n4m3z/BuildPlugin
skills/BuildPlugin/SKILL.md
Create, validate, and publish Claude Code plugins from forge modules. USE WHEN create plugin, validate plugin, publish plugin, marketplace, plugin.json, cowork plugin.
$ install --global
skillsauthnpx skillsauth add n4m3z/forge-core BuildPluginInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 14, 2026, 6:08 AM150.3s3 files scanned
SKILL.md
- name:
- BuildPlugin
- version:
- 0.1.0
- description:
- Create, validate, and publish Claude Code plugins from forge modules. USE WHEN create plugin, validate plugin, publish plugin, marketplace, plugin.json, cowork plugin.
- argument-hint:
- [create|validate|marketplace] [module-path]
BuildPlugin
Create, validate, and publish forge modules as Claude Code plugins. Covers plugin.json creation, marketplace registration, and Cowork deployment.
Workflow Routing
| Workflow | Trigger | Reference | | ------------- | ---------------------------------------------- | -------------------- | | Create | "create plugin", "add plugin.json" | Instructions below | | Validate | "validate plugin", "check marketplace readiness" | Instructions below | | Marketplace | "add to marketplace", "publish to cowork" | @ClaudeMarketplace |
Create plugin.json
- Read
module.yamlfor name, version, description. - Generate
.claude-plugin/plugin.json:
{
"name": "module-name",
"version": "0.1.0",
"description": "From module.yaml",
"author": {"name": "Author"},
"license": "EUPL-1.2",
"repository": "https://github.com/owner/repo",
"keywords": [],
"skills": ["../skills"]
}
- Add
"hooks": "./hooks/hooks.json"only if the module has hooks. - Version in plugin.json must match module.yaml exactly.
Validate
Check these in order. Stop on first failure.
| Check | Pass criteria |
| ------------------- | ------------------------------------------------------------ |
| plugin.json exists | .claude-plugin/plugin.json present and valid JSON |
| name | Lowercase kebab-case (Cowork enforces strictly) |
| version | Valid semver, matches module.yaml |
| description | Non-empty string |
| author | Object with name field |
| license | SPDX identifier present |
| repository | URL string present |
| keywords | Non-empty array |
| README.md | Exists, not empty |
| LICENSE | Exists |
| INSTALL.md | Follows install.md standard (OBJECTIVE, DONE WHEN, TODO) |
| CLAUDE.md | Exists |
| Skills | Each has SKILL.md with name/description/version frontmatter |
| Skill YAML | Each has SKILL.yaml with sources field |
Report:
Section Status
──────────────────────────────
plugin.json PASS / FAIL
module.yaml PASS / FAIL
Documentation PASS / FAIL
Skills PASS / FAIL
──────────────────────────────
Verdict: READY / NOT READY
Constraints
- Plugin names must be lowercase kebab-case
- Version in plugin.json and module.yaml must match
- Never publish a module that fails validation
Sources
- https://code.claude.com/docs/en/plugin-marketplaces
- https://support.claude.com/en/articles/13837433-manage-cowork-plugins-for-your-organization
Related Skills
n4m3z/Wtf
development
VerifiedTrustedCommunity
Reactive correction and root-cause fix. USE WHEN something went wrong, user is frustrated, demands a correction, says wtf, what the hell, why did you, that's wrong, this is broken, no not that, stop. Executes the immediate fix, then hunts the upstream artifact that caused it and creates a corrective change.
4SKILL.mdUpdated May 28, 2026
n4m3z/ResearchTopic
development
VerifiedTrustedCommunity
Decompose a research question into sub-queries, spawn parallel WebResearcher agents per angle, synthesize findings with citations and explicit confidence. USE WHEN the user asks to research, investigate, look online, look up, dig into, find sources, gather evidence, or survey what's known about a topic. Single-pass; for multi-round adversarial research use ResearchCouncil in forge-council.
4SKILL.mdUpdated May 27, 2026
n4m3z/WriteDocs
tools
VerifiedTrustedCommunity
Author project documentation that future humans (and AI sessions) actually read. Covers TLDRs for tools, READMEs, runbooks, journals. USE WHEN write documentation, create tldr, tool one-pager, document a cli, write readme, runbook, journal entry, capture knowledge about a tool, distill a session into reusable notes.
4SKILL.mdUpdated May 25, 2026
n4m3z/StagedReview
development
VerifiedTrustedCommunity
Review your own staged changes via a code-review TUI before triggering a commit. USE WHEN about to commit, walking through your own staged diff, self-reviewing before approval, tuicr, revdiff, git diff cached.
4SKILL.mdUpdated May 25, 2026