midnight-plugin-utils:dependency-scanner

To detect undeclared dependencies in a Claude plugin, scan source files using regex pattern matching to find references to external skills, agents, and system commands. This process produces a JSON array of raw matches with location and context to identify missing extends-plugin.json declarations.

The extends-plugin.json manifest is used in Claude plugins to explicitly declare external dependencies. Scanning source files for pattern-based references helps generate this manifest, preventing packaging oversights and runtime failures caused by undeclared skills, agents, or system commands.

Generate an extends-plugin.json manifest by scanning Markdown, JSON, Python, and shell files for external references. The scanner produces raw regex matches, assists grouping and filtering, and uses interactive confirmations to decide required versus optional dependencies before writing the manifest.

Yes, the dependency scanner requires Python 3 to audit local plugin directories. Additionally, scanning installed marketplace plugins for provider identification requires access to installed_plugins and marketplace metadata to accurately filter and group external skill references.

A Claude plugin may fail at runtime after a refactor due to undeclared external dependencies. Scanning source files for pattern-based references to skills and system commands can investigate missing runtime prerequisites and help update the extends-plugin.json manifest.

The best way to audit external skill references in local plugin folders is to run a static analysis scanner that searches for regex patterns across source files. This produces a structured JSON array of matches with type and context, allowing you to interactively confirm dependencies before manifest generation.