scans plugin directories for required files, validates JSON schemas and frontmatter, performs security checks for hardcoded secrets, and ensures marketplace compliance. By aligning with CI workflows, it provides local validation and automated fixes for permissions and formatting, streamlining the plugin development and contribution process before committing code.

Key Features

01Security scanning for hardcoded secrets and dangerous commands

02CI-compatible reporting with prioritized issue levels

03Automated JSON schema and frontmatter validation

04Auto-fix capabilities for script permissions and formatting

05Marketplace compliance verification against repository standards

060 GitHub stars

Use Cases

01Verifying a new plugin is ready for submission to the official marketplace

02Debugging CI failures by running identical local validation checks

03Automating routine maintenance like fixing script permissions or syncing versions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add intent-solutions-io/plugins-nixtla plugin-validator

For use in Claude.ai and ChatGPT

Download Skill