N

Nitrogen

mksd0398/nitrogen · v3.5.4 · Agent Skills

by mksd0398Scan grade: GoodAwesome AI Plugins

Agent skill and CLI that scaffold and deploy Shopify embedded apps on Firebase, with one Cloud Function per API resource, Firestore, and admin pages built from Polaris web components, also packaged as a Claude Code plugin marketplace

Is Nitrogen a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Agent Plugin
  • Agent Skills
  • Claude Code
  • 1 skill

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Nitrogen?

Nitrogen is a published agent skills plugin for AI coding agents in the agent-plugin ecosystem, developed by mksd0398 and distributed through the HOL AI plugin registry. Agent skill and CLI that scaffold and deploy Shopify embedded apps on Firebase, with one Cloud Function per API resource, Firestore, and admin pages built from Polaris web components, also packaged as a Claude Code plugin marketplace

Canonical slug
mksd0398/nitrogen
Version
v3.5.4 · updated Oct 27, 2026

Trust & reputation

78

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
89/100
Provenance
70/100
Publisher Quality
75/100

Registry Snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust & reputation

Trust & reputation

78

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
89/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/mksd0398/nitrogen
Source commit
fefc196a0baa…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Ready (structural check)

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Needs review
Security result
89
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-VRTySe / cisco-skill-scanner: failedcodex:hol-plugin-scanner-VRTySe / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

22/22

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Findings

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Nitrogen — Frequently asked questions

What is Nitrogen?
Nitrogen is an AI plugin in the HOL registry. Agent skill and CLI that scaffold and deploy Shopify embedded apps on Firebase, with one Cloud Function per API resource, Firestore, and admin pages built from Polaris web components, also packaged as a Claude Code plugin marketplace
How do I install Nitrogen?
Install Nitrogen in your harness: Claude Code — /plugin marketplace add mksd0398/nitrogen; Any agent — npx [email protected] add mksd0398/nitrogen. Full step-by-step guidance is on the HOL plugin page.
How do I install Nitrogen in Claude Code?
To install Nitrogen in Claude Code, start with /plugin marketplace add mksd0398/nitrogen. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
Is Nitrogen free?
Pricing for Nitrogen is published on its HOL plugin page when the maker schedules a launch.
How is the Trust Score for Nitrogen computed?
Nitrogen has a HOL Trust Score of 78 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/mksd0398%2Fnitrogen/trust
Who publishes Nitrogen?
Nitrogen is published by mksd0398 and listed on HOL.
Is Nitrogen available now?
Nitrogen availability is listed on its HOL plugin page.

Install Guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the nitrogen entry from the nitrogen marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall nitrogen@nitrogen.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin Manifest

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "nitrogen",
  "version": "3.5.4",
  "description": "Build Shopify embedded apps on Firebase with Nitrogen: scaffold with npx @mksd0398/nitrogen, add API functions, webhooks and Polaris pages, call the Admin API, then test and deploy. Independent project, not affiliated with or endorsed by Shopify or Google.",
  "author": {
    "name": "Mayank",
    "url": "https://github.com/mksd0398"
  },
  "homepage": "https://mksd0398.github.io/nitrogen/",
  "repository": "https://github.com/mksd0398/nitrogen",
  "license": "MIT",
  "keywords": [
    "shopify",
    "shopify-app",
    "firebase",
    "cloud-functions",
    "firestore",
    "polaris",
    "app-bridge"
  ],
  "interface": {
    "displayName": "nitrogen",
    "developerName": "mksd0398"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 8
}

Marketplace Source

Repo URL
https://github.com/mksd0398/nitrogen
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • shopify-firebase-app

    skills/shopify-firebase-app/SKILL.md

    Use when someone wants a Shopify app on Firebase (Cloud Functions, Firestore, Hosting) or a Shopify app without Remix, React Router or a server; when they mention Nitrogen or `npx @mksd0398/nitrogen`; or when working in a Nitrogen project, recognisable by `functions/src/api/`, `web/*.html` pages with `<s-app-nav>`, and an AGENTS.md that names Nitrogen. Applies to creating such an app, adding APIs, webhooks, pages, scopes or Firestore data to one, and deploying it.

    Raw SKILL.md

File Inventory

.claude-plugin/marketplace.json

file

782 bytes

965b8f3862914bf1…

.codex-plugin/plugin.json

plugin-manifest

801 bytes

94ac016112e15b85…

LICENSE

file

1,444 bytes

03721c20a38b2c85…

package-lock.json

file

1,888 bytes

8111513bdb0e0f01…

package.json

file

1,934 bytes

277ebedccbc0ee7d…

plugin.json

file

754 bytes

6c56b54456329c9c…

README.md

file

42,534 bytes

a4675e5891ea6cb9…

SECURITY.md

file

613 bytes

7f819781f5b30784…

skills/shopify-firebase-app/references/app-bridge.md

skill

12,060 bytes

b227609b2b26c93d…

skills/shopify-firebase-app/references/app-guide.md

skill

5,513 bytes

ec95ddffdb0fd798…

skills/shopify-firebase-app/references/polaris.md

skill

20,835 bytes

773b4c0e903cfa86…

skills/shopify-firebase-app/SKILL.md

skill

9,627 bytes

0cb68d0a3c73c858…