Elnora Plugins — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Elnora Plugins (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The Elnora AI Platform for generating, optimizing, and managing bioprotocols for wet-lab experiments. This marketplace provides a Claude Code plugin with 10 skills + an MCP server declaration.
There are three paths, depending on your setup. Path 1 is recommended.
One command installs everything — CLI, plugin (skills + MCP), authentication. Pick the line for your OS or package manager:
macOS / Linux
curl -fsSL https://cli.elnora.ai/install.sh | bashWindows
irm https://cli.elnora.ai/install.ps1 | iexnpm (any OS with Node.js 20+)
npm install -g @elnora-ai/cliHomebrew (macOS / Linux)
brew install elnora-ai/cli/elnoraThe installer prompts for your API key, then elnora setup claude registers the plugin. First MCP use triggers OAuth (one browser click), then cached.
Prefer browser-based OAuth, or running without a CLI? Install the plugin alone. In Claude Code:
/plugin
# Choose: Add marketplace → Elnora-AI/elnora-plugins
/plugin
# Choose: Enable → elnoraPlugin provides: 10 skills + MCP declaration. Say "Use Elnora to list projects" — Claude invokes MCP, triggers OAuth on first use, then cached. No CLI needed.
If you prefer API key auth over OAuth (useful for CI or non-interactive environments):
claude mcp add elnora --transport http --scope user \
https://mcp.elnora.ai/mcp \
--header "X-API-Key: <your-key-from-platform.elnora.ai>"Use this instead of the plugin's built-in MCP declaration. If the plugin is also enabled, you'll have two entries named "elnora" — pick one or the other, don't enable both.
For Cursor, Codex, VS Code Copilot, Gemini CLI, and any other MCP-compatible client, configure the Elnora MCP server as follows.
Use this config snippet wherever your platform expects MCP server definitions:
{
"mcpServers": {
"elnora": {
"type": "http",
"url": "https://mcp.elnora.ai/mcp"
}
}
}Add the MCP config above to .cursor/mcp.json, then copy skills:
cp -r elnora/skills/* .cursor/skills/codex mcp add elnora -- https://mcp.elnora.ai/mcp
cp -r elnora/skills/* .codex/skills/Add the MCP config above to .vscode/mcp.json. Skills are loaded from .vscode/skills/:
cp -r elnora/skills/* .vscode/skills/Add the MCP config to your Gemini settings, then copy skills:
cp -r elnora/skills/* .gemini/skills/Point any MCP-compatible client at:
https://mcp.elnora.ai/mcpThe Elnora MCP server supports two authentication methods:
X-API-Key: <your-key> — the standard header, orAuthorization: Bearer <your-key> — if your client only exposes a single bearer/token field.Running Codex, Cursor, Aider, Continue, Amp, Jules, or Roo? Two files are written for agents rather than humans:
elnora_* tools, and a dispatch table mapping user intent to the right skill. Auto-loaded at repo root by most agent harnesses.| Plugin | Description |
|---|---|
elnora | Connect to the Elnora AI Platform for bioprotocol generation, task management, and file workflows |
| Skill | Description |
|---|---|
elnora-platform | Route requests across the Elnora platform — account, health checks, feature flags, and agreements |
elnora-orgs | Manage organizations, members, invitations, billing, and the shared org library |
elnora-projects | Create and manage projects, project members, and roles |
elnora-tasks | Create, update, search, and manage tasks and task messages |
elnora-files | Create, upload, download, version, and manage files and working copies |
elnora-folders | Browse, create, rename, move, delete, and share Knowledge Base folders |
elnora-review | Approve or reject Knowledge Base auto-tidy proposals |
elnora-search | Search across files, tasks, and all resources in the platform |
elnora-admin | Manage API keys, audit logs, and administrative operations |
elnora-agent | Run scientific tools and literature lookups (PubMed, ArXiv, web search) via the cloud agent |
This plugin is a distribution of the @elnora-ai/cli skills, so its version tracks the CLI. On each CLI release, the CLI's sync-skills job copies the current skills here and stamps the CLI version into plugin.json and marketplace.json. There is no independent plugin version — the version you see is the CLI version. (The CHANGELOG.md in this repo is frozen history from before this change; the changelog that matters is the CLI's.)
Releasing a change to this repo: the marketplace is served from the default branch — Claude Code clones the repo and git pulls main on claude plugin marketplace update. So a plugin-only change (README, CI, docs) "releases" simply by merging to `main`; there's no tag or publish step. Only bump plugin.json version by hand if you make a change that affects the installed runtime (e.g. the MCP server URL) and it must reach already-installed users before the next CLI release; otherwise let the next CLI sync carry the version forward.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.