[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"extension-plugin-dotneet-agent-call-es":3,"guides-for-dotneet-agent-call":265,"similar-k179hr7vrt27swezvnbwa714dx866jjy":266},{"_creationTime":4,"_id":5,"children":6,"community":7,"display":9,"evaluation":19,"identity":208,"isFallback":213,"parentExtension":214,"providers":246,"relations":249,"repo":250,"workflow":264},1778053599340.3232,"k179hr7vrt27swezvnbwa714dx866jjy",[],{"reviewCount":8},0,{"description":10,"installMethods":11,"name":12,"sourceUrl":13,"tags":14},"call another agent such as cursor-agent, codex, claude to perform a task.",{},"Agent Call","https://github.com/dotneet/claude-code-marketplace/tree/HEAD/agent-call",[15,16,17,18],"agent","cli","wrapper","delegation",{"_creationTime":20,"_id":21,"extensionId":5,"locale":22,"result":23,"trustSignals":197,"workflow":206},1778053627853.4883,"kn7bh2e3tb9m5z8b14r53khwes8676zb","en",{"checks":24,"evaluatedAt":187,"extensionSummary":188,"promptVersionExtension":189,"promptVersionScoring":190,"rationale":191,"score":192,"summary":193,"tags":194,"targetMarket":195,"tier":196},[25,30,34,38,42,45,49,53,56,59,63,68,71,75,78,81,84,87,90,93,97,101,105,109,113,116,119,122,126,129,132,135,138,141,144,147,149,152,155,158,160,163,166,169,173,176,179,183],{"category":26,"check":27,"severity":28,"summary":29},"Practical Utility","Problem relevance","pass","The displayed description clearly states the problem being addressed: calling another agent to perform a task.",{"category":26,"check":31,"severity":32,"summary":33},"Unique selling proposition","info","The extension appears to be a thin wrapper around CLI commands for different agents, with limited added value beyond direct invocation.",{"category":26,"check":35,"severity":36,"summary":37},"Production readiness","warning","The skills are basic wrappers and lack comprehensive error handling or configuration options, which limits their production readiness.",{"category":39,"check":40,"severity":28,"summary":41},"Scope","Single responsibility principle","Each skill in the plugin has a single responsibility: to call a specific agent. The plugin itself is focused on delegating tasks to other agents.",{"category":39,"check":43,"severity":28,"summary":44},"Description quality","The displayed description accurately reflects the functionality of the skills within the plugin.",{"category":46,"check":47,"severity":28,"summary":48},"Invocation","Scoped tools","Each tool is a narrow verb-noun specialist, like 'call-claude' or 'call-codex', making them easy for an agent to select.",{"category":50,"check":51,"severity":36,"summary":52},"Documentation","Configuration & parameter reference","The SKILL.md files mention parameters like '{task_description}' and mention timeout settings but do not document default values or explicit precedence orders.",{"category":39,"check":54,"severity":28,"summary":55},"Tool naming","Tool names are descriptive and follow a clear 'call-\u003Cagent-name>' pattern.",{"category":39,"check":57,"severity":28,"summary":58},"Minimal I/O surface","Tools accept a single '{task_description}' parameter and return the output of the called agent, with no unnecessary data.",{"category":60,"check":61,"severity":28,"summary":62},"License","License usability","The MIT license is clearly declared in the plugin.json.",{"category":64,"check":65,"severity":66,"summary":67},"Maintenance","Commit recency","not_applicable","No commit history is available for evaluation.",{"category":64,"check":69,"severity":66,"summary":70},"Dependency Management","No third-party dependencies are explicitly managed within this plugin.",{"category":72,"check":73,"severity":32,"summary":74},"Security","Secret Management","The SKILL.md files show placeholder commands that use CLI arguments