deploy-local-plugin
Automates deployment of local plugin files to Claude Code for immediate testing, streamlining the development process.
Install this skill
Security score
The deploy-local-plugin skill was audited on Mar 7, 2026 and we found 23 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 233 | ```bash |
Template literal with variable interpolation in command context
| 250 | ```bash |
Template literal with variable interpolation in command context
| 263 | **Executable**: `${CLAUDE_PLUGIN_ROOT}/skills/deploy-local-plugin/deploy.sh` |
Access to hidden dotfiles in home directory
| 36 | 1. Plugins are loaded from `~/.claude/plugins/cache/` not the repository |
Access to hidden dotfiles in home directory
| 102 | Selections are persisted to `~/.claude/plugin-skill-selection.json`. Format: |
Access to hidden dotfiles in home directory
| 119 | | `plugins/onex/commands/` | `~/.claude/plugins/cache/omninode-tools/onex/{version}/commands/` | |
Access to hidden dotfiles in home directory
| 120 | | `plugins/onex/skills/` | `~/.claude/plugins/cache/omninode-tools/onex/{version}/skills/` | |
Access to hidden dotfiles in home directory
| 121 | | `plugins/onex/agents/` | `~/.claude/plugins/cache/omninode-tools/onex/{version}/agents/` | |
Access to hidden dotfiles in home directory
| 122 | | `plugins/onex/hooks/` | `~/.claude/plugins/cache/omninode-tools/onex/{version}/hooks/` | |
Access to hidden dotfiles in home directory
| 123 | | `plugins/onex/.claude-plugin/` | `~/.claude/plugins/cache/omninode-tools/onex/{version}/.claude-plugin/` | |
Access to hidden dotfiles in home directory
| 162 | Target: ~/.claude/plugins/cache/omninode-tools/onex/2.1.3/ |
Access to hidden dotfiles in home directory
| 189 | ~/.claude/plugins/cache/omninode-tools/onex/current/ -> <version>/ |
Access to hidden dotfiles in home directory
| 192 | If `PLUGIN_PYTHON_BIN` is set in `~/.omnibase/.env` with a version-pinned path (e.g. |
Access to hidden dotfiles in home directory
| 197 | PLUGIN_PYTHON_BIN=~/.claude/plugins/cache/omninode-tools/onex/current/lib/.venv/bin/python3 |
Access to hidden dotfiles in home directory
| 212 | Ensure write access to `~/.claude/plugins/`: |
Access to hidden dotfiles in home directory
| 214 | ls -la ~/.claude/plugins/ |
Access to hidden dotfiles in home directory
| 222 | cat ~/.claude/plugins/installed_plugins.json | jq '.plugins["onex@omninode-tools"]' |
Access to hidden dotfiles in home directory
| 247 | `~/.omnibase/.env` to the version-agnostic form using the `current/` symlink. |
Access to hidden dotfiles in home directory
| 255 | ~/.omnibase/.env |
Access to hidden dotfiles in home directory
| 268 | - Installed plugins registry: `~/.claude/plugins/installed_plugins.json` |
Access to .env file
| 192 | If `PLUGIN_PYTHON_BIN` is set in `~/.omnibase/.env` with a version-pinned path (e.g. |
Access to .env file
| 247 | `~/.omnibase/.env` to the version-agnostic form using the `current/` symlink. |
Access to .env file
| 255 | ~/.omnibase/.env |
Install this skill with one command
/learn @omninode-ai/deploy-local-plugin