What is plugin-release-checker?

A pre-release checker for coding-agent plugins that validates their contents, metadata, documentation links, required files, and versions.

Use it before releasing a plugin or running the release workflow to check one plugin or all plugins.

It catches release problems before a plugin is packaged or published, including broken references and inconsistent version information.

How joaquimscosta/arkhe-claude-plugins configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to joaquimscosta/arkhe-claude-plugins. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/joaquimscosta/arkhe-claude-plugins/main/.claude/skills/plugin-release-checker/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/joaquimscosta/arkhe-claude-plugins

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/joaquimscosta/arkhe-claude-plugins/plugin-release-checker/github.svg)](https://agentmods.dev/skills/joaquimscosta/arkhe-claude-plugins/plugin-release-checker)

Your own site

<a href="https://agentmods.dev/skills/joaquimscosta/arkhe-claude-plugins/plugin-release-checker"><img src="https://agentmods.dev/badge/skills/joaquimscosta/arkhe-claude-plugins/plugin-release-checker/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/joaquimscosta/arkhe-claude-plugins/plugin-release-checker"><img src="https://agentmods.dev/badge/skills/joaquimscosta/arkhe-claude-plugins/plugin-release-checker.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 71 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 538 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector pass 7 Sept 2026

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00071	$0.00538
Opus 5	$0.00036	$0.00269
Sonnet 5	$0.00014	$0.00108
Haiku 4.5	$0.00007	$0.00054

Measured 9d ago against content hash 824656f15520, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

plugin-release-checker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

The scan reads SKILL.md. This mod also ships 4 executable files (scripts/check_release_readiness.py, scripts/validate_cross_references.py, scripts/validate_reference_staleness.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/plugin-release-checker/SKILL.md · 74 lines

What it actually says

Plugin Release Checker

Pre-release content quality gate that complements scripts/release.sh. Run before generating the changelog or triggering the release workflow.

Quick Start

Run the validation script to check all plugins:

scripts/check_release_readiness.py --all

Check a specific plugin:

scripts/check_release_readiness.py --plugin core

Release Workflow Integration

/plugin-release-checker   ← THIS: validates plugin content quality
    ↓ (all checks pass)
/changelog                ← generates CHANGELOG entry
    ↓
./scripts/release.sh X.Y.Z  ← handles git tag + GitHub Release

Checks Performed

Check	Description
Skill Validation	Run skill-validator across all skills in each plugin
Marketplace Sync	Verify all plugins in `plugins/` have entries in marketplace.json
Version Consistency	Check plugin.json versions match CHANGELOG entries
Cross-References	Detect broken links in SKILL.md → WORKFLOW.md, EXAMPLES.md, etc.
Required Files	Ensure each plugin has plugin.json and README.md
Frontmatter	Validate YAML frontmatter in agents, commands, and skills

Output

=== Plugin Release Readiness Report ===

Plugin: core (v2.0.0)
  ✓ All skills pass validation
  ✓ Marketplace entry found
  ✓ Version consistent with CHANGELOG
  ✓ No broken cross-references

Plugin: git (v1.0.0)
  ✗ Skill 'creating-commit': 1 error (SS002: SKILL.md exceeds 500 lines)
  ✓ Marketplace entry found
  ✓ Version consistent with CHANGELOG
  ✓ No broken cross-references

Summary: 9/10 plugins ready, 1 plugin has issues

Command Options

--all                    # Check all plugins (default)
--plugin NAME            # Check specific plugin
--skip-skill-validator   # Skip skill-validator (faster, less thorough)
--format {text,json}     # Output format

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

9d ago First seen · 74 lines · 71 tokens per session scan A 824656f15520

Subscribe to this mod's changes

plugin-release-checker is a skill published in the GitHub repository joaquimscosta/arkhe-claude-plugins (21 stars, last pushed 25d ago), licensed MIT. It adds 71 tokens to every session and 538 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Building agents Claude Code ai-agents ai-developer-tools anthropic claude-code-agents claude-code-plugins

skill-capture

Turn a recurring in-session workflow into a reusable Claude Code skill. Load this the moment you notice you have run the SAME multi-step sequence (same ordered steps or commands, small variation allowed) about three times in the current session, or when open candidates are waiting in .credo/skill-candidates.md at…

Marcel-Bich/marcel-bich-claude-marketplace · 170 tokens

quick

Fast path — skip the full workflow for small tasks under 3 files.

fakoli/fakoli-plugins · 16 tokens

git-workflow

Git branching, commits, and PR workflow following GitFlow conventions.

kivo360/OmoiOS · 12 tokens

refactor-planner

Plan safe refactoring with dependency analysis, impact assessment, and rollback strategies.

kivo360/OmoiOS · 14 tokens

test-writer

Generate comprehensive tests including unit, integration, and property-based tests.