which could potentially expose secrets if not handled carefully by the underlying CLIs.",{"category":72,"check":76,"severity":36,"summary":77},"Injection","The `codex exec --sandbox danger-full-access` command and the `claude -p --dangerously-skip-permissions` command appear to bypass security sandboxing without explicit justification or warnings, posing an injection risk.",{"category":72,"check":79,"severity":36,"summary":80},"Transitive Supply-Chain Grenades","The use of commands like `which` and direct CLI execution without clear sandboxing or input validation could allow for transitive supply-chain attacks if the underlying tools are compromised.",{"category":72,"check":82,"severity":36,"summary":83},"Sandbox Isolation","The `codex exec --sandbox danger-full-access` command and the `claude -p --dangerously-skip-permissions` command explicitly bypass sandbox protections, indicating a potential for unintended side effects or security risks.",{"category":72,"check":85,"severity":66,"summary":86},"Sandbox escape primitives","No explicit sandbox escape primitives were detected in the provided scripts.",{"category":72,"check":88,"severity":36,"summary":89},"Data Exfiltration","The commands used (e.g., `claude -p`, `codex exec --sandbox danger-full-access`) might allow for unredacted data exfiltration if the underlying tools are not properly configured or if the '{task_description}' includes sensitive information.",{"category":72,"check":91,"severity":28,"summary":92},"Hidden Text Tricks","No hidden text tricks or obfuscation techniques were found in the bundled content.",{"category":94,"check":95,"severity":36,"summary":96},"Hooks","Opaque code execution","The skills rely on executing external CLI commands (`claude`, `codex`, `cursor-agent`), which are opaque code execution mechanisms if their internal workings are not fully understood or trusted.",{"category":98,"check":99,"severity":36,"summary":100},"Portability","Structural Assumption","The skills assume the presence and correct installation of external CLIs ('claude', 'codex', 'cursor-agent') and that they are in the system's PATH, which might not be true for all user environments.",{"category":102,"check":103,"severity":66,"summary":104},"Trust","Issues Attention","Issue data is not available for evaluation.",{"category":106,"check":107,"severity":28,"summary":108},"Versioning","Release Management","A meaningful version ('1.0.0') is declared in the plugin.json manifest.",{"category":110,"check":111,"severity":36,"summary":112},"Code Execution","Validation","The '{task_description}' parameter is passed directly to CLI commands without explicit validation or sanitization within the skill scripts, potentially allowing for injection if the input is malicious.",{"category":72,"check":114,"severity":36,"summary":115},"Unguarded Destructive Operations","The 'codex exec --sandbox danger-full-access' and 'claude -p --dangerously-skip-permissions' commands suggest potentially destructive operations are not adequately guarded or confirmed by default.",{"category":110,"check":117,"severity":36,"summary":118},"Error Handling","The skills check for the existence of the CLIs but do not implement robust error handling for cases where the CLI is not found, or if the CLI commands themselves fail, potentially leading to silent failures or opaque errors.",{"category":110,"check":120,"severity":66,"summary":121},"Logging","No logging is implemented in the provided scripts for audit purposes.",{"category":123,"check":124,"severity":36,"summary":125},"Compliance","GDPR","The plugin directly invokes external agents with user-provided task descriptions, which could contain personal data. Without explicit sanitization or user consent prompts, this could lead to unintended data submission