Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/iplug3/audio-plugin-dev-skills/validate-pluginvalnpx skills add iPlug3/audio-plugin-dev-skills --skill validate-pluginvalgit clone --depth 1 https://github.com/iPlug3/audio-plugin-dev-skillsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00075 | $0.01529 |
| Opus 5 | $0.00037 | $0.00764 |
| Sonnet 5 | $0.00015 | $0.00306 |
| Haiku 4.5 | $0.00007 | $0.00153 |
Grade A, and why
validate-pluginval scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 195 lines — stays where its author put it; the contents beside it link to each section on GitHub.
pluginval
Cross-platform validator for VST3 and AudioUnit plugins.
Plugin Install Locations
pluginval accepts a direct path. These are the standard install locations by format.
AudioUnit (.component) — macOS only:
| Location | Scope |
|---|---|
~/Library/Audio/Plug-Ins/Components/ |
Current user only |
/Library/Audio/Plug-Ins/Components/ |
All users |
VST3 (.vst3):
| Platform | User Location | System Location |
|---|---|---|
| macOS | ~/Library/Audio/Plug-Ins/VST3/ |
/Library/Audio/Plug-Ins/VST3/ |
| Windows | %LOCALAPPDATA%\Programs\Common\VST3\ |
C:\Program Files\Common Files\VST3\ |
| Linux | ~/.vst3/ |
/usr/lib/vst3/ or /usr/local/lib/vst3/ |
Instructions
- Install pluginval (see Installation below)
- Locate the built plugin (
.vst3or.component) in your build output directory or one of the standard locations above - Run at strictness level 5 (recommended minimum):
- macOS:
/Applications/pluginval.app/Contents/MacOS/pluginval --strictness-level 5 /path/to/plugin - Windows:
pluginval.exe --strictness-level 5 "C:\path\to\plugin.vst3" - Linux:
pluginval --strictness-level 5 /path/to/plugin.vst3
- macOS:
- If it crashes on a multi-bus VST3, use
validate-vst3instead - For CI, add
--skip-gui-testsfor headless environments
Installation
Download from GitHub Releases.
| Platform | Setup |
|---|---|
| macOS | Extract and move pluginval.app to /Applications/ |
| Windows | Extract pluginval.exe and add to PATH or use full path |
| Linux | Extract pluginval binary, chmod +x, place in /usr/local/bin/ |
Verify installation:
# macOS
/Applications/pluginval.app/Contents/MacOS/pluginval --help
# Windows
pluginval.exe --help
# Linux
pluginval --help
Basic Usage
# macOS
/Applications/pluginval.app/Contents/MacOS/pluginval --strictness-level 5 /path/to/plugin
# Windows
pluginval.exe --strictness-level 5 "C:\path\to\plugin.vst3"
# Linux
pluginval --strictness-level 5 /path/to/plugin.vst3
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 195 lines · 75 tokens per session scan A ed90f3b201f4
validate-pluginval is a skill published in the GitHub repository iPlug3/audio-plugin-dev-skills (88 stars, last pushed 6mo ago), licensed MIT. It adds 75 tokens to every session and 1,529 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
scenario-seedance-music-video
Use when turning a song, track, or audio master into a finished music video with Scenario and Seedance: planning shots against beats and sections, transcribing lyrics, generating clips that cut to music, keeping the shots' own sound while the song stays the only score, assembling a delivery over the untouched master…
excalidraw-visual-designer
Create and revise editable visual drawings directly in the Excalidraw website through the in-app browser. Use when the user asks Codex to draw in Excalidraw or update an Excalidraw canvas, including diagrams, flowcharts, architecture sketches, process maps, infographics, teaching visuals, product explanation graphics…
sticker-factory
Automated factory workflow: Generates grid-based sticker sheets and auto-packages them for WeChat using wechat-sticker-maker. Use when the user wants to create a complete custom sticker pack from scratch (e.g., '帮我做一套表情包', '批量生产表情').
video-tutorial-maker
Create scripted tutorial videos with narration, TTS, aligned subtitles, MP4 rendering, and platform variants. Use when Codex needs to create or revise tutorial, explainer, product walkthrough, course, demo, or short-form videos; generate 16:9 landscape output by default unless the user explicitly asks for 9:16, 1:1…
scenario-sprite-animation
Use when animating 2D game art with Scenario: character walk cycles, idle or attack animations, sprite sheets, animated GIFs, frame-by-frame pixel art animation, VFX loops such as fire or smoke, looping a sprite seamlessly, animating an existing character image, extracting animation frames from a generated video, or…
scenario-audio
Use when generating or handling audio on Scenario via MCP. Triggers include music tracks, full-length songs with vocals written from lyrics, background scores, soundtracks, game sound effects, SFX, foley, ambience, looping audio, voiceover, narration, speech, TTS, text-to-speech, voice cloning, re-voicing a recording…