enhance-plugins

# enhance-plugins Analyze plugin structures, MCP tools, and security patterns against best practices. ## Parse Arguments ```javascript const args = '$ARGUMENTS'.split(' ').filter(Boolean); const targetPath = args.find(a => !a.startsWith('--')) || '.'; const fix = args.includes('--fix'); ``` ## Plugin Locations | Platform | Location | |----------|----------| | Claude Code | `plugins/*/`, `.claude-plugin/plugin.json` | | OpenCode | `.opencode/plugins/`, MCP in `opencode.json` | | Codex | MCP in `~/.codex/config.toml` | ## Workflow 1. **Discover** - Find plugins in `plugins/` directory 2. **Load** - Read `plugin.json`, agents, commands, skills 3. **Analyze** - Run pattern checks by certainty level 4. **Report** - Generate markdown output 5. **Fix** - Apply auto-fixes if `--fix` (HIGH certainty only) ## Detection Patterns ### 1. Tool Schema Design (HIGH) Based on function calling best practices: **Required elements:** ```json { "name": "verb_noun", "description": "What it does. When to use. What it returns.", "input_schema": { "type": "object", "properties": { "param": { "type": "string", "description": "Format and example" } }, "required": ["param"], "additionalProperties": false } } ``` **The "Intern Test"** - Can someone use this tool given only the description? | Issue | Certainty | Auto-Fix | |-------|-----------|----------| | Missing `additionalProperties: false` | HIGH | Yes | | Missing `required` array |...