to third parties.",{"category":123,"check":127,"severity":66,"summary":128},"Target market","No regional or jurisdictional signals were detected in the extension's code or documentation.",{"category":98,"check":130,"severity":36,"summary":131},"Runtime stability","The skills assume the availability and specific command-line interfaces of 'claude', 'codex', and 'cursor-agent', which may not be present or configured identically on all systems, potentially leading to silent failures or crashes.",{"category":39,"check":133,"severity":28,"summary":134},"Tool surface size","The plugin exposes 3 tools, which is within the recommended range.",{"category":46,"check":136,"severity":36,"summary":137},"Name collisions","The skill names ('call-claude', 'call-codex', 'call-cursor-agent') could potentially collide with Claude Code built-in commands or other installed skills if not properly namespaced by the router.",{"category":46,"check":139,"severity":66,"summary":140},"Overlapping near-synonym tools","The tools are distinct and call different agents, so there are no near-synonym tools.",{"category":46,"check":142,"severity":66,"summary":143},"Hooks-off mechanism","This plugin does not appear to utilize hooks, so a hooks-off mechanism is not applicable.",{"category":46,"check":145,"severity":66,"summary":146},"Hook matcher tightness","No hooks are present in this plugin.",{"category":72,"check":148,"severity":66,"summary":146},"Hook security",{"category":94,"check":150,"severity":66,"summary":151},"Silent prompt rewriting","No 'UserPromptSubmit' hooks are present in this plugin.",{"category":72,"check":153,"severity":66,"summary":154},"Permission Hook","No 'PermissionRequest' hooks are present in this plugin.",{"category":123,"check":156,"severity":66,"summary":157},"Hook privacy","No hooks are present in this plugin that handle logging or telemetry.",{"category":110,"check":159,"severity":66,"summary":146},"Hook dependency",{"category":50,"check":161,"severity":28,"summary":162},"Install / Setup Instructions","The README provides clear installation instructions for the marketplace and individual plugins.",{"category":50,"check":164,"severity":28,"summary":165},"Feature Transparency","The README clearly lists the available skills and their purposes.",{"category":50,"check":167,"severity":28,"summary":168},"Phantom features","All features described in the README correspond to implemented skills.",{"category":170,"check":171,"severity":28,"summary":172},"Convention","Layout convention adherence","The plugin follows standard Claude Code plugin conventions, with plugin.json in .claude-plugin and skills in a separate directory.",{"category":170,"check":174,"severity":66,"summary":175},"Plugin state","The plugin does not appear to manage persistent state.",{"category":72,"check":177,"severity":66,"summary":178},"Keychain-stored secrets","The plugin does not consume secrets that would require keychain storage.",{"category":180,"check":181,"severity":66,"summary":182},"Dependencies","Tagged release sourcing","The plugin does not bundle external MCP servers; it calls external CLIs.",{"category":184,"check":185,"severity":28,"summary":186},"Installation","Clean uninstall","The plugin's actions appear to be session-scoped and do not spawn background daemons or services that would persist after uninstall.",1778053613245,"This plugin provides three skills: `call-claude`, `call-codex`, and `call-cursor-agent`, each designed to invoke a specific AI agent's CLI with a user-provided task description. It assumes the target CLIs are installed and configured on the user's system.","2.0.0","3.4.0","The plugin is functional and follows basic structural conventions, but has several security and robustness warnings related to its reliance on