plugin-structure
Guides users in creating and organizing plugins for Claude Code, ensuring proper structure and configuration for seamless integration.
Install this skill
Security score
The plugin-structure skill was audited on Feb 12, 2026 and we found 12 security issues across 2 threat categories, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 17 | - Portable path references using `${CLAUDE_PLUGIN_ROOT}` |
Template literal with variable interpolation in command context
| 216 | ```json |
Template literal with variable interpolation in command context
| 240 | ```json |
Template literal with variable interpolation in command context
| 252 | ``` |
Template literal with variable interpolation in command context
| 260 | Use `${CLAUDE_PLUGIN_ROOT}` environment variable for all intra-plugin path references: |
Template literal with variable interpolation in command context
| 262 | ```json |
Template literal with variable interpolation in command context
| 287 | ```json |
Template literal with variable interpolation in command context
| 292 | ```markdown |
Template literal with variable interpolation in command context
| 297 | ```bash |
Template literal with variable interpolation in command context
| 388 | - Skills: Topic-focused (`error-handling`, `api-design`) |
Template literal with variable interpolation in command context
| 457 | - Replace all hardcoded paths with `${CLAUDE_PLUGIN_ROOT}` |
External URL reference
| 74 | "url": "https://example.com" |