# Pluginpack Build And Verify

> Use when working in a repo that uses pluginpack (it has a pluginpack.config.ts) and you need to build the native plugin outputs, validate them, prune stale files, or check whether a generated plugin repo has drifted — i.e. driving the pluginpack CLI and interpreting its exit codes.

- **Type:** Skill
- **Install:** `agentstack add skill-gleanwork-pluginpack-pluginpack-build-and-verify`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [gleanwork](https://agentstack.voostack.com/s/gleanwork)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [gleanwork](https://github.com/gleanwork)
- **Source:** https://github.com/gleanwork/pluginpack/tree/main/skills/pluginpack-build-and-verify

## Install

```sh
agentstack add skill-gleanwork-pluginpack-pluginpack-build-and-verify
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Building and verifying with pluginpack

pluginpack is a deterministic build tool. Every command is scriptable and
exits non-zero on failure.

## Build

```bash
pluginpack build                      # all configured targets
pluginpack build --target cursor      # one target
pluginpack build --target claude --dry-run   # print planned managed files, write nothing
```

Exit 0 on success; 1 on config/source/output failure. The build errors if two
targets resolve to the same output path (give them distinct `outDir`s).

## Validate

```bash
pluginpack validate --target cursor --dir ../cursor-plugins
```

Checks an output directory against that target's native manifest/path/frontmatter
rules. Exit 0 = passes, 1 = errors. (For Claude, `claude plugin validate` is the
authoritative check; pluginpack's conformance tests use it when available.)

## Diff (CI staleness gate)

```bash
pluginpack diff --target cursor --against ../cursor-plugins
```

Builds to a temp dir and compares managed files against an existing target repo.
Exit 1 when the repo is stale — wire this into CI to fail or to open a PR against
the generated repo. Use `ignoredDiffPaths` in the target config for paths the
generated repo intentionally owns.

## Prune / clean

```bash
pluginpack prune --dry-run    # show stale managed files
pluginpack prune              # remove them
pluginpack clean --target cursor   # remove all managed files for a target
```

These only touch files recorded in `.pluginpack/.json`. A guard refuses
to delete anything inside your declared source (`source.skills`/`source.plugins`)
or the config; pass `--force` to override (rarely needed — usually it means an
`outDir` overlaps your source).

## Developing pluginpack itself

Run the full gate before considering work done: `npm run check`
(format, lint, typecheck, test, build, docs). Regenerate the README CLI
reference with `node dist/cli.js docs` after changing commands.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [gleanwork](https://github.com/gleanwork)
- **Source:** [gleanwork/pluginpack](https://github.com/gleanwork/pluginpack)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-gleanwork-pluginpack-pluginpack-build-and-verify
- Seller: https://agentstack.voostack.com/s/gleanwork
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.