Claude Code Plugin-System — Komplette Referenz

mein-plugin/
├── PLUGIN.md                          # Plugin-Manifest (PFLICHT)
├── package.json                       # NPM Metadata
├── skills/                            # Custom Skills (optional)
│   ├── mein-skill-1/
│   │   ├── SKILL.md
│   │   └── scripts/
│   └── mein-skill-2/
│       ├── SKILL.md
│       └── scripts/
├── agents/                            # Custom Agents (optional)
│   ├── agent-1.md
│   └── agent-2.md
├── hooks/                             # Claude Code Hooks (optional)
│   ├── pre-tool-use/
│   │   └── validator.js
│   └── post-execution/
│       └── reporter.js
├── mcp-servers/                       # MCP Server Definitionen (optional)
│   ├── server-1.json
│   └── server-2.json
├── commands/                          # Slash-Commands (optional)
│   ├── /analyze
│   │   └── COMMAND.md
│   └── /review
│       └── COMMAND.md
└── docs/
    ├── README.md
    ├── GETTING-STARTED.md
    └── API-REFERENCE.md

---
name: mein-plugin                     # kebab-case, eindeutig im Marketplace
version: 1.2.0                         # Semantic Versioning
description: >                         # Max 200 Zeichen
  Was das Plugin macht. Keywords fuer Suche am Ende.
  Keywords: data-processing, workflow, automation
author: "Mein Name / Unternehmen"
license: MIT                           # SPDX License ID
repository: "https://github.com/user/repo"
homepage: "https://plugin.example.com"
bugs: "https://github.com/user/repo/issues"

# === Plugin-Komponenten ===
includes:
  skills: ["./skills"]                # Verzeichnisse mit Skills
  agents: ["./agents"]                # Agent-Definitionen
  mcp-servers: ["./mcp-servers"]      # MCP Server
  hooks: ["./hooks"]                  # Pre/Post Execution Hooks
  commands: ["./commands"]            # Slash-Commands

# === Dependencies ===
requires:
  claude-code: ">=0.20.0"             # Minimale Claude Code Version
  plugins: ["plugin-base"]            # Andere Plugins

# === Permissions ===
permissions:
  - tool:read                         # Erlaubt Read-Tool
  - tool:write                        # Erlaubt Write-Tool
  - tool:bash                         # Erlaubt Bash-Execution
  - network:outbound                  # Outbound Network Requests
  - credential:vault                  # Zugriff auf Vault-Secrets
  - filesystem:sandbox                # Sandbox-Filesystem

# === Marketplace Metadata ===
categories: ["data-processing", "automation", "integration"]
tags: ["enterprise", "security", "compliance"]
featured: false
rating: 4.8
downloads: 12341
compatibility: ["macos", "linux", "windows"]

keywords: "data processing workflow automation integration security"
---

# Suche im Marketplace
claude plugin search "data processing"

# Filter nach Kategorie
claude plugin search --category "automation" --sort downloads

# Alle Plugins auflisten
claude plugin list --remote

# Standard Marketplace (anthropics/claude-plugins-official)
claude plugin add marketplace:plugin-name

# Beispiel: CSV Processor Plugin
claude plugin add marketplace:csv-processor

# Mit spezifischer Version
claude plugin add marketplace:[email protected]

# Mit Auto-Update
claude plugin add marketplace:csv-processor --auto-update

# Direkt von GitHub
claude plugin add github:username/repo

# Mit spezifichem Branch
claude plugin add github:username/repo#develop

# Mit spezifichem Tag
claude plugin add github:username/repo#v1.2.0

# Beispiele
claude plugin add github:anthropics/claude-plugins-official#main
claude plugin add github:buildwithclaude/awesome-plugins#main

