plugin-structure

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
7
Flagged
7
Chunks
13
Flagged Files (7)
README.mdHIGH
78.3%

Malicious tool definition detected

Tool: README.md Description: # Plugin Structure Skill Comprehensive guidance on Claude Code plugin architecture, directory layout, and best practices.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: plugin-structure description: This skill should be used when the user asks to "create a plugin", "scaffold a plugin", "understand plugin structure", "organize plugin components", "set up plugin.json", "use ${CLAUDE_PLUGIN_ROOT}", "add commands/agents/skills/hooks", "configure auto-discovery", or needs guidance on plugin directory layout, manifest configuration, component organization, file naming conventions, or Claude Code plugin architecture best pra

Tool: SKILL.md [2/2] Description: - `validate-input.sh` - `generate-report.py` - `process-data.js` **Documentation**: Use kebab-case markdown files - `api-reference.md` - `migration-guide.md` - `best-practices.md` **Configuration**: Use standard names - `hooks.json` - `.mcp.json` - `plugin.json` ## Auto-Discovery Mechanism Claude Code automatically discovers and loads components: 1.

examples/advanced-plugin.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/advanced-plugin.md [1/3] Description: # Advanced Plugin Example A complex, enterprise-grade plugin with MCP integration and advanced organization.

Tool: examples/advanced-plugin.md [2/3] Description: flags **Secrets**: Store sensitive data - API keys and tokens - Database credentials - TLS certificates Use external secret management (Vault, AWS Secrets Manager) for production.

Tool: examples/advanced-plugin.md [3/3]

examples/minimal-plugin.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/minimal-plugin.md Description: # Minimal Plugin Example A bare-bones plugin with a single command.

examples/standard-plugin.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/standard-plugin.md [1/2] Description: # Standard Plugin Example A well-structured plugin with commands, agents, and skills.

Tool: examples/standard-plugin.md [2/2] Description: log sensitive information - Keep dependencies updated ## Detailed Guidelines For comprehensive style guides by language, see: - `references/style-guide.md` ``` ### skills/code-standards/references/style-guide.md ```markdown # Comprehensive Style Guide Detailed style guidelines for all supported languages.

references/component-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/component-patterns.md [1/2] Description: # Component Organization Patterns Advanced patterns for organizing plugin components effectively.

Tool: references/component-patterns.md [2/2] Description: └── utils/ ├── log.sh └── notify.sh ``` **When to use**: - 10+ scripts - Clear categories - Reusable utilities ### Language-Based Organization Group by programming language: ``` scripts/ ├── bash/ │ ├── build.sh │ └── deploy.sh ├── python/ │ ├── analyze.py │ └── report.py └── javascript/ ├── bundle.js └── optimize.js ``` **When to use**: - Multi-language scripts - Different runtime requirements - Language-specific dependencies ## Cross-Co

references/manifest-reference.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/manifest-reference.md [1/2] Description: # Plugin Manifest Reference Complete reference for `plugin.json` configuration.

Tool: references/manifest-reference.md [2/2] Description: fields 3.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
7
Files Flagged
7
Chunks Analyzed
13
Analyzed
Feb 21, 2026, 04:47 PM
Security Audit — runlayer — plugin-structure