plugin-creator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited plugin-creator (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
# Plugin names are normalized to lower-case hyphen-case and must be <= 64 chars.
# The generated folder and plugin.json name are always the same.
# Run from the skill root (the directory containing this `SKILL.md`).
# By default creates in `~/plugins/<plugin-name>`.
python3 scripts/create_basic_plugin.py <plugin-name><plugin-path>/.codex-plugin/plugin.json when the request gives specific metadata.The scaffold starts with valid defaults and must not contain [TODO: ...] placeholders.
# Personal marketplace entries default to `~/.agents/plugins/marketplace.json`.
python3 scripts/create_basic_plugin.py my-plugin --with-marketplaceOnly specify --marketplace-name <name> when the default personal marketplace name is already taken or installed and you need to seed a different new marketplace file:
python3 scripts/create_basic_plugin.py my-plugin \
--with-marketplace \
--marketplace-name team-localOnly use a repo/team marketplace when the user specifically asks for that destination:
python3 scripts/create_basic_plugin.py my-plugin \
--path <repo-root>/plugins \
--marketplace-path <repo-root>/.agents/plugins/marketplace.json \
--with-marketplaceWhen the user specifies a marketplace path, make sure that marketplace is actually installed before telling the user to reinstall from it. The default personal marketplace file at ~/.agents/plugins/marketplace.json is discovered implicitly, but other marketplace paths are not. On Windows, use the equivalent path under the user profile.
python3 scripts/create_basic_plugin.py my-plugin \
--path <parent-plugin-directory> \
--marketplace-path <marketplace-json-path> \
--with-skills --with-hooks --with-scripts --with-assets --with-mcp --with-apps --with-marketplace<parent-plugin-directory> is the directory where the plugin folder <plugin-name> will be created (for example ~/plugins).
python3 scripts/validate_plugin.py <plugin-path>For updates to an existing local plugin during development, keep the scaffold flow as-is and use the reference instead of hand-editing marketplace files:
python3 scripts/update_plugin_cachebuster.py <plugin-path>Prefer the helper default cachebuster unless the user explicitly asks for a specific override. See references/installing-and-updating.md for the expected cachebuster and reinstall flow while iterating on an existing local plugin.
~/.agents/plugins/marketplace.json, with plugins generally being stored in ~/plugins/<plugin-name>/.
/<parent-plugin-directory>/<plugin-name>/./<parent-plugin-directory>/<plugin-name>/.codex-plugin/plugin.json.~/.agents/plugins/marketplace.json when --with-marketplace is set.<plugin-name> is normalized using skill-creator naming rules:My Plugin → my-pluginMy--Plugin → my-plugin-skills/hooks/scripts/assets/.mcp.json.app.json~/.agents/plugins/marketplace.json. Here,"personal marketplace" means the marketplace whose file is at that path.
--path and --marketplace-path, onlywhen the user specifically requests it.
--marketplace-name is an exception path. Use it only when the default personal marketplacename is already taken and you need to seed a different new marketplace file.
--marketplace-name to rename an existing marketplace file in place. If the filealready exists, its top-level name must already match.
codex plugin marketplace add.scripts/read_marketplace_name.py when you need the marketplace name from anymarketplace.json file. With no argument it reads the default personal marketplace; with an explicit path it works for repo/team marketplaces too.
./plugins/<plugin-name>.name plus optional interface.displayName.plugins[] as render order in Codex. Append new entries unless a user explicitly asks to reorder the list.displayName belongs inside the marketplace interface object, not individual plugins[] entries.policy.installationpolicy.authenticationcategorypolicy.installation: "AVAILABLE"policy.authentication: "ON_INSTALL"policy.installation values:NOT_AVAILABLEAVAILABLEINSTALLED_BY_DEFAULTpolicy.authentication values:ON_INSTALLON_USEpolicy.products as an override. Omit it unless the user explicitly requests product gating.{
"name": "plugin-name",
"source": {
"source": "local",
"path": "./plugins/plugin-name"
},
"policy": {
"installation": "AVAILABLE",
"authentication": "ON_INSTALL"
},
"category": "Productivity"
}--force only when intentionally replacing an existing marketplace entry for the same plugin name."name", an "interface" object containing "displayName", and a plugins array, then add the new entry.{
"name": "personal",
"interface": {
"displayName": "Personal"
},
"plugins": [
{
"name": "plugin-name",
"source": {
"source": "local",
"path": "./plugins/plugin-name"
},
"policy": {
"installation": "AVAILABLE",
"authentication": "ON_INSTALL"
},
"category": "Productivity"
}
]
}plugin.json "name" are always the same normalized plugin name..codex-plugin/plugin.json present.[TODO: ...] placeholders in plugin manifests.apps and mcpServers out of plugin.json unless their companion files are actually created.hooks.--force only when overwrite is intentional.interface.displayName.policy.installation, policy.authentication, and category even if their values are defaults.policy.products only when the user explicitly asks for that override.source.path relative to the selected marketplace root as ./plugins/<plugin-name>.--marketplace-name when creating a new marketplace file whose name should not bepersonal because that name is already taken or installed elsewhere.
proceeding. If the user prefers to run the write themselves, provide the exact scaffold command and then continue from validation or subsequent plugin edits instead of leaving the workflow vague.
or marketplace.json. Use the update flow documented in references/installing-and-updating.md and scripts/update_plugin_cachebuster.py.
codex plugin marketplace add for the default personal-marketplaceflow. That command is for explicit non-default marketplace configuration, not for the standard ~/.agents/plugins/marketplace.json path.
--marketplace-path, make sure that marketplace is installedbefore giving reinstall instructions. Use codex plugin marketplace add <path-to-marketplace-root> when that explicit marketplace has not been configured yet.
response with a short Codex app handoff. Say To view this in the Codex app: and write View <normalized plugin name> and Share <normalized plugin name> as Markdown links, not raw URLs or code spans.
codex://plugins/<normalized plugin name>?marketplacePath=<absolute marketplace.json path>.The Share deeplink uses the same URL with &mode=share.
marketplace.jsonpath from the scaffolded plugin. URL-encode the path segment and query value when needed.
pluginName or hostId query parameters to these deeplinks. Codex derives both afterthe user clicks the link.
View <normalized plugin name> or Share <normalized plugin name> links when no marketplace entry wascreated or updated.
For the exact canonical sample JSON for both plugin manifests and marketplace entries, use:
references/plugin-json-spec.mdreferences/installing-and-updating.md for update/reinstall guidance whileiterating on an existing local plugin, plus the new-thread pickup behavior after reinstall
After editing SKILL.md, run:
python3 ../skill-creator/scripts/quick_validate.py .Before handing back a generated plugin, run:
python3 scripts/validate_plugin.py <plugin-path>~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.