# Aus lokalem Verzeichnis
claude plugin add ./mein-plugin

# Aus ZIP-Archiv
claude plugin add ./plugins/mein-plugin.zip

# Symlink (für Development)
claude plugin add --symlink ./mein-plugin

# Private Registry konfigurieren
claude config set plugin-registry https://registry.private.com

# Authentifizierung
claude config set plugin-registry-token $TOKEN

# Installation aus Private Registry
claude plugin add private:mein-unternehmens-plugin

# Installierte Plugins anzeigen
claude plugin list --installed

# Plugin-Status
claude plugin info plugin-name

# Plugin-Version
claude plugin version plugin-name

# Abhängigkeiten prüfen
claude plugin deps plugin-name

# Permissions prüfen
claude plugin perms plugin-name

# Plugin aktivieren/deaktivieren
claude plugin enable plugin-name
claude plugin disable plugin-name

# Plugin aktualisieren
claude plugin update plugin-name
claude plugin update --all

# Spezifische Version installieren
claude plugin update [email protected]

# Plugin entfernen
claude plugin remove plugin-name

# Zu Standard-Version zurückkehren
claude plugin rollback plugin-name

# Plugin-Konfiguration bearbeiten
claude plugin config plugin-name

# Berechtigungen ändern
claude plugin perms plugin-name --deny tool:bash

# API Key oder Credentials setzen
claude plugin creds plugin-name --set OPENAI_API_KEY=$TOKEN

# Plugin-Variablen
claude plugin env plugin-name --set VAR=value

# Plugin-Logs anzeigen
claude plugin logs plugin-name

# Debug-Modus aktivieren
claude plugin debug plugin-name

# Validation durchführen
claude plugin validate plugin-name

# Health Check
claude plugin health plugin-name

# Test ausführen
claude plugin test plugin-name

---
# .claude/skills/mein-skill/SKILL.md
name: mein-skill
description: "Macht etwas Nützliches. Trigger: something, useful"
version: 1.0.0
model: sonnet
allowed-tools: [Read, Grep, Bash]
user-invocable: true
last-verified: 2026-03-21
---

# Mein Skill — Was er tut

## Ablauf

1. Eingabe validieren
2. Daten verarbeiten
3. Ergebnis formatieren

Der Skill arbeitet mit folgenden Dateitypen:
- JSON Input vom User
- CSV Output für Verarbeitung
- Markdown für Dokumentation

---
# agents/mein-agent.md
name: mein-agent
description: "Spezialist für Datenanalyse"
model: opus
tools: [Read, Grep, Glob, Bash, Write, Edit]
disallowedTools: []
maxTurns: 100
skills:
  - mein-skill
  - data-processor
---

# Mein Agent — Datenanalyse Spezialist

## Identität

Ich bin ein Experte für Datenanalyse und -visualisierung.

## Workflow

1. Daten einlesen und validieren
2. Anomalien erkennen
3. Insights extrahieren
4. Report generieren

// hooks/pre-tool-use/validator.js
module.exports = {
  name: 'input-validator',
  event: 'pre-tool-use',
  async handler(context) {
    const { tool, args } = context;

    // Validierung für Bash-Aufrufe
    if (tool === 'Bash') {
      const dangerousPatterns = ['rm -rf', 'sudo', 'reboot'];
      const cmd = args.command || '';

      if (dangerousPatterns.some(p => cmd.includes(p))) {
        throw new Error(`Gefährlicher Befehl blockiert: ${cmd}`);
      }
    }

    return context; // Durchlassen oder blockieren
  }
};

claude plugin add marketplace:claude-mem

# LiteLLM Plugin Manager
from litellm import Router
from litellm.plugins import PluginRegistry

# Plugin-Registry initialisieren
registry = PluginRegistry(
    registry_url="https://registry.enterprise.com",
    auth_token=os.environ["REGISTRY_TOKEN"],
    enable_audit_log=True
)

# Plugin Installation mit Governance
router = Router(
    model_list=[
        {
            "model_name": "claude-opus",
            "litellm_params": {
                "model": "claude-3-opus-20240229",
                "api_key": os.environ["ANTHROPIC_API_KEY"]
            }
        }
    ],
    plugins=[
        {
            "name": "csv-processor",
            "version": "2.1.0",
            "permissions": ["tool:read", "tool:bash"],
            "rate_limit": {"requests": 100, "period": 3600},
            "timeout": 30,
            "require_approval": False
        },
        {
            "name": "production-workflow",
            "version": "1.0.0",
            "permissions": ["tool:write", "network:outbound"],
            "require_approval": True,
            "audit_log": True
        }
    ]
)

# Audit Trail
async def log_plugin_usage(plugin_name, action, user_id, result):
    await registry.audit_log({
        "timestamp": datetime.now(),
        "plugin": plugin_name,
        "action": action,
        "user_id": user_id,
        "result": "success" if result else "failed"
    })

# Plugin Version Pinning für Stabilität
@router.log_hook
def version_lock_check(model, messages, kwargs):
    required_versions = {
        "csv-processor": "2.1.0",
        "humanizer-pro": "3.0.0"
    }

    for plugin, version in required_versions.items():
        current = registry.get_plugin_version(plugin)
        if current != version:
            raise Exception(f"Plugin {plugin} version mismatch: {current} != {version}")

# Plugin-Permissions sind explizit
permissions:
  # Tool Access
  - tool:read              # Read Dateisystem
  - tool:write             # Write Dateisystem
  - tool:bash              # Shell-Commands
  - tool:glob              # Pattern Matching

  # Network
  - network:outbound       # Externe HTTP/HTTPS
  - network:dns            # DNS Lookups

  # Credentials
  - credential:vault       # Zugriff auf Vault-Secrets
  - credential:env         # Environment Variables

  # System
  - system:memory          # RAM-intensive Operationen
  - system:cpu             # CPU-intensive Operationen

# Strict Sandbox (read-only)
claude plugin add marketplace:plugin-name --sandbox strict

# Standard Sandbox (limited tools)
claude plugin add marketplace:plugin-name --sandbox standard

# No Sandbox (full access)
claude plugin add marketplace:plugin-name --sandbox none