菜单
Audit a marketplace (or a single plugin) — run the shipping-hygiene sensor, structural checks (every catalog entry has a dir, every dir has a manifest, versions in sync), and the portability sweep. Reports findings and offers fixes. Use to validate a marketplace is healthy.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Scaffold a new plugin inside an existing marketplace — the shipped dir skeleton, plugin.json, install.sh with the Git-Bash guard, settings.json, and CLAUDE.md; then register it in the catalog and in release-please packages with the catalog extra-files sync. Use when adding a plugin to a marketplace.
Generate the gated SessionStart install hook plus cloud-setup.sh and a "use skills directly" fallback so the marketplace is usable in Claude Code web/cloud sessions. Use to make a marketplace cloud-aware.
Scaffold a new Claude Code plugin-marketplace monorepo — catalog, repo-root tests/scripts/docs trees, CI workflows, release-please config, dev-setup, the hygiene sensor, and a root CLAUDE.md. Use when starting a fresh marketplace repository.
Run shellcheck -x over every shipped and dev shell script, flag bash-4/GNU-only constructs, verify env-bash shebangs, and check that each install.sh has the Git-Bash-on-Windows guard. Use to validate cross-platform portability (macOS bash 3.2 / BSD / Windows Git Bash).
Wire release-please with one package per plugin and the marketplace.json extra-files jsonpath sync, so plugin.json, the release tag, and the catalog entry can never drift. Use to set up or repair automated versioning + catalog sync.
| name | audit-plugin |
| description | Audit a marketplace (or a single plugin) — run the shipping-hygiene sensor, structural checks (every catalog entry has a dir, every dir has a manifest, versions in sync), and the portability sweep. Reports findings and offers fixes. Use to validate a marketplace is healthy. |
| user-invocable | true |
[name]Audit the whole marketplace, or one plugin if [name] is given.
Read ${CLAUDE_PLUGIN_ROOT}/knowledge/marketplace-conventions.md (§3–§5).
Hygiene sensor (§3). Run bats tests/repo. This proves the four
invariants: refs resolve, no plugin-escaping refs, hook commands resolve, no
shipped test/build tooling. If tests/repo/shipped_script_refs_test.bats is
missing, offer to install it from
${CLAUDE_PLUGIN_ROOT}/templates/tests/shipped_script_refs_test.bats.
Structural checks. Run bash scripts/structural-check.sh:
plugins/<name>/ with a plugin.jsonversion == manifest version, and source.ref == <name>-v<version>Portability sweep. Run bash scripts/portability-check.sh (or invoke
/portability-check): shellcheck -x + shebang verification over shipped +
dev scripts.
Report. For each failure, name the file, the invariant it violates, and a
concrete fix. If [name] was given, filter the report to that plugin. Offer
to apply the fixes; only edit files after the user confirms (or proceed if
the fix is mechanical and unambiguous, e.g. syncing a drifted version).
Be a sensor, not a narrator: surface findings, propose fixes, then act.