What changed
A plugin is no longer a prompt people copy. It installs, it can run hooks before anyone asks, and teams open it in more than one editor.
AuditHQ scores a Claude plugin with more than 170 fixed rules. The same tree gets the same findings. Nothing in the plugin is executed.
What the new rows are about
Hooks that can call themselves again, and hooks that do not stay blocking when the editor is not Claude Code. Layouts that install in one product and fail in another.
Those sit next to the older checks: oversized skills, credentials in the published files, and commands that run before review. The article does not list every rule. The audit does.
How to use the result
Run the plugin audit on the published repo. Fix the high rows. The ticket board keeps an open issue as one ticket if you audit again.
Re-run after the change. A plugin that only looks fine in one editor is not finished if your users open it somewhere else.