list-my-plugin

list-my-plugin is a skill for Claude Code, Codex from hashgraph-online/awesome-codex-plugins. It costs 54 tokens per session (915 once invoked), scanned A, original, Apache-2.0.

A checklist and workflow for adding a Codex plugin to the README directory of an open-source plugin collection. It checks for duplicates, required repository files, unsafe commands, secrets, and other submission requirements.

In plain words
What is it for?
It is for preparing one correctly placed directory entry, checking the plugin repository, optionally running its scanner, and explaining the owner’s next submission steps.
Why use it?
It prevents misplaced or duplicate listings and catches repository problems before the owner submits a pull request—a proposed change to the project.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents); mentions Codex.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is python3 scripts/check-alphabetical.py README.md --base-ref origin/main.

Good fit It is for preparing one correctly placed directory entry, checking the plugin repository, optionally running its scanner, and explaining the owner’s next submission steps.

Compare 6 skills from other repositories ↓
About the project

Awesome Codex Plugins is a curated catalogue and marketplace of installable plugins, skills, and related resources for OpenAI Codex and ChatGPT. It helps people find, create, validate, and submit extensions for Codex workflows across its app, command-line interface, and IDE extensions. The catalogue add-ons are the plugins, skills, agents, and hooks listed or supported by this project.

hashgraph-online/awesome-codex-plugins · 1,517 stars · on GitHub · hol.org

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/hashgraph-online/awesome-codex-plugins
agentmods
npx agentmods add skills/hashgraph-online/awesome-codex-plugins/list-my-plugin

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for list-my-plugin

README.md
[![agentmods](https://agentmods.dev/badge/skills/hashgraph-online/awesome-codex-plugins/list-my-plugin/github.svg)](https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/list-my-plugin)
Your own site
<a href="https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/list-my-plugin"><img src="https://agentmods.dev/badge/skills/hashgraph-online/awesome-codex-plugins/list-my-plugin/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for list-my-plugin

Your own site · 80×15
<a href="https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/list-my-plugin"><img src="https://agentmods.dev/badge/skills/hashgraph-online/awesome-codex-plugins/list-my-plugin.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 54 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 915 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00054 $0.00915
Opus 5.5 $0.00022 $0.00366
Sonnet 5.5 $0.00011 $0.00183
Haiku 4.5 $0.00005 $0.00092

Measured yesterday against content hash beecea9a5953, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

list-my-plugin scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/list-my-plugin/SKILL.md · 96 lines

How it starts

The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.

List my plugin

Prepare one listing for the person you are working for. They own the decision to submit: open the pull request from their account only when they asked you to, and never claim, sign up or buy anything on their behalf.

1. Check it is not already listed

grep -in "github.com/OWNER/REPO" README.md

A match is a duplicate only when an existing line names this plugin. A repository can list several bundles, one line each, so compare the display names with the plugin's .codex-plugin/plugin.json. If this plugin is listed, stop and tell your user where. Update an existing line only when they asked for a change.

2. Check the plugin repository

The source repository must be public and contain:

  • .codex-plugin/plugin.json (a valid manifest)
  • SECURITY.md, LICENSE and README.md
  • No hardcoded secrets or dangerous MCP commands
  • SHA-pinned GitHub Actions, if it uses Actions, and a dependency lockfile

Optional preflight, from the plugin's own repository, with the reviewed scanner release pinned in CONTRIBUTING.md:

pipx run --spec "plugin-scanner==3.59.0" plugin-scanner scan . --format text

The pull request runs a required source scan; it needs a score of at least 75.

3. Write the line

One line, one sentence, no marketing superlatives:

- [Plugin Name](https://github.com/OWNER/REPO) - What it does for the user, in one sentence.
  • Link the repository root. For a non-default branch use https://github.com/OWNER/REPO/tree/BRANCH, never /plugins/<bundle>.
  • Several bundles in one repository: one line per plugin, each named as in its nested .codex-plugin/plugin.json. CONTRIBUTING.md explains the rules.

4. Place it alphabetically and check

Under ## Community Plugins, use ### Development & Workflow for coding, review, testing, git and CI plugins and ### Tools & Integrations for everything else. Insert the line in alphabetical order by display name, then run:

python3 scripts/check-alphabetical.py README.md --base-ref origin/main

Read the full file on GitHub · 96 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed · +3 lines beecea9a5953
  2. 2d ago First seen · 93 lines · 54 tokens per session scan A a281d2ee3649

Subscribe to this mod's changes

list-my-plugin is a skill published in the GitHub repository hashgraph-online/awesome-codex-plugins (1,517 stars, last pushed yesterday), licensed Apache-2.0. It adds 54 tokens to every session and 915 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-05.

Related

list-my-plugin compared with skills from other repositories

list-my-plugin next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
list-my-pluginhashgraph-online/awesome-codex-pluginsSkill1.5kyesterdayApache-2.0A54Claude Code, Codex
git-github-flowDominikTobureto/awesome-grok-buildSkill692mo agoMITA41Claude Code, Codex
commitSupersynergy/awesome-agentic-codingSkill13mo agoMITA19Claude Code
Git CLIReactSphere/awesome-copilot-agentsSkill14mo agoMITA21Claude Code, Codex
autofix-prQwenLM/qwen-codeSkill29kyesterdayApache-2.0A141Claude Code
git-commit-writermergisi/awesome-openclaw-agentsSkill4.1k2d agoMITA53Claude Code, Codex
commit-messagemergisi/awesome-openclaw-agentsSkill4.1k2d agoMITA17Claude Code, Codex