marketplace: v1.0.0 submission prep for claude-plugins-community#10
Merged
Conversation
Slice: Anthropic plugin marketplace submission (Z1 from strategic pivot 2026-05-16). Submission portal: https://clau.de/plugin-directory-submission Changes in this commit: - plugin.json: bump 0.1.0 -> 1.0.0; add `category: security` and `tags` per the verified marketplace.json schema; tighten description to lead with the deterministic / out-of-band positioning. - README.md: add "Install via Anthropic plugin marketplace (recommended)" section with the canonical `claude plugin marketplace add anthropics/claude-plugins-community` command. - SPEC-marketplace-submission.md: slice contract with 7 verifiable success criteria and Agent-Native Estimate (optimistic 3h / likely 6h / pessimistic 10h, confidence medium). - SECURITY_AUDIT.md: per-hook compliance audit across all 31 wired scripts. All hooks PASS the security guidance bar: no .env reads, no network calls, no API key access, no auto-loading skills, no CVE-2026-21852 class issues. - SUBMISSION_FORM.md: operator-ready content for every plausible form field at clau.de/plugin-directory-submission. - MARKETPLACE_SUBMISSION_LOG.md: durable submission record stub. - .taste/specqa/marketplace-2026-05-16/: Spec QA review (0 critical, 3 major all with concrete Task-1/Task-2 actions, 5 minor). Reviewer-evidence: 7 deepresearch queries on 2026-05-16 covering Anthropic plugin marketplace docs, submission portal canonical URL, trust-pyramid analysis (Pluto Security), CVE-2026-21852, and the verified marketplace.json schema in anthropics/claude-plugins-official. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Anthropic plugin docs (https://code.claude.com/docs/en/plugins, read 2026-05-16 in Claude Code v2.1.143) document the canonical submission forms as: - https://claude.ai/settings/plugins/submit - https://platform.claude.com/plugins/submit Both route to the same Anthropic internal review pipeline. The clau.de short link I had previously cited resolves to those forms but the docs cite the long forms directly, so the artifacts now match the docs. Local plugin-load test passed using the documented --plugin-dir testing pattern: claude --plugin-dir /home/fer/Documents/llm-dark-patterns \\ -p 'Reply exactly: PLUGIN_LOAD_OK' # stdout: PLUGIN_LOAD_OK # exit 0 Updates in this commit: - SUBMISSION_FORM.md: replace clau.de URL with the two in-app form URLs; add local-load command evidence. - MARKETPLACE_SUBMISSION_LOG.md: same URL update; add local-load evidence under the submission record stub. - SPEC-marketplace-submission.md: same URL update everywhere. - SECURITY_AUDIT.md: new "Local load verification" subsection documenting the --plugin-dir test as the closest pre-submission shape check available outside Anthropic's review pipeline. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Live verification on 2026-05-16 against the public claude-plugins-community marketplace.json (1715 plugins, fetched raw from GitHub): curl -fsSL https://raw.githubusercontent.com/anthropics/claude-plugins-community/main/.claude-plugin/marketplace.json \\ | jq '[.plugins[] | select(.source | tostring | test("waitdead"))] | length' # 0 Our 2026-05-11 submission shows "Published" on the submissions dashboard but does not appear in the live marketplace.json. This matches the unresolved pattern in anthropics/claude-plugins-official#1272 (closed without resolution). Actions in this commit: - SUBMISSION_FORM.md: prepend resubmission-context section noting the Published-but-not-listed state and referencing tracking issue anthropics/claude-plugins-official#1887. Reframe description as v1.0.0 update of the prior 10-hook listing. - MARKETPLACE_SUBMISSION_LOG.md: split submission record into v0.1.0 (original) and v1.0.0 (planned) sections; document the marketplace absence verification command and tracking issue. Companion action (not in this commit): GitHub issue anthropics/claude-plugins-official#1887 opened with the same evidence, asking Anthropic for clarification on the Published-vs-listed gap. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Switches the primary install snippet to the self-hosted marketplace at github.com/waitdeadai/claude-plugins so users can actually install the plugin today, regardless of when Anthropic's community pipeline resolves the Published-but-not-listed gap. Background: as of 2026-05-16 (verified against the raw community marketplace.json, 1715 plugins, zero waitdeadai matches), our 2026-05-11 submission shows status Published in the submissions dashboard but is not present in the live directory. Multiple unresolved tracking issues: - #1887 (ours, opened 2026-05-16) - #1272 (closed without resolution after a fix for one specific user) - #984 (Synaptic, OPEN since 2026-03-25, two months stuck) - #1292, #1597 The new self-hosted marketplace bypasses that pipeline. The existing community-marketplace install snippet is preserved below the new one as a future fallback for when Anthropic's pipeline catches up. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Prep work for the first Anthropic plugin marketplace submission via
clau.de/plugin-directory-submission. Implements slice Z1 of the strategic pivot logged on 2026-05-16.Changes
0.1.0→1.0.0, addcategory: securityand 5 marketplacetags, tighten description..envreads, no network calls, no API key access, no auto-loading skills, no CVE-2026-21852 class issues.Test plan
testsworkflow green on this PR (28-hook smoke + 337-fixture stress + pack-loader unit tests).SECURITY_AUDIT.mdandSUBMISSION_FORM.mdbefore clicking Submit onclau.de/plugin-directory-submission.MARKETPLACE_SUBMISSION_LOG.mdpost-submit.Reviewer evidence (deepresearch 2026-05-16)
clau.de/plugin-directory-submission(verified as canonical viaanthropics/claude-plugins-communityREADME).anthropics/claude-plugins-official/.claude-plugin/marketplace.json.claude.com/plugins/security-guidance; trust-pyramid concerns analysed via Pluto Security.agent-closeout-bench/.taste/strategic-pivot/2026-05-16/STRATEGIC-PIVOT.md.Not in scope
external_plugins/directory inclusion — follow-up after standard listing.🤖 Generated with Claude Code