Codex + Claude Code

Prove the package before install.

PluginProof checks plugin manifests, component paths, marketplaces, Agent Skills, package contents, symlink containment, and cross-harness release drift—without running the plugin.

View source Releases

Read-only

Never starts hooks, MCP servers, binaries, scripts, or package lifecycle commands.

Cross-harness

Understands Codex and Claude Code manifests and catches name or version drift.

CI-ready

Human output by default, structured JSON for tooling, and strict checking when warnings matter.

Run one check

npx --yes --registry=https://codeberg.org/api/packages/automa-tan/npm/ \
  pluginproof@0.1.1 . --harness both

Catch failures that schema checks miss

✗ ERROR cross-harness-version-drift [both] .
  Codex and Claude manifests declare different release versions.

✗ ERROR component-symlink-escapes [codex] skills/shared
  A component symlink resolves outside the plugin root.

✗ ERROR package-omits-plugin-file [package] package.json
  The npm files list omits .codex-plugin/plugin.json.

Use it as an addon

PluginProof also ships as a native plugin with a prove-agent-plugin skill for reviewing a package before publication or installation.