external CLIs and lack of input validation/error handling. The use of `--sandbox danger-full-access` and `--dangerously-skip-permissions` flags is a significant concern.",75,"This plugin allows delegation of tasks to other AI agents via their respective CLIs, but lacks robust security and error handling.",[15,16,17,18],"global","evaluated",{"codeQuality":198,"collectedAt":199,"documentation":200,"maintenance":202,"security":203,"testCoverage":205},{},1778053600853,{"descriptionLength":201,"readmeSize":8},73,{},{"hasNpmPackage":204,"smitheryVerified":204},false,{"hasCi":204,"hasTests":204},{"updatedAt":207},1778053627853,{"githubOwner":209,"githubRepo":210,"locale":22,"slug":211,"type":212},"dotneet","claude-code-marketplace","agent-call","plugin",true,{"_creationTime":215,"_id":216,"community":217,"display":218,"identity":229,"parentExtension":232,"providers":233,"relations":241,"workflow":243},1778053599340.3228,"k177j4qet0f36cgczpf38e8ct5866nhy",{"reviewCount":8},{"description":219,"installMethods":220,"name":221,"sourceUrl":222,"tags":223},"Various tools for software development.",{},"Claude Code Marketplace","https://github.com/dotneet/claude-code-marketplace",[224,225,226,15,227,228],"development-tools","code-review","research","prompt-optimization","google-integration",{"githubOwner":209,"githubRepo":210,"locale":22,"slug":230,"type":231},"dotneet-marketplace","marketplace",null,{"extract":234,"llm":239},{"commitSha":235,"license":236,"marketplace":237},"07fa7eac95c2323f73e5a8a961b70bb9e207f1d0","MIT",{"name":230,"pluginCount":238},6,{"promptVersionExtension":189,"promptVersionScoring":190,"score":240,"targetMarket":195,"tier":196},65,{"repoId":242},"kd749h8eebkjfvprkd1zp9w8v9864ppm",{"anyEnrichmentAt":244,"extractAt":245,"githubAt":244,"llmAt":207,"updatedAt":207},1778053599740,1778053599340,{"extract":247,"llm":248},{"commitSha":235,"license":236},{"promptVersionExtension":189,"promptVersionScoring":190,"score":192,"targetMarket":195,"tier":196},{"parentExtensionId":216,"repoId":242},{"_creationTime":251,"_id":242,"identity":252,"providers":253,"workflow":261},1777995558409.8433,{"githubOwner":209,"githubRepo":210,"sourceUrl":222},{"discover":254,"github":257},{"sources":255},[256],"skills-sh",{"closedIssues90d":8,"forks":8,"openIssues90d":8,"pushedAt":258,"readmeSize":259,"stars":8,"topics":260},1769158530000,2738,[],{"discoverAt":262,"extractAt":263,"githubAt":263,"updatedAt":263},1777995558409,1778053600212,{"anyEnrichmentAt":244,"extractAt":245,"githubAt":244,"llmAt":207,"updatedAt":207},[],[267,302,336,358],{"_creationTime":268,"_id":269,"community":270,"display":271,"identity":282,"providers":286,"relations":294,"workflow":297},1778054452948.4097,"k17awzvhhaeaj8jcsnx8bcvgyd866nq9",{"reviewCount":8},{"description":272,"installMethods":273,"name":274,"sourceUrl":275,"tags":276},"Development kit for working with the Claude Agent SDK",{},"Agent SDK Development Plugin","https://github.com/anthropics/claude-plugins-official/tree/HEAD/plugins/agent-sdk-dev",[277,278,279,280,15,16,281],"sdk","development","typescript","python","verification",{"githubOwner":283,"githubRepo":284,"locale":22,"slug":285,"type":212},"anthropics","claude-plugins-official","agent-sdk-dev",{"extract":287,"llm":290,"smithery":293},{"commitSha":288,"license":289},"06f52cd3ac3e47ecb45228a86183ea2a86e9d6ff","Apache-2.0",{"promptVersionExtension":189,"promptVersionScoring":190,"score":291,"targetMarket":195,"tier":292},98,"verified",{"qualityScore":8,"totalActivations":8,"uniqueUsers":8,"useCount":8,"verified":204},{"parentExtensionId":295,"repoId":296},"k171b9714j6pgfxqht22y94q4x866sck","kd798hf3w99qz2xt1fqtgq7gf9865e31",{"anyEnrichmentAt":298,"extractAt":299,"githubAt":300,"llmAt":301,"smitheryAt":298,"updatedAt":301},1778054509977,1778054452948,1778054454391,1778054703946,{"_creationTime":303,"_id":304,"community":305,"display":306,"identity":320,"providers":324,"relations":329,"workflow":332},1778053078370.9028,"k17dwt2y8zcwbj9r1ccgc0mwvs867jac",{"reviewCount":8},{"description":307,"installMethods":308,"name":309,"sourceUrl":310,"tags":311},"Complete