Plugin Structure
Guides users in creating and organizing plugins for Claude Code, detailing directory structure and manifest configuration.
Install this skill
Security score
The Plugin Structure skill was audited on May 26, 2026 and we found 12 security issues across 2 threat categories, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 18 | - Portable path references using `${CLAUDE_PLUGIN_ROOT}` |
Template literal with variable interpolation in command context
| 227 | ```json |
Template literal with variable interpolation in command context
| 256 | ```json |
Template literal with variable interpolation in command context
| 268 | ``` |
Template literal with variable interpolation in command context
| 276 | Use `${CLAUDE_PLUGIN_ROOT}` environment variable for all intra-plugin path references: |
Template literal with variable interpolation in command context
| 278 | ```json |
Template literal with variable interpolation in command context
| 307 | ```json |
Template literal with variable interpolation in command context
| 313 | ```markdown |
Template literal with variable interpolation in command context
| 319 | ```bash |
Template literal with variable interpolation in command context
| 417 | - Skills: Topic-focused (`error-handling`, `api-design`) |
Template literal with variable interpolation in command context
| 491 | - Replace all hardcoded paths with `${CLAUDE_PLUGIN_ROOT}` |
External URL reference
| 76 | "url": "https://example.com" |