agentmods.dev

cpv-setup-marketplace-auto-notification

cpv-setup-marketplace-auto-notification is a skill for Claude Code from Emasoft/claude-plugins-validation. It costs 59 tokens per session (1,196 once invoked), scanned A, original, MIT.

A setup tool for notifying a plugin marketplace whenever a plugin release is pushed.

In plain words
What is it for?
Use it to configure release notifications, repository-dispatch workflows, and the required marketplace secret.
Why use it?
It connects the plugin repository and marketplace so users can see updated plugin versions after refreshing Claude Code.

Skill for Claude Code

Written for Claude Code: user-invocable in frontmatter. Also seen: mentions Claude Code.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is uv run python scripts/set_marketplace_pat.py <plugin> <marketplace>.

Part of the claude-plugins-validation plugin — 52 skills, 14 commands, 14 agents shipped together

not rated 4repo 3d ago A scan 59 tokens original MIT

Good fit Use it to configure release notifications, repository-dispatch workflows, and the required marketplace secret.

Compare 6 skills from other repositories ↓
View source ↗ Emasoft/claude-plugins-validation
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/Emasoft/claude-plugins-validation
agentmods
npx agentmods add skills/emasoft/claude-plugins-validation/cpv-setup-marketplace-auto-notification

Made for: Claude Code.

Or install claude-plugins-validation, the plugin that ships this one along with the rest of its 52 skills, 14 commands, 14 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for cpv-setup-marketplace-auto-notification

README.md
[![agentmods](https://agentmods.dev/badge/skills/emasoft/claude-plugins-validation/cpv-setup-marketplace-auto-notification/github.svg)](https://agentmods.dev/skills/emasoft/claude-plugins-validation/cpv-setup-marketplace-auto-notification)
Your own site
<a href="https://agentmods.dev/skills/emasoft/claude-plugins-validation/cpv-setup-marketplace-auto-notification"><img src="https://agentmods.dev/badge/skills/emasoft/claude-plugins-validation/cpv-setup-marketplace-auto-notification/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for cpv-setup-marketplace-auto-notification

Your own site · 80×15
<a href="https://agentmods.dev/skills/emasoft/claude-plugins-validation/cpv-setup-marketplace-auto-notification"><img src="https://agentmods.dev/badge/skills/emasoft/claude-plugins-validation/cpv-setup-marketplace-auto-notification.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 59 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,196 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00059 $0.01196
Opus 5 $0.00030 $0.00598
Sonnet 5 $0.00012 $0.00239
Haiku 4.5 $0.00006 $0.00120

Measured 6d ago against content hash 3b8f1be39a15, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

cpv-setup-marketplace-auto-notification scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/cpv-setup-marketplace-auto-notification/SKILL.md · 106 lines

How it starts

The opening of the file, as written. The whole thing — 106 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Setup Marketplace Auto Notification

Overview

Configures the plugin side of the auto-notify chain: plugin push → notify workflow → repository_dispatch → marketplace receiver → marketplace.json bump → Claude Code sees the new version on next refresh. Works for any plugin/marketplace pair with placeholder substitution only.

Prerequisites

  • gh auth status green for the owner of BOTH repos
  • PAT with repo scope (or fine grained RW) — see pat-secret-setup.md
  • Marketplace has a repository_dispatch: plugin-updated receiver (create from receiver-workflow-template.md)
  • Plugin has a valid .claude-plugin/plugin.json with name + version

Instructions

  1. Check env for MARKETPLACE_PAT first (length only — never print the value). If unset, walk the user through creating one and exporting it.
  2. Set the secret via scripts/set_marketplace_pat.py — never improvise gh secret set. Full rules and the forbidden-patterns list in pat-secret-setup.md. 
    uv run python scripts/set_marketplace_pat.py <plugin> <marketplace>
uv run python scripts/set_marketplace_pat.py --verify-only <plugin> <marketplace>
  3. Install notify-marketplace.yml on the plugin repo from the template.
  4. Verify the marketplace receiver exists on its default branch — create it from receiver-workflow-template.md if missing.
  5. Dry-run the chain without cutting a real release.
  6. Verify end-to-end: plugin run → marketplace run → marketplace.json bumped → Claude Code refresh sees the new version.

Copy this checklist and track your progress:

  • Check env for MARKETPLACE_PAT
  • If absent, create PAT and export it
  • Run scripts/set_marketplace_pat.py (NEVER improvise gh secret set)
  • Verify secret exists via --verify-only
  • Scaffold notify-marketplace.yml
  • Verify marketplace receiver exists
  • Dry-run end-to-end

Read the full file on GitHub · 106 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 106 lines · 59 tokens per session scan A 3b8f1be39a15

Subscribe to this mod's changes

cpv-setup-marketplace-auto-notification is a skill published in the GitHub repository Emasoft/claude-plugins-validation (4 stars, last pushed 3d ago), licensed MIT. It adds 59 tokens to every session and 1,196 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Building agentsCI and CDGit and workflowReleasesgithub-actionsmarketplacenotificationrelease
Related

Other skills, from other repositories

plugin-publish

A release guide for publishing Zhin.js plugins to npm, the JavaScript package registry, and to the Zhin plugin marketplace. It covers package metadata, versioning, release checks, and submission requirements.

zhinjs/zhin · 58 tokens

emdash-github-actions

Sets up GitHub Actions CI/CD workflows for EmDash plugins — TypeScript type-checking, ESLint linting, Vitest testing, npm publishing, and automated releases. ALWAYS use this skill when a user wants to create, add, set up, or configure GitHub Actions, CI/CD, automated checks, or deployment workflows for an EmDash…

jdevalk/skills · 234 tokens

release-deploy

Release and deploy via GitHub tags and GitHub Actions (not every commit). Creates production releases from main and beta releases from staging using the GitHub CLI. Use when the user asks to release, ship, deploy, cut a version, tag a release, publish beta/production, create a GitHub Release, or bump a semver tag. On…

afaraha8403/balakit · 94 tokens

github-release-management

Comprehensive GitHub release orchestration with AI swarm coordination for automated versioning, testing, deployment, and rollback management.

proffesor-for-testing/agentic-qe · 27 tokens

github-release-management

Use when cutting a GitHub release that needs progressive canary rollout (5%→25%→50%→100%) with automated health gates and auto-rollback on error-rate or latency regressions.

mattmre/EVOKORE-MCP-PUBLIC · 45 tokens

github-release-management

Comprehensive GitHub release orchestration with AI swarm coordination for automated versioning, testing, deployment, and rollback management.

ruvnet/ruv-FANN · 27 tokens