Marketplace Health Check
Runs a parallel six-dimension audit of a skills-marketplace repo — script safety, docs consistency, PII, PRs, issues, manifest — then reports only the findings you verified yourself.
AutomationAdvanced★ 1,323⑂ 212AI score 7/10Last updated: Aug 8, 2026
What it does
Launches a parallel fan-out workflow that sweeps the repo along six independent dimensions at once:
- Code & script safety — dangerous deletes, secret leaks, hardcoded real paths, bare
except, injection, missing shebangs - Docs / SSOT consistency — version drift across marketplace.json, both READMEs, CHANGELOG and the git release; wrong skill counts; broken references
- Security / PII — keyword-free leaks gitleaks cannot catch (real names, private domains) and the limits of a
.security-scan-passedmarker - Open-PR triage — worth-merging / needs-changes / decline-as-promotion
- Open-issue triage — real bugs vs skill requests vs promotion, including the broken-install-command bug class
- Manifest integrity — validation scripts, orphaned skills, missing registrations
The best part is the last step: agent findings are treated as hypotheses. You verify every high/critical item with a one-line command, tag it ✅ real / ⚠️ partly / ❌ false alarm, then report as 🔴 must-fix → 🟠 backlog → 🟢 optional → 💡 key insights.
Who it's for
- Maintainers of a Claude Code skills/plugin marketplace repo
- Anyone who wants a pre-release sweep of versions, docs and manifests in one pass
- Owners of public repos worried about leftover real names, internal domains or personal data
- Maintainers with a backlog of external PRs and issues needing consistent triage
Example uses
- "Do a full sweep before I cut the release" → six inspectors run in parallel and surface two version mismatches between marketplace.json and the CHANGELOG with exact line numbers
- "Is this safe to keep public?" → finds a real internal domain in an example file and explicitly warns against 'fixing' it by listing the real value in a public allowlist
- "Triage my open PRs and issues" → classifies each PR and flags the ones that touched skill files without bumping the skill's version
· · · Install guide · · ·
Install in the Claude app (no terminal)
- Download the ZIP with the button below.
- In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
- Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
Install in Claude Code
Let Claude do it — paste this into Claude Code
Install the skill I found on Claude Skill Mart. Copy the marketplace-health-check folder from the GitHub repo daymade/claude-code-skills into my ~/.claude/skills/marketplace-health-check/. When it's done, tell me in one line what this skill can do.
Install with a command instead
git clone https://github.com/daymade/claude-code-skills.git /tmp/ccs && mkdir -p ~/.claude/skills && cp -r /tmp/ccs/marketplace-health-check ~/.claude/skills/ && rm -rf /tmp/ccs⚠ This is a third-party skill. Check the source repository before installing.
- Open a terminal.
- Clone the repo into a temp folder:
git clone https://github.com/daymade/claude-code-skills.git /tmp/ccs - Make sure the skills folder exists:
mkdir -p ~/.claude/skills - Copy just this skill:
cp -r /tmp/ccs/marketplace-health-check ~/.claude/skills/ - Clean up:
rm -rf /tmp/ccs - Confirm the
scripts/andreferences/subfolders came along — the bundled workflow script is required. - Install prerequisites: the GitHub CLI (
gh auth status, orgh auth loginif not signed in) andjq. - Start Claude Code inside the repo you want to audit and ask: "run a full repo health check".
- Expect 15-20 minutes and a large token spend per run; review the up-front cost estimate before approving.
View source on GitHub ↗License: MIT