Agent Plugins Marketplace
← All plugins

stack-scan

v0.7.7

Know what is installed, keep it healthy, find what to add. /stack-scan:report inventories manifests, lockfiles (composer, npm/yarn/pnpm/bun), runtimes and docker images into a required-vs-installed table with drift, missing locks and EOL majors flagged. /stack-scan:audit runs the composer/npm vulnerability, outdated and licence checks (package-hygiene) — report-only. /stack-scan:suggest reads the same manifests and suggests every marketplace plugin in three tiers with cited evidence (--yes auto-installs tiers 1-2, --full the whole stack-relevant set after one confirm, --persist/--global set scope); --skills searches skills.sh for third-party skills instead — provenance, preview, explicit picks only. Add-at-all is approaches' build-vs-buy.

Claude Code3 Skills

By Ivan-WG1 GitHub starsUpdated last week

Directory evidence

Runtimes
Claude Code
Parsed components
3 skill or MCP entries
Source updated
Sep 15, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install stack-scan for Claude Code

Installs for the current user
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install stack-scan@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/galaykos/cc-marketplace

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/stack-scan/.

Plugin files

plugins/stack-scan/
├── .claude-plugin/plugin.json
├── skills/installed-versions/SKILL.md
├── skills/package-hygiene/SKILL.md
└── skills/vercel-skills-scout/SKILL.md

Included Skills3

installed-versionsskills/installed-versions/SKILL.md

Use before giving version-dependent advice or starting work in an unfamiliar repo — inventory what is ACTUALLY installed from manifests, lockfiles, runtime binaries, and container images; reports required vs installed and flags drift.

package-hygieneskills/package-hygiene/SKILL.md

Use when editing composer.json or package.json, adding/updating/removing a dependency, bumping versions, resolving lockfile conflicts, or acting on audit output — semver strategy, lockfile discipline, audit triage, upgrade lanes. Add-at-all is build-vs-buy; docs before integration is api-docs-first.

vercel-skills-scoutskills/vercel-skills-scout/SKILL.md

Use when hunting third-party skills for the current stack — "search skills.sh", "find a community skill for X", "is there a skill for this framework" — or when this marketplace has no plugin covering a need. Scans manifests, queries the skills.sh directory, suggests with provenance (source repo, installs, URL), previews picked skills, installs only explicit picks via npx skills add — project-level, never global, never auto.

Plugin manifests1

plugins/stack-scan/.claude-plugin/plugin.json
{
  "name": "stack-scan",
  "version": "0.7.7",
  "description": "Know what is installed, keep it healthy, find what to add. /stack-scan:report inventories manifests, lockfiles (composer, npm/yarn/pnpm/bun), runtimes and docker images into a required-vs-installed table with drift, missing locks and EOL majors flagged. /stack-scan:audit runs the composer/npm vulnerability, outdated and licence checks (package-hygiene) — report-only. /stack-scan:suggest reads the same manifests and suggests every marketplace plugin in three tiers with cited evidence (--yes auto-installs tiers 1-2, --full the whole stack-relevant set after one confirm, --persist/--global set scope); --skills searches skills.sh for third-party skills instead — provenance, preview, explicit picks only. Add-at-all is approaches' build-vs-buy.",
  "author": {
    "name": "Ivan-WG",
    "email": "[email protected]"
  },
  "keywords": [
    "tooling",
    "research"
  ]
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[stack-scan on Agent Plugins Marketplace](https://pluginsmp.com/plugins/stack-scan)