Automation or dependency surfaces exist, but .github/dependabot.yml is missing.
Add Dependabot updates for GitHub Actions and dependency manifests.
mksd0398/nitrogen · v3.5.4 · Agent Skills
Agent skill and CLI that scaffold and deploy Shopify embedded apps on Firebase, with one Cloud Function per API resource, Firestore, and admin pages built from Polaris web components, also packaged as a Claude Code plugin marketplace
From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.
Nitrogen is a published agent skills plugin for AI coding agents in the agent-plugin ecosystem, developed by mksd0398 and distributed through the HOL AI plugin registry. Agent skill and CLI that scaffold and deploy Shopify embedded apps on Firebase, with one Cloud Function per API resource, Firestore, and admin pages built from Polaris web components, also packaged as a Claude Code plugin marketplace
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Continuous scanner CI not detected
This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.
Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.
README badge not detected
Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.
[claude:.] Claude Plugin
22/22
5 checks
[claude:.] Security
16/16
6 checks
[claude:.] Operational Security
3/6
5 checks
[claude:.] Code Quality
10/10
2 checks
[codex:.] Manifest Validation
25/31
9 checks
[codex:.] Security
16/16
9 checks
[codex:.] Operational Security
3/6
5 checks
[codex:.] Best Practices
9/12
5 checks
[codex:.] Marketplace
N/A
3 checks · not applicable
[codex:.] Skill Security
5/5
4 checks
[codex:.] Code Quality
10/10
2 checks
Automation or dependency surfaces exist, but .github/dependabot.yml is missing.
Add Dependabot updates for GitHub Actions and dependency manifests.
Automation or dependency surfaces exist, but .github/dependabot.yml is missing.
Add Dependabot updates for GitHub Actions and dependency manifests.
The interface object is missing a valid "shortDescription" value.
Add a valid "shortDescription" field to the interface metadata.
The interface object is missing a valid "longDescription" value.
Add a valid "longDescription" field to the interface metadata.
The interface object is missing a valid "category" value.
Add a valid "category" field to the interface metadata.
The interface object is missing a valid "capabilities" value.
Add a valid "capabilities" field to the interface metadata.
The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.
Update "websiteURL" to use HTTPS or an existing relative asset path.
The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.
Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.
The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.
Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.
The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.
Update "composerIcon" to use HTTPS or an existing relative asset path.
The interface field "logo" must use HTTPS or point to a safe in-repo asset.
Update "logo" to use HTTPS or an existing relative asset path.
The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.
Update "screenshots" to use HTTPS or an existing relative asset path.
A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.
Add a .codexignore file with generated assets, local state, and secret paths.
Install through the Claude Code plugin marketplace.
Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.
Add the marketplace
Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.
Install the plugin
Installs the nitrogen entry from the nitrogen marketplace.
Scripted alternative
Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.
Check it is installed
Lists installed plugins. The entry should appear as enabled.
To remove it later, run claude plugin uninstall nitrogen@nitrogen.
No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.
Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.
Loading reviews
{
"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
"name": "nitrogen",
"version": "3.5.4",
"description": "Build Shopify embedded apps on Firebase with Nitrogen: scaffold with npx @mksd0398/nitrogen, add API functions, webhooks and Polaris pages, call the Admin API, then test and deploy. Independent project, not affiliated with or endorsed by Shopify or Google.",
"author": {
"name": "Mayank",
"url": "https://github.com/mksd0398"
},
"homepage": "https://mksd0398.github.io/nitrogen/",
"repository": "https://github.com/mksd0398/nitrogen",
"license": "MIT",
"keywords": [
"shopify",
"shopify-app",
"firebase",
"cloud-functions",
"firestore",
"polaris",
"app-bridge"
],
"interface": {
"displayName": "nitrogen",
"developerName": "mksd0398"
},
"skills": "./",
"holManifestOrigin": "repository",
"registryIndexVersion": 8
}1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.
skills/shopify-firebase-app/SKILL.md
Use when someone wants a Shopify app on Firebase (Cloud Functions, Firestore, Hosting) or a Shopify app without Remix, React Router or a server; when they mention Nitrogen or `npx @mksd0398/nitrogen`; or when working in a Nitrogen project, recognisable by `functions/src/api/`, `web/*.html` pages with `<s-app-nav>`, and an AGENTS.md that names Nitrogen. Applies to creating such an app, adding APIs, webhooks, pages, scopes or Firestore data to one, and deploying it.
.claude-plugin/marketplace.json
file
782 bytes
965b8f3862914bf1…
.codex-plugin/plugin.json
plugin-manifest
801 bytes
94ac016112e15b85…
LICENSE
file
1,444 bytes
03721c20a38b2c85…
package-lock.json
file
1,888 bytes
8111513bdb0e0f01…
package.json
file
1,934 bytes
277ebedccbc0ee7d…
plugin.json
file
754 bytes
6c56b54456329c9c…
README.md
file
42,534 bytes
a4675e5891ea6cb9…
SECURITY.md
file
613 bytes
7f819781f5b30784…
skills/shopify-firebase-app/references/app-bridge.md
skill
12,060 bytes
b227609b2b26c93d…
skills/shopify-firebase-app/references/app-guide.md
skill
5,513 bytes
ec95ddffdb0fd798…
skills/shopify-firebase-app/references/polaris.md
skill
20,835 bytes
773b4c0e903cfa86…
skills/shopify-firebase-app/SKILL.md
skill
9,627 bytes
0cb68d0a3c73c858…
Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Nitrogen.