All skills
am-will avatar

/pluginstaller

@ab9235e
by am.willam-will/codex-skills1k stars
60

Add a Codex plugin from a GitHub repo to a repo or personal marketplace using the current Codex plugin layout and marketplace metadata.

Use this Skill: https://skilld.dev/gh/am-will/codex-skills/pluginstaller

This session only. Nothing lands on disk.

referencesinstall-scope.md

≈287 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Install Scope Notes

  • Prefer repo marketplace and personal marketplace terminology.
  • repo marketplace:
    • Copy the plugin directory to $CWD/plugins/<plugin-name>.
    • Write or update $CWD/.agents/plugins/marketplace.json.
    • Use source.path: "./plugins/<plugin-name>".
  • personal marketplace:
    • Copy the plugin directory to ~/.codex/plugins/<plugin-name>.
    • Write or update ~/.agents/plugins/marketplace.json.
    • Use source.path: "./.codex/plugins/<plugin-name>".
  • Codex resolves source.path relative to the marketplace root, not relative to .agents/plugins/.
  • Those plugin directories are the documented defaults, not hard requirements, if another marketplace-relative path is already in use.
  • Marketplace entries should also include policy.installation, policy.authentication, and category.
  • The marketplace makes the plugin discoverable; Codex installs the runnable copy into ~/.codex/plugins/cache/<marketplace>/<plugin>/<version>/.
  • For local plugins, the installed cache version is local.
  • After changing the plugin or marketplace files, restart Codex and verify the plugin in /plugins.

Source: SKILL.md on GitHub

1 warning11d4 checks · Risk SAFE
  • Gen Agent Trust Hub11d

    The skill installs third-party plugins from GitHub repositories into local directories. While this is the intended functionality, it involves downloading untrusted content and writing to the user's home directory, which presents inherent risks if the source repository is malicious.

  • Socket11d

    No alerts

  • Snyk11d

    Risk: MEDIUM · 1 issue

  • ZeroLeaks5mo

    Score: 93/100 · 2 sections analyzed

Signed by skilld at ab9235e. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 months ago.

Steadyupdated 6 months ago

README badge

README badge for am-will/codex-skills/pluginstaller