安全

plugin-review

试用

Review plugin quality with tiered checks and dependency scoping. Use for PR and pre-release audits

它能做什么

Review plugin quality with tiered checks and dependency scoping. Use for PR and pre-release audits

技能文档

Night Market Skill — ported from claude-night-market/abstract. For the full experience with agents, hooks, and commands, install the Claude Code plugin.

Plugin Review

Tiered quality review of plugins with dependency-aware scoping.

Table of Contents

Tiers

TierTriggerScopeDepthDuration
branchDefaultAffected and relatedQuick gates~2 min
prBefore mergeAffected and relatedStandard~5 min
releaseBefore version bumpAll 17 pluginsFull~15 min

Orchestration

  1. Detect scope: parse --tier flag, find affected plugins from git diff, resolve related plugins from docs/plugin-dependencies.json
  2. Plan: build check matrix (tier x plugin x role)
  3. Execute: run checks per tier definition
  4. Report: per-plugin table, aggregate verdict

Scope Detection

Affected plugins: git diff main --name-only filtered to plugins/*/.

Related plugins: load docs/plugin-dependencies.json, look up each affected plugin's reverse index to find dependents. Mark as "related" (lighter checks).

If --tier release or no git diff available, scope to all plugins.

Module Loading

  • Always: this SKILL.md (orchestration logic)
  • branch tier: load modules/tier-branch.md
  • pr tier: load modules/tier-branch.md then modules/tier-pr.md
  • release tier: load all tier modules plus modules/tier-release.md
  • When resolving deps: load modules/dependency-detection.md

Verdict

ResultMeaning
PASSAll checks green
PASS-WITH-WARNINGSNon-blocking issues
FAILBlocking issues found

Output Format

Plugin Review ( tier)
Affected: 
Related:   ()

Plugin          test  lint  type  reg   verdict
          PASS  PASS  PASS  PASS  PASS
...

Verdict:  (N/N plugins healthy)

PR and release tiers add scorecard sections.

Quality Gate Mode

The --quality-gate flag enables CI/CD integration with exit codes that distinguish warnings from failures:

  • 0: all quality gates passed
  • 1: warnings present but gates passed (non-blocking)
  • 2: quality gate failures (blocking)
  • 3: critical issues found (blocking)

Use --fail-on warning to treat warnings as blocking.

Configuration

Place a .plugin-review.yaml file in the plugin root to customize thresholds and focus areas:

plugin_review:
  quality_gates:
    structure_min: 80
    skills_min: 75
    hooks_min: 70
    tokens_max_total: 50000
    bloat_max_percentage: 15
  focus_areas:
    - skills
    - hooks
    - tokens
  exclude_patterns:
    - "*/legacy/*"
    - "*/deprecated/*"
  severity_overrides:
    missing_description: warning
    large_file: info

See the /plugin-review command reference for full usage examples.

相关技能

Reviews pull requests with scope validation, requirements compliance, and line comments

21 次安装

Provides review-workflow scaffolding for context, evidence, and output. Use at the start of any detailed review to ensure consistent, comparable findings

21 次安装

Evaluates API surface design, consistency, and exemplar alignment

22 次安装

Evaluate hook security, performance, and SDK compliance. Use for audits

26 次安装

Audits shell scripts for correctness, portability, and common pitfalls

21 次安装

Audits dependency supply chains for bad versions, lockfile drift, and artifact integrity

22 次安装