ed3dai/ed3d-plugins/creating-a-plugin

my-plugin/
 .claude-plugin/
    plugin.json              # Required: plugin manifest
 commands/                    # Optional: slash commands
    my-command.md
 agents/                      # Optional: specialized subagents
    my-agent.md
 skills/                      # Optional: reusable techniques
    my-skill/
        SKILL.md
 hooks/                       # Optional: event handlers
    hooks.json
 .mcp.json                    # Optional: MCP server configs
 README.md                    # Recommended: documentation

{
  "name": "my-plugin"
}

{
  "name": "my-plugin",                    // Required: kebab-case identifier
  "version": "1.0.0",                     // Recommended: semantic versioning
  "description": "What this plugin does", // Recommended: brief description
  "author": {                             // Optional but recommended
    "name": "Your Name",
    "email": "you@example.com",
    "url": "https://github.com/yourname"
  },
  "homepage": "https://github.com/yourname/my-plugin",
  "repository": "https://github.com/yourname/my-plugin",
  "license": "MIT",
  "keywords": ["productivity", "automation"],
  "commands": [                           // Optional: explicit command paths
    "./commands/cmd1.md",
    "./commands/cmd2.md"
  ],
  "agents": [                             // Optional: explicit agent paths
    "./agents/agent1.md"
  ],
  "hooks": [                              // Optional: inline hooks
    {
      "event": "PostToolUse",
      "matcher": "Edit|Write",
      "command": "npx prettier --write \"$CLAUDE_FILE_PATHS\""
    }
  ],
  "mcpServers": {                         // Optional: inline MCP configs
    "my-server": {
      "command": "${CLAUDE_PLUGIN_ROOT}/servers/my-server",
      "args": ["--port", "8080"],
      "env": {
        "API_KEY": "${API_KEY}"
      }
    }
  }
}

---
description: Brief description of what this command does
allowed-tools: Read, Grep, Glob, Bash
model: sonnet
argument-hint: "[file-path]"
---
 
# Command Name
 
Your command prompt goes here.
 
You can use:
-$1, $2, etc. for positional arguments
-$ARGUMENTS for all arguments as single string
-@filename to include file contents
-!bash command to execute shell commands
 
Example implementation instructions...

---
description: Review pull request for security and best practices
allowed-tools: Read, Grep, Glob, Bash
model: opus
argument-hint: "[pr-number]"
---
 
# Pull Request Review
 
Review pull request #$1 for:
 
1.Security vulnerabilities
2.Performance issues
3.Best practices compliance
4.Error handling
 
Steps:
1.Use Bash to run: gh pr diff $1
2.Use Read to examine changed files
3.Use Grep to search for common anti-patterns
4.Provide structured feedback with file:line references
 
Focus on critical issues first.

---
name: agent-name
description: When and why to use this agent (critical for auto-delegation)
tools: Read, Edit, Write, Grep, Glob, Bash
model: opus
---
 
# Agent Name
 
Detailed instructions and system prompt for this agent.
 
## Responsibilities
-Task 1
-Task 2
 
## Tools Available
-Read: File operations
-Grep: Code search
-Bash: Shell commands
 
## Workflow
1.Step 1
2.Step 2

---
name: security-auditor
description: Use when reviewing code for security vulnerabilities, analyzing authentication flows, or checking for common security anti-patterns like SQL injection, XSS, or insecure dependencies
tools: Read, Grep, Glob, Bash
model: opus
---
 
# Security Auditor Agent
 
You are a security expert specializing in web application security and secure coding practices.
 
## Your Responsibilities
 
1.Identify security vulnerabilities (SQL injection, XSS, CSRF, etc.)
2.Review authentication and authorization logic
3.Check for insecure dependencies
4.Verify input validation and sanitization
5.Review cryptographic implementations
 
## Workflow
 
1.**Scan for patterns:** Use Grep to find common vulnerability patterns
2.**Read suspicious code:** Use Read to examine flagged files
3.**Check dependencies:** Use Bash to run security audit tools
4.**Report findings:** Provide severity ratings and remediation steps
 
## Common Vulnerability Patterns
 
-SQL injection: String concatenation in queries
-XSS: Unescaped user input in templates
-CSRF: Missing CSRF tokens
-Auth bypass: Missing authorization checks
-Hardcoded secrets: API keys, passwords in code
 
## Reporting Format
 
For each finding:
-**Severity:** Critical/High/Medium/Low
-**Location:** `file:line`
-**Issue:** What's vulnerable
-**Impact:** What attacker could do
-**Fix:** How to remediate

---
name: my-skill-name
description: Use when [specific triggers] - [what it does]
---
 
# Skill Name
 
## Overview
Core principle in 1-2 sentences.
 
## When to Use
-Symptom 1
-Symptom 2
-When NOT to use
 
## Quick Reference
[Table or bullets for common operations]
 
## Implementation
[Code examples, patterns]
 
## Common Mistakes
[What goes wrong + fixes]

{
  "hooks": [
    {
      "event": "PreToolUse",
      "matcher": "Bash",
      "command": "echo 'About to run: $CLAUDE_TOOL_NAME'"
    },
    {
      "event": "PostToolUse",
      "matcher": "Edit|Write",
      "command": "npx prettier --write \"$CLAUDE_FILE_PATHS\""
    },
    {
      "event": "SessionStart",
      "matcher": "*",
      "command": "${CLAUDE_PLUGIN_ROOT}/scripts/setup.sh"
    }
  ]
}

{
  "mcpServers": {
    "database-tools": {
      "command": "${CLAUDE_PLUGIN_ROOT}/servers/db-server",
      "args": ["--config", "${CLAUDE_PLUGIN_ROOT}/config.json"],
      "env": {
        "DB_URL": "${DB_URL}",
        "API_KEY": "${API_KEY:-default-key}"
      }
    },
    "web-scraper": {
      "command": "npx",
      "args": ["web-mcp-server", "--port", "3000"]
    }
  }
}

{
  "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
  "name": "my-dev-marketplace",
  "version": "1.0.0",
  "owner": {
    "name": "Your Name",
    "email": "you@example.com"
  },
  "metadata": {
    "description": "Local development marketplace for my plugins",
    "pluginRoot": "./plugins"
  },
  "plugins": [
    {
      "name": "my-plugin-one",
      "version": "1.0.0",
      "description": "What this plugin does",
      "source": "./plugins/my-plugin-one",
      "category": "development",
      "author": {
        "name": "Your Name",
        "email": "you@example.com"
      }
    },
    {
      "name": "my-plugin-two",
      "version": "0.1.0",
      "description": "Experimental plugin",
      "source": "./plugins/my-plugin-two",
      "category": "productivity",
      "strict": false
    }
  ]
}