Claude Code plugin development system. PROACTIVELY activate when users want to: (1) Create/build plugins with 2025 features, (2) Add skills/commands/agents/hooks, (3) Validate plugin structure, (4) Publish to marketplace, (5) Get plugin development guidance. Provides: agent-first design patterns, progressive disclosure skills, hook automation, MCP integration, marketplace publishing. Includes plugin-expert agent and validation utilities.",{},"Plugin Master","https://github.com/josiahsiegel/claude-plugin-marketplace/tree/HEAD/plugins/plugin-master",[312,15,313,314,315,316,231,317,318,319],"plugin-development","skill","hooks","mcp","commands","validation","automation","devops",{"githubOwner":321,"githubRepo":322,"locale":22,"slug":323,"type":212},"josiahsiegel","claude-plugin-marketplace","plugin-master",{"extract":325,"llm":327},{"commitSha":326,"license":236},"a05d923c8a3551d4274eef152649583d693b9b67",{"promptVersionExtension":189,"promptVersionScoring":190,"score":328,"targetMarket":195,"tier":292},99,{"parentExtensionId":330,"repoId":331},"k1741p5y8fyyp90j4zdea56w61867nj3","kd75az366mhppxzk11c689vzen865qkv",{"anyEnrichmentAt":333,"extractAt":334,"githubAt":333,"llmAt":335,"updatedAt":335},1778053080008,1778053078370,1778053164925,{"_creationTime":337,"_id":338,"community":339,"display":340,"identity":350,"providers":352,"relations":356,"workflow":357},1778054452948.4272,"k179khyq4dvq0ytvdcepec984d8666wk",{"reviewCount":8},{"description":341,"name":342,"sourceUrl":343,"tags":344},"Comprehensive toolkit for developing Claude Code plugins. Includes 7 expert skills covering hooks, MCP integration, commands, agents, and best practices. AI-assisted plugin creation and validation.","Plugin Development Toolkit","https://github.com/anthropics/claude-plugins-official/tree/HEAD/plugins/plugin-dev",[278,345,314,346,347,315,16,318,348,349],"plugin-creation","agents","skills","guidance","best-practices",{"githubOwner":283,"githubRepo":284,"locale":22,"slug":351,"type":212},"plugin-dev",{"extract":353,"llm":354,"smithery":355},{"commitSha":288,"license":289},{"promptVersionExtension":189,"promptVersionScoring":190,"score":328,"targetMarket":195,"tier":292},{"qualityScore":8,"totalActivations":8,"uniqueUsers":8,"useCount":8,"verified":204},{"parentExtensionId":295,"repoId":296},{"anyEnrichmentAt":298,"extractAt":299,"githubAt":300,"llmAt":301,"smitheryAt":298,"updatedAt":301},{"_creationTime":359,"_id":360,"community":361,"display":362,"identity":370,"providers":372,"relations":376,"workflow":377},1778054452948.4277,"k17dy0a0ez2dwjdmah5awj73vd8668cj",{"reviewCount":8},{"description":363,"installMethods":364,"name":365,"sourceUrl":366,"tags":367},"Comprehensive PR review agents specializing in comments, tests, error handling, type design, code quality, and code simplification",{},"PR Review Toolkit","https://github.com/anthropics/claude-plugins-official/tree/HEAD/plugins/pr-review-toolkit",[225,368,369,15,318],"pr","developer-tools",{"githubOwner":283,"githubRepo":284,"locale":22,"slug":371,"type":212},"pr-review-toolkit",{"extract":373,"llm":374,"smithery":375},{"commitSha":288,"license":289},{"promptVersionExtension":189,"promptVersionScoring":190,"score":291,"targetMarket":195,"tier":292},{"qualityScore":8,"totalActivations":8,"uniqueUsers":8,"useCount":8,"verified":204},{"parentExtensionId":295,"repoId":296},{"anyEnrichmentAt":298,"extractAt":299,"githubAt":300,"llmAt":301,"smitheryAt":298,"updatedAt":301}]