skill-audit/agent-audit now proactively trigger after a skill/agent file is hand-edited outside skill-author/agent-author, not just on explicit request — closing a gap from this session where a fork's direct edits to agent-author/agent-audit shipped without their own inline audit until forge was invoked to check afterward. Also: plugin-author gains a gotcha on claude plugin validate --strict auto-discovering every .md under agents/ regardless of manifest declarations (ADR-0010); agent-audit's dimension count and validate-provenance.sh's --help now match actual behavior. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
plugin-author
Creates, updates, and releases plugin scaffolds for the holocron marketplace.
What it does
Manages both manifests (plugin.json for Copilot CLI and .claude-plugin/plugin.json for Claude Code) in one pass. Three operations: create a new plugin scaffold with placeholder manifests and skeleton dirs; update configuration fields (shared fields updated in both manifests simultaneously); release a version with HITL gate before tagging.
Out of scope: plugin content (skills, agents, hooks, MCP servers inside those dirs) and marketplace.json entries.
Before you start
Have ready: the plugin name (kebab-case) and the repo root path.
Usage
/plugin-author
Manual scaffold (human workflow):
bash scripts/new-plugin.sh <plugin-name> <repo-root>
# Examples:
bash scripts/new-plugin.sh my-tools /root/ai-development
bash scripts/new-plugin.sh data-tools .
Files
| File | Purpose |
|---|---|
SKILL.md |
Skill instructions for agents |
scripts/new-plugin.sh |
Scaffolds both manifests and skeleton dirs for a new plugin |
references/manifest-fields.md |
All optional fields for both manifests beyond the scaffolded defaults |
references/sources.md |
Research provenance — sources that informed this skill |
scripts/README.md |
Directory meta-documentation for scripts/ |
references/README.md |
Directory meta-documentation for references/ |