Skip to main content

Plugin Structure

Guides users in creating and organizing plugins for Claude Code, ensuring proper structure and configuration for seamless integration.

Install this skill

or
4/100

Security score

The Plugin Structure skill was audited on Mar 1, 2026 and we found 12 security issues across 2 threat categories, including 4 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 17

Template literal with variable interpolation in command context

SourceSKILL.md
17- Portable path references using `${CLAUDE_PLUGIN_ROOT}`
medium line 216

Template literal with variable interpolation in command context

SourceSKILL.md
216```json
medium line 240

Template literal with variable interpolation in command context

SourceSKILL.md
240```json
medium line 252

Template literal with variable interpolation in command context

SourceSKILL.md
252```
high line 260

Template literal with variable interpolation in command context

SourceSKILL.md
260Use `${CLAUDE_PLUGIN_ROOT}` environment variable for all intra-plugin path references:
medium line 262

Template literal with variable interpolation in command context

SourceSKILL.md
262```json
medium line 287

Template literal with variable interpolation in command context

SourceSKILL.md
287```json
medium line 292

Template literal with variable interpolation in command context

SourceSKILL.md
292```markdown
medium line 297

Template literal with variable interpolation in command context

SourceSKILL.md
297```bash
high line 388

Template literal with variable interpolation in command context

SourceSKILL.md
388- Skills: Topic-focused (`error-handling`, `api-design`)
high line 457

Template literal with variable interpolation in command context

SourceSKILL.md
457- Replace all hardcoded paths with `${CLAUDE_PLUGIN_ROOT}`
low line 74

External URL reference

SourceSKILL.md
74"url": "https://example.com"
Scanned on Mar 1, 2026
View Security Dashboard