Comprehensive validation for Claude Code marketplaces and plugins with quality scoring, security scanning, and automated checks
/plugin marketplace add dhofheinz/open-plugins
/plugin install marketplace-validator-plugin@dhofheinz/open-plugins
Validate category assignment against OpenPlugins standard category list.
Validate plugin names against OpenPlugins lowercase-hyphen naming convention.
Execute comprehensive OpenPlugins and Claude Code best practices validation with complete compliance reporting.
Enforce OpenPlugins and Claude Code best practices for naming, versioning, and standards compliance
Validate keyword selection for relevance, count, and quality against OpenPlugins standards.
Validate version strings against Semantic Versioning 2.0.0 specification.
Validate LICENSE file presence, format, and consistency with plugin metadata.
Validate README.md completeness, structure, and quality against OpenPlugins standards.
Execute comprehensive documentation validation workflow covering all documentation aspects.
Validate documentation completeness, format, and quality for plugins and marketplaces
Validate CHANGELOG.md format compliance with "Keep a Changelog" standard.
Validate example code quality, detecting placeholders and ensuring examples are complete and runnable.
Calculate comprehensive quality score (0-100) based on validation results with star rating.
Execute comprehensive quality analysis orchestrating all sub-operations to generate complete assessment.
Generate comprehensive quality report in multiple formats (markdown, JSON, HTML) with detailed findings and recommendations.
Categorize and prioritize validation issues by severity and impact using P0/P1/P2 tier system.
Deep quality analysis with scoring, recommendations, and actionable reports
Generate actionable improvement suggestions based on current quality score with effort estimates and expected impact.
Validate plugin entries in marketplace configuration for completeness and format compliance.
Verify all required fields are present and non-empty in plugin or marketplace configuration.
Execute complete schema validation workflow: JSON syntax → Required fields → Format compliance → Plugin entries (if marketplace).
Validate JSON schemas, required fields, and format compliance for marketplaces and plugins
Validate format compliance for semver, URLs, email addresses, and naming conventions.
Validate JSON file syntax with multi-backend support (jq + python3 fallback).
Audit file permissions to detect world-writable files, overly permissive scripts, and inappropriate executability.
Validate URL safety, enforce HTTPS, and detect malicious patterns in URLs and code.
Execute comprehensive security audit combining all security scans: secrets, URLs, files, and permissions.
Detect dangerous files, sensitive configurations, and files that should not be committed to version control.
Detect exposed secrets, API keys, tokens, passwords, and private keys using 50+ pattern signatures.
Comprehensive security scanning for secrets, vulnerabilities, and unsafe practices
Comprehensive validation of Claude Code marketplace.json with quality scoring
Comprehensive validation of Claude Code plugin.json with structure checks
Quick validation mode for marketplaces and plugins (essential checks only)
Automatically detect target type and execute the most appropriate validation workflow.
Compare validation quality metrics across multiple plugins or marketplaces for relative analysis.
Automatically detect whether the validation target is a marketplace or plugin based on file structure.
Execute complete quality audit with detailed analysis, scoring, and recommendations.
Execute fast essential validation checks for rapid feedback on critical issues only.
Intelligent validation orchestrator with auto-detection and progressive validation workflows
Comprehensive feature development workflow with specialized agents for codebase exploration, architecture design, and quality review
Comprehensive PR review agents specializing in comments, tests, error handling, type design, code quality, and code simplification
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
Quantitative analysis, algorithmic trading strategies, financial modeling, portfolio risk management, and backtesting