Skip to main content

create-claude-plugin

Guides users in creating and distributing Claude Code plugins, enhancing collaboration and functionality through bundled skills and agents.

Install this skill

or
77/100

Security score

The create-claude-plugin skill was audited on Mar 5, 2026 and we found 5 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 397

Template literal with variable interpolation in command context

SourceSKILL.md
397```json
high line 1023

Template literal with variable interpolation in command context

SourceSKILL.md
1023- Environment variables: `${API_KEY}`
low line 1118

Access to hidden dotfiles in home directory

SourceSKILL.md
1118cd ~/.claude/plugins/marketplaces/marketplace-name/
low line 402

External URL reference

SourceSKILL.md
402"url": "https://mcp.github.com",
low line 938

External URL reference

SourceSKILL.md
938/plugin marketplace add https://git.company.com/team/plugin-name
Scanned on Mar 5, 2026
View Security Dashboard