digirati-co-uk/plugin-system
.agents/skills/plugin-system/SKILL.md
Work on Madoc TS plugin loading, sandboxed module registration, and plugin-to-extension wiring. Use when modifying plugin load paths, plugin registration, or plugin integration points in services/madoc-ts.
$ install --global
skillsauthnpx skillsauth add digirati-co-uk/madoc-platform plugin-systemInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 3:52 PM4.4s2 files scanned
SKILL.md
- name:
- plugin-system
- description:
- Work on Madoc TS plugin loading, sandboxed module registration, and plugin-to-extension wiring. Use when modifying plugin load paths, plugin registration, or plugin integration points in services/madoc-ts.
Plugin System (Madoc TS)
Goal
Explain how plugins are loaded and registered so plugin installation and extension wiring remain consistent.
Scope
- Plugin module loading and sandboxed require
- PluginManager registration for blocks, themes, templates, exports
- Plugin definition types and schemas
Non-scope
- Extension implementations themselves
- Frontend rendering unrelated to plugins
- Route handlers for plugin APIs
Key Entry Points
services/madoc-ts/src/middleware/create-plugin-manager.tsservices/madoc-ts/src/frontend/shared/plugins/plugin-manager.tsservices/madoc-ts/src/frontend/shared/plugins/services/madoc-ts/src/types/pluginsservices/madoc-ts/src/types/schemas/pluginsservices/madoc-ts/src/utility/sandboxed-require.ts
Architecture Summary (Based on Source)
create-plugin-manager.tsloads plugin modules fromPLUGINS_PATHusingsandboxedRequireand returns aPluginManager.PluginManagerregisters plugin-provided blocks, themes, project templates, and exports via corresponding extension registries.- Plugin definitions are typed in
types/pluginsand schema forms intypes/schemas/plugins.
Quick Start Workflow
- Review
services/madoc-ts/src/middleware/create-plugin-manager.tsfor load paths and sandboxing. - Inspect
services/madoc-ts/src/frontend/shared/plugins/plugin-manager.tsfor registration/unregistration logic. - Update plugin type shapes in
types/pluginsandtypes/schemas/pluginsif needed.
Common Tasks
- Add a new plugin hook type
- Adjust plugin load path or development revision behavior
- Update plugin definition schema
Pitfalls
- Loading plugins with invalid paths (path traversal)
- Registering plugin blocks/themes without source metadata
- Forgetting to unregister on plugin removal
Suggested Checks
- Load a plugin in dev and verify hooks apply
- Uninstall plugin and confirm unregister flows
Related Skills
digirati-co-uk/utility-core
tools
VerifiedTrustedCommunity
Work on Madoc TS shared utility helpers (JWT, metadata, errors, IIIF helpers, auth helpers). Use when changing core utility functions or shared helpers in services/madoc-ts.
56SKILL.mdUpdated Apr 16, 2026
digirati-co-uk/types-schemas
development
VerifiedTrustedCommunity
Work on Madoc TS shared type definitions and schema contracts. Use when updating TypeScript types, JSON schema shapes, or cross-layer data contracts in services/madoc-ts.
56SKILL.mdUpdated Apr 16, 2026
digirati-co-uk/tasks-automation
tools
VerifiedTrustedCommunity
Understand and extend Madoc TS task automation, including bots and task-related extensions. Use when adding task automation, bot behavior, or task metadata resolution in services/madoc-ts.
56SKILL.mdUpdated Apr 16, 2026
digirati-co-uk/ssr-site
development
VerifiedTrustedCommunity
Work on Madoc TS site SSR pipeline, HTML template injection, and site render data wiring. Use when changing site SSR behavior, template tokens, or site SSR data wiring in services/madoc-ts.
56SKILL.mdUpdated Apr 16, 2026