claude-plugins-community

Tech stack & purpose

claude-plugins-community is a community plugin marketplace for Claude Cowork and Claude Code, distributed as a read-only mirror with submissions directed elsewhere. The project provides a system of three GitHub Actions — validate-plugins, bump-plugin-shas, and scan-plugins — that work together to maintain the marketplace. validate-plugins performs canonical schema validation using the Claude CLI and applies security invariants to marketplace entries; bump-plugin-shas discovers and validates stale external plugin SHAs in a nightly automation loop, running validation inline before opening pull requests; and scan-plugins performs Claude-based safety review of changed plugins using the Anthropic API. All three actions operate without bots or GitHub Apps, relying on standard GitHub token permissions, and share a common security model enforcing host allowlists and shell-metacharacter validation. The tooling is built in shell scripting with Zod schema definitions from the @anthropic-ai/claude-code package and designed to be dropped into any plugins repository unchanged.

Languages

Contributors

• 
  github-actions[bot]2,166 commits · 0 followers
• Bryan Thompson89 commits
• Tobin South12 commits
• tobin9 commits
• abibbs-ant2 commits
• tobinsouth1 commits
• zenexer-ant1 commits