Skip to content

Bootstrap marketplace catalog, docs, and validation CI#1

Merged
adunn08 merged 1 commit into
mainfrom
bootstrap-marketplace
May 26, 2026
Merged

Bootstrap marketplace catalog, docs, and validation CI#1
adunn08 merged 1 commit into
mainfrom
bootstrap-marketplace

Conversation

@adunn08
Copy link
Copy Markdown
Contributor

@adunn08 adunn08 commented May 26, 2026

Summary

Adds the marketplace catalog, full README, security policy, and a CI gate so the empty rampstackco/plugins repo becomes a working Claude Code plugin marketplace.

  • .claude-plugin/marketplace.json: catalog name rampstack, listing three curated subset plugins via github sources.
  • README.md: install commands, plugin table with verified skill counts (starter 14, seo 12, pm 12), trust note distinguishing the install payload from the author-time social-card tool, and links to the source catalog.
  • SECURITY.md: scoped to the marketplace manifest and docs.
  • .github/workflows/validate-manifests.yml: runs claude plugin validate . on push and pull_request.

Sources

All three plugins use the documented github source object form: { "source": "github", "repo": "owner/repo" }. Refs are left unpinned, so the plugin tracks each repo's default branch and the commit SHA acts as the version (per the version resolution rules). This matches how the existing claude-skills marketplace.json lists the same three plugins.

Validation

> claude plugin validate .
Validating marketplace manifest: .../.claude-plugin/marketplace.json
✔ Validation passed

> claude plugin validate . --strict
✔ Validation passed

Test plan

  • CI: validate-manifests workflow passes on this PR
  • Local: /plugin marketplace add ./ against this checkout discovers all three plugins
  • Local: /plugin install rampstack-starter@rampstack installs from the github source

- .claude-plugin/marketplace.json: catalog "rampstack" listing three
  curated subset plugins (rampstack-starter, rampstack-seo, rampstack-pm)
  via github sources pointed at their respective repos
- README.md: install instructions, plugin table with verified skill
  counts, trust note distinguishing the install payload from the
  author-time social-card tool, and links to the source catalog
- SECURITY.md: scoped to the marketplace manifest and docs, with
  redirects to skill content and per-plugin repos for out-of-scope
  reports
- .github/workflows/validate-manifests.yml: runs claude plugin
  validate on push and pull_request so an invalid manifest fails CI
@adunn08 adunn08 merged commit e19cd0a into main May 26, 2026
1 check passed
@adunn08 adunn08 deleted the bootstrap-marketplace branch May 26, 2026 18:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant