Repository navigation
fix(plugins): resolve unreachable and mistagged plugins from the audit - #46
Merged
Merged
Conversation
- Split `phuryn-pm-skills` into 9 `pm-*` plugins, one per plugin in the repo - Split `plugins-for-claude-natives` into 14 plugins, its `dev` plugin listed as `tech-decision-tools` - Split `stitch-skills` into `stitch-build`, `stitch-design` and `stitch-utilities` - Replace the 5 HashiCorp `packer-*` and `terraform-*` entries with `hashicorp-packer` and `hashicorp-terraform` - Rename `claude-in-chrome-troubleshooting` to `chrome-mcp-troubleshooting` to follow the upstream rename - Remove `sentry-for-ai`, already in the official marketplace as `sentry` - Tag `edamame-claude-code` with `hooks` [CONTRIBUTORS] - `validate-plugin.yml` flags a `git-subdir` duplicate only when both `url` and `path` match - Local audit: 323 plugins, 0 unreachable, 0 mistagged - `marketplace.json` left for CI to regenerate Refs #28
Contributor
Plugin Validation ✅
Great plugin! Add this badge to your plugin's README for better discovery: Markdown: [](https://agenthub.nullorder.org)HTML: <a href="https://agenthub.nullorder.org">
<img src="https://agenthub.nullorder.org/badge.svg" alt="AgentHub" />
</a> |
5 of 13 tasks
anistark
added a commit
that referenced
this pull request
Oct 23, 2026
## Summary **All 33 `trailofbits/skills` entries now list `CC-BY-SA-4.0` instead of `MIT`**, matching the upstream repo license - Upstream [`LICENSE`](https://github.com/trailofbits/skills/blob/main/LICENSE) is CC BY-SA 4.0, and `gh api repos/trailofbits/skills --jq .license.spdx_id` reports `CC-BY-SA-4.0` - No plugin folder upstream has its own LICENSE file or a `license` in `.claude-plugin/plugin.json`, so every entry takes the repo license - Only the `license` field changed, no version bumps Testing: `jq empty` passes on all 33 files. `./scripts/build-marketplace.sh` builds 323 plugins, output left for CI. Follow-up to the heads-up in #46 (it said 35 entries, the actual count is 33). ### Type of change - [ ] Add a plugin → please use the [add-plugin template](?expand=1&template=add-plugin.md) instead - [ ] Update a plugin → please use the [update-plugin template](?expand=1&template=update-plugin.md) instead - [ ] Remove a plugin → please use the [remove-plugin template](?expand=1&template=remove-plugin.md) instead - [ ] Marketplace / registry change (schema, validation, `plugins/` tooling) - [ ] Site / docs change (landing page, README, content) - [ ] CI / workflow / repo tooling - [x] Bug fix - [ ] Other ### Checklist _Uncheck any item that does not apply or has not been completed._ - [x] I have read and understood the [contributing guidelines](../CONTRIBUTING.md) - [x] Changes are scoped and focused on a single concern - [x] Tested locally where applicable - [ ] Updated relevant docs (README, site content, etc.) if behavior changed - [x] Did **not** hand-edit `marketplace.json` (it is generated)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Resolves every plugin the weekly audit flagged in #28, which stays open as the audit's tracking issue.
Multi-plugin repos split into one entry per plugin, since each pointed at a marketplace root that installs nothing
phuryn-pm-skillsinto 9pm-*pluginsplugins-for-claude-nativesinto 14 plugins, its genericdevplugin listed astech-decision-toolsstitch-skillsintostitch-build,stitch-designandstitch-utilitiesMoved or renamed upstream
packer-*/terraform-*entries replaced byhashicorp-packerandhashicorp-terraform, after HashiCorp merged them intoplugins/packerandplugins/terraform(prefixed to avoid confusion with the officialterraformMCP plugin)claude-in-chrome-troubleshootingrenamed tochrome-mcp-troubleshooting, following trailofbits' rename away from the reserved nameRemoved
sentry-for-ai: it is the source ofgetsentry/plugin-claude, already in the official marketplace assentryFalse alarms
edamame-claude-codeandpostgres-skillsare reachable, the audit hit a transient 403. Tagged edamame with thehooksit shipsValidator fix
validate-plugin.ymlnow flags agit-subdirduplicate only when bothurlandpathmatch. Before, any two plugins from the same monorepo failed, which would have failed this PR on every split entryTesting: local audit reports 323 plugins, 0 unreachable, 0 mistagged. Ran the duplicate and field-validation steps from
validate-plugin.ymlagainstmain, both pass../scripts/build-marketplace.shbuilds 323 plugins, output left for CI.Heads-up: all 35 trailofbits entries list
MIT, buttrailofbits/skillsis nowCC-BY-SA-4.0. Left for a separate PR.Refs #28
Type of change
plugins/tooling)Checklist
Uncheck any item that does not apply or has not been completed.
marketplace.json(it is generated)