plugin-auditor

Automatically audits Claude Code plugins for security, best practices, and compliance.

• Audits plugins for security vulnerabilities
• Checks CLAUDE.md compliance and quality standards
• Validates plugin structure and marketplace listing
• Ensures code safety and usability

• Critical: No hardcoded secrets
• Critical: No AWS keys (AKIA...)
• Critical: No private keys (BEGIN PRIVATE KEY)
• Critical: No dangerous commands (rm -rf /, eval())
• Critical: No command injection vectors
• Critical: No obfuscated code
• Must: Follows CLAUDE.md structure
• Must: Has proper versioning and documentation

1. 1.User mentions audit plugin, security review, or best practices check
2. 2.System runs security, structure, and compliance scans via CLI commands
3. 3.Generates a formatted audit report with pass/fail status and issues
4. 4.Highlights critical violations and recommends fixes