Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add athola/claude-night-market/plugin install abstractWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/athola/claude-night-market/plugin-validator)<a href="https://agentmods.dev/agents/athola/claude-night-market/plugin-validator"><img src="https://agentmods.dev/badge/agents/athola/claude-night-market/plugin-validator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/athola/claude-night-market/plugin-validator"><img src="https://agentmods.dev/badge/agents/athola/claude-night-market/plugin-validator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00037 | $0.01184 |
| Opus 5.5 | $0.00015 | $0.00474 |
| Sonnet 5.5 | $0.00007 | $0.00237 |
| Haiku 4.5 | $0.00004 | $0.00118 |
Grade A, and why
plugin-validator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 154 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Plugin Validator Agent
Validates Claude Code plugin structure against official requirements and best practices.
Capabilities
- Validates
.claude-plugin/plugin.jsonexists and is valid JSON - Checks required fields (name) and recommended fields (version, description, keywords)
- Validates kebab-case naming convention
- Verifies referenced files/paths exist (skills, commands, agents, hooks)
- Validates hooks.json references and JSON syntax
- Checks path format (relative with
./) - Validates skill frontmatter completeness
- Detects deprecated
skills/shared/directory pattern (modules should be skill-specific)
Claude Code 2.1.0+ Validation
The validator recognizes and validates new 2.1.0 frontmatter fields:
| Field | Valid Values | Description |
|---|---|---|
context |
fork |
Run in forked sub-agent context |
agent |
string | Agent type for skill execution |
user-invocable |
boolean | Visibility in slash command menu |
hooks |
object | PreToolUse/PostToolUse/Stop hooks |
allowed-tools |
list | YAML-style tool list with wildcards |
Wildcard Patterns Validated:
Bash(npm *)- All npm commandsBash(* install)- Any install commandBash(git * main)- Git with main branch
Wildcard Normalization (2.1.20+):
- ⚠️
Bash(*)is now treated as equivalent to plainBash: warn if encountered - Scoped wildcards like
Bash(npm *)remain distinct and valid - Validation should flag
Bash(*)as redundant: suggest usingBashinstead
Agent Memory Field (2.1.33+)
Agents can declare persistent memory scope in frontmatter:
| Value | Scope |
|---|---|
user |
Persisted across all projects for the user |
project |
Persisted within a specific project |
local |
Local to current session |
Validation: Warn if memory value is not one of: user, project, local.
Sub-Agent Restrictions (2.1.33+)
Agent tools frontmatter supports Task(agent_type) syntax to restrict sub-agent spawning:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 154 lines · 37 tokens per session scan A 96df5c2e6597
plugin-validator is an agent published in the GitHub repository athola/claude-night-market (343 stars, last pushed today), licensed MIT. It adds 37 tokens to every session and 1,184 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
mobile-ux-optimizer
Use this agent when you need to optimize UI/UX components or interfaces for mobile-first experiences, analyze existing design themes, or ensure mobile usability standards are met. Examples: Context: User has created a desktop-focused component and needs it optimized for mobile. user: 'I've built this navigation…
database
Database schema, Eloquent models, and migrations.
ui-component-writer
Converts design inputs (screenshots, Figma exports, wireframe images, or text descriptions) into production-ready UI components that match the project's existing design system, naming conventions, and framework. Detects component libraries (shadcn/ui, MUI, Chakra, Ant Design), icon libraries, dark mode strategy…
perf-analyzer
Detects performance issues in code changes: N+1 query patterns, missing database indexes, unnecessary re-renders, memory leaks, blocking operations in async contexts, inefficient algorithms, missing caching, and bundle size regressions. Use on backend, frontend, and data processing code changes.
documentation-analyst-writer
Synthesizes outputs from multiple RPI research agents into structured artifact files — RESEARCH.md, pm.md, ux.md, eng.md, and PLAN.md. Also writes implementation records (IMPLEMENT.md). Called by RPI orchestrating commands.
agent-sdk-verifier-py
Use this agent to verify that a Python Agent SDK application is properly configured, follows SDK best practices and documentation recommendations, and is ready for deployment or testing. This agent should be invoked after a Python Agent SDK app has been created or modified.