plugin-submitter

plugin-submitter is an agent for Claude Code from jimmc414/claude-code-plugin-marketplace. It costs 37 tokens per session (1,619 once invoked), scanned A, original, MIT.

An agent that submits a finished plugin to a marketplace repository by opening a GitHub pull request. A pull request is a proposed change for repository maintainers to review.

In plain words
What is it for?
Use it to validate a packaged plugin, choose a marketplace repository, and create its submission pull request.
Why use it?
It checks that the plugin is ready and helps handle the repository submission steps, including required command-line authentication.

Agent for Claude Code

Written for Claude Code: PostToolUse hook event. Also seen: model in frontmatter; mentions .claude-plugin.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is python tools/validate.py <plugin-name>.

Part of the plugin-publisher plugin — 1 skill, 3 agents shipped together

Good fit Use it to validate a packaged plugin, choose a marketplace repository, and create its submission pull request.

Compare 6 agents from other repositories ↓
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/jimmc414/claude-code-plugin-marketplace
agentmods
npx agentmods add agents/jimmc414/claude-code-plugin-marketplace/plugin-submitter

Made for: Claude Code.

Or install plugin-publisher, the plugin that ships this one along with the rest of its 1 skill, 3 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for plugin-submitter

README.md
[![agentmods](https://agentmods.dev/badge/agents/jimmc414/claude-code-plugin-marketplace/plugin-submitter/github.svg)](https://agentmods.dev/agents/jimmc414/claude-code-plugin-marketplace/plugin-submitter)
Your own site
<a href="https://agentmods.dev/agents/jimmc414/claude-code-plugin-marketplace/plugin-submitter"><img src="https://agentmods.dev/badge/agents/jimmc414/claude-code-plugin-marketplace/plugin-submitter/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for plugin-submitter

Your own site · 80×15
<a href="https://agentmods.dev/agents/jimmc414/claude-code-plugin-marketplace/plugin-submitter"><img src="https://agentmods.dev/badge/agents/jimmc414/claude-code-plugin-marketplace/plugin-submitter.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 37 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,619 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00037 $0.01619
Opus 5.5 $0.00015 $0.00648
Sonnet 5.5 $0.00007 $0.00324
Haiku 4.5 $0.00004 $0.00162

Measured 1mo ago against content hash 28b923cf6c45, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

plugin-submitter scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/plugin-publisher/agents/plugin-submitter.md · 338 lines

How it starts

The opening of the file, as written. The whole thing — 338 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Plugin Submitter Agent

You are a specialized agent that handles the submission of packaged plugins to marketplace repositories via GitHub pull requests.

Prerequisites

Before proceeding, verify:

  1. gh CLI is installed and authenticated
  2. git is installed
  3. Plugin has been validated
# Check gh CLI
gh --version

# Check authentication
gh auth status

If not authenticated, guide user:

gh auth login

When Invoked

You will receive either:

  • A plugin name/path that has been packaged
  • Direct request to submit a specific plugin
  • Output from plugin-packager indicating success

Step 1: Identify Plugin and Marketplace

Confirm what's being submitted:

## Submission Details

**Plugin:** <plugin-name>
**Location:** plugins/<plugin-name>/

**Target Marketplace:**
- Default: jimmc414/claude-code-plugin-marketplace
- Or specify: <owner>/<repo>

Proceed with submission?

Step 2: Validate Plugin is Ready

Run final validation:

# If in marketplace with tools
python tools/validate.py <plugin-name>

# Check required files exist
ls plugins/<plugin-name>/.claude-plugin/plugin.json
ls plugins/<plugin-name>/README.md

Read and verify plugin.json has all required fields:

  • name
  • version
  • description
  • author.name

Step 3: Check Current Git Status

Determine the current situation:

# Are we in a git repo?
git status

# Are we in the target marketplace repo?
git remote -v

# What branch are we on?
git branch --show-current

Step 4: Handle Repository Setup

Scenario A: Already in target marketplace (contributor with write access)

# Create feature branch
git checkout -b add-<plugin-name>

# Stage plugin files
git add plugins/<plugin-name>/

# Regenerate catalog
python tools/generate_catalog.py
git add catalog.json

# Commit
git commit -m "Add <plugin-name> plugin

<description>

Components:
- Skills: X
- Agents: Y
- Commands: Z
- Hooks: yes/no"

Scenario B: Need to fork marketplace

# Fork the repository
gh repo fork <owner>/<repo> --clone

# Enter the forked repo
cd <repo-name>

# Create feature branch
git checkout -b add-<plugin-name>

# Copy plugin from original location
cp -r <original-plugin-path> plugins/

# Regenerate catalog
python tools/generate_catalog.py

# Stage and commit
git add plugins/<plugin-name>/ catalog.json
git commit -m "Add <plugin-name> plugin"

Read the full file on GitHub · 338 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 338 lines · 37 tokens per session scan A 28b923cf6c45

Subscribe to this mod's changes

plugin-submitter is an agent published in the GitHub repository jimmc414/claude-code-plugin-marketplace (4 stars, last pushed today), licensed MIT. It adds 37 tokens to every session and 1,619 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.

Related

Other agents, from other repositories

implementer

Scope-fenced implementation worker dispatched per phase by /implementation:implement-dispatch (directly, or chained from callers such as /work-items:work): executes exactly one brief inside its assigned or self-provisioned worktree, commits and pushes early unless the brief reserves commit authority to the…

melodic-software/claude-code-plugins · 80 tokens

scoped-implementer

Scope-fenced implementation worker for a phase the plan's routing table marks sonnet (closed scope fence, binary acceptance criteria, no open design decision, no cross-module contract change, no security-surface work), dispatched by /implementation:implement-dispatch with an explicit per-invocation model: executes…

melodic-software/claude-code-plugins · 126 tokens

compare-labeler

Read-only labeler for /docs-hygiene:compress compare: labels every difference between two versions of a skill directory and returns rows plus a VERDICT line. Dispatched by /docs-hygiene:compress; not intended for direct ad-hoc use.

melodic-software/claude-code-plugins · 57 tokens

drift-reader

Runs the read stage of the multi-agent:drift-audit workflow: lifts model, effort, subagent and workflow claims out of the repository files the prompt lists, with Read, Grep and Glob only. No web access, no shell, no edits. Dispatched by the drift-audit workflow; not intended for direct ad-hoc use.

melodic-software/claude-code-plugins · 75 tokens

pr-analyzer

Use this agent to analyze GitHub PRs -- check CI status, read review comments, assess merge readiness, and suggest next actions. Examples: User: "Check the status of my open PRs" Assistant: "I'll launch the pr-analyzer agent to check all your PR statuses." User: "Why is CI failing on my PR?" Assistant: "Let me launch…

Sagargupta16/claude-skills · 91 tokens

repo-auditor

Use this agent to audit a repository for hygiene issues -- missing README, LICENSE, .gitignore, .env.example, stale branches, and configuration problems. Examples: User: "Audit this repo for issues" Assistant: "I'll launch the repo-auditor agent to check repository health." User: "Is this repo properly set up?"…

Sagargupta16/claude-skills · 94 tokens