marketplace-dev
An agent skill by daymade, from daymade/claude-code-skills. Tags: distribution, github, integration, marketplace, setup.
What it does
Creates and maintains Claude Code plugin marketplaces, consolidates standalone skills into a new or existing suite, and moves skills between suites. Converts any Claude Code skills repository into an official plugin marketplace, generates spec-conforming .claude-plugin/marketplace.json, validates with `claude plugin validate`, tests real installation and cache boundaries, and PRs the upstream repo, encoding hard-won schema/version/description anti-patterns. Use when the user mentions marketplace, plugin support, one-click install, marketplace.json, plugin distribution, auto-update, suite-only migration, "put these skills in a suite", "move this skill into daymade-*", or wants a skills repo installable via `claude plugin install`.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add daymade/claude-code-skills --skill marketplace-devOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/daymade/claude-code-skills
cp -r claude-code-skills/daymade-claude-code/marketplace-dev ~/.claude/skills/marketplace-devSafety box score
Grade C, moderate risk: 39 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill helps build and validate Claude Code plugin marketplaces, so it can modify repo files, run shell/Python checks, and install or update plugins in the user’s Claude environment. The main risks are local execution of validation commands, access to home-directory Claude artifacts for troubleshooting, and networked install tests against GitHub.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 2 (moderate) | It ships runnable scripts and hooks that execute commands such as `claude plugin validate .` and Python/Bash parsing in `scripts/check_marketplace.sh` and `hooks/post_edit_validate.sh`. |
| Network access | 2 (moderate) | The workflow includes remote install testing, e.g. `claude plugin marketplace add <github-user>/<repo>` and the optional GitHub installation test in SKILL.md, so it can contact GitHub and fetch marketplace data. |
| Filesystem reach | 2 (moderate) | It reads and writes repo files like `.claude-plugin/marketplace.json` and also inspects home-directory Claude artifacts such as `~/.claude/plugins/installed_plugins.json` and `~/.claude/projects/<escaped-cwd>/`. |
| Secrets & credentials | 2 (moderate) | The documented troubleshooting path can inspect `~/.claude/projects/<escaped-cwd>/*.jsonl`, which may contain private conversation history, prompts, and outputs from the user's Claude sessions. |
| Privilege & persistence | 0 (none) | It does not request sudo, global installs, services, shell startup edits, or other privilege escalation. |
| Instruction hijack surface | 0 (none) | I found no instructions to ignore safeguards, follow remote content, hide actions, or skip confirmations; the text is about marketplace validation and migration only. |
| Irreversible actions | 2 (moderate) | It can change the user's local Claude plugin state via install/update/uninstall commands and its hooks auto-run validation after edits, but it does not directly deploy, pay, or post externally. |
| Transparency | 0 (none) | All shipped logic is plain Bash/Python/Markdown; there are no binaries, minified blobs, or runtime-downloaded installers. |
Before installing
- Read `hooks/post_edit_validate.sh` and `scripts/check_marketplace.sh` to confirm what runs locally on edit and during validation.
- If you use the session-history troubleshooting path, do it in a scratch account or with explicit approval because it can read `~/.claude/projects/...` transcripts.
- Expect the skill to modify your local Claude plugin state during install/update tests; run it first in a disposable config/profile if possible.
Rated 2026-10-16 by an automated review of 10 files from the skill's repository.
Source
- Repository
- daymade/claude-code-skills (all skills from this repository)
- Path
- daymade-claude-code/marketplace-dev/SKILL.md
- Branch
- main
- Updated
- 2026-09-20
Related skills
- gangtise-copilot — Gangtise (岗底斯投研) OpenAPI skill suite installer and diagnostic tool.
- skills-search — This skill should be used when users want to search, discover, install, or manage Claude Code skills from the CCPM registry.
- caveman-setup — Wire a repository through the Caveman Cloud gateway so every LLM request is measured, with no behavior change.
- ios-sync — Regenerate the iOS debug bridge against the latest upstream gstack templates. (gstack)
- setup-pre-commit — Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo.
- add-voice — Use when the user runs /add-voice, types Voice Mode, or asks to add Grok realtime voice to an app.