Skip to content

docs(plugin): auto-update note and disclosure for the plugin directory - #357

Merged
eddietejeda merged 2 commits into
mainfrom
docs/plugin-directory
Oct 18, 2026
Merged

eddietejeda merged 2 commits into
mainfrom
docs/plugin-directory

Conversation

@eddietejeda

Copy link
Copy Markdown
Contributor

Gets the plugin ready to submit to Anthropic's plugin directory, and adds the auto-update note.

  • Auto-update. Self-hosted marketplaces don't auto-update by default. The README now says how to turn it on (/plugin → Marketplaces → hotdata → Enable auto-update) and how to update by hand.
  • Disclosure. The directory's security scan rejects behavior the README doesn't describe. The new section lists everything the plugin and CLI touch:
    • the SessionStart hook (no network, no installs)
    • the installer, which only runs after the user agrees
    • api.hotdata.dev
    • app.hotdata.dev, for browser login
    • the GitHub release check
    • no telemetry
  • displayName: "Hotdata CLI" in plugin.json, used for the directory listing.

Checked against the directory's pre-submission checklist:

  • claude plugin validate --strict passes.
  • The plugin is at the repo root, so the stricter subfolder rules don't apply.
  • LICENSE (MIT) is present, and the README is far over the 40-word minimum.
  • 90 files; none over 256 KiB, no binaries, no symlinks or LFS files, no .DS_Store.
  • The repo archive is 0.4 MiB.
  • The hook command is written as ${CLAUDE_PLUGIN_ROOT}/hooks/check-cli.sh.
  • check-skills.sh --require-version passes.

The only thing left is submitting through the portal at claude.ai/directory/manage. That needs a paid claude.ai plan, and the account's GitHub connection must have push access to this repo.

- README: how to turn on auto-update for the self-hosted hotdata
  marketplace, which is off by default.
- README: what the plugin runs, sends, and fetches. Anthropic's directory
  scan rejects behavior the README doesn't disclose, so this lists the
  SessionStart hook, the installer it offers, the Hotdata API the skill's
  commands use, the browser login, and the GitHub release check.
- plugin.json: displayName "Hotdata CLI" for the directory listing.
@eddietejeda
eddietejeda requested a review from a team as a code owner October 18, 2026 18:40
@eddietejeda
eddietejeda requested review from zfarrell and removed request for a team October 18, 2026 18:40
claude[bot]
claude Bot previously approved these changes Oct 18, 2026
@codecov

codecov Bot commented Oct 18, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

The directory reads the icon once, when the plugin is first saved or
submitted, so it has to be in place before the submission. Same 552x552
mark as hotdata.dev's favicon.
@eddietejeda
eddietejeda merged commit fbecf6f into main Oct 18, 2026
15 checks passed
@eddietejeda
eddietejeda deleted the docs/plugin-directory branch October 18, 2026 21:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant