[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"extension-marketplace-degausai-wonda-en":3,"guides-for-degausai-wonda":351,"similar-k179kfq7qsyskp2hca92ma0pzd86mcnn-en":352},{"_creationTime":4,"_id":5,"children":6,"community":49,"display":50,"evaluation":54,"identity":251,"isFallback":237,"parentExtension":253,"providers":254,"relations":260,"repo":261,"tags":348,"workflow":349},1778686096261.7605,"k179kfq7qsyskp2hca92ma0pzd86mcnn",[7],{"_creationTime":8,"_id":9,"community":10,"display":12,"identity":17,"providers":22,"relations":42,"tags":44,"workflow":45},1778686096261.7607,"k17f31j8jewxtcck6rer4erwz986mwm5",{"reviewCount":11},0,{"description":13,"installMethods":14,"name":15,"sourceUrl":16},"AI-powered content generation from your terminal — images, video, music, audio, editing, and social publishing",{"claudeCode":15},"wonda","https://github.com/degausai/wonda",{"basePath":18,"githubOwner":19,"githubRepo":15,"locale":20,"slug":15,"type":21},"","degausai","en","plugin",{"evaluate":23,"extract":36},{"promptVersionExtension":24,"promptVersionScoring":25,"score":26,"tags":27,"targetMarket":34,"tier":35},"3.0.0","4.4.0",75,[28,29,30,31,32,33],"content-generation","video-editing","social-media","cli","ai-tools","marketing-automation","global","flagged",{"commitSha":37,"license":38,"plugin":39},"HEAD","Proprietary",{"mcpCount":11,"provider":40,"skillCount":41},"classify",1,{"parentExtensionId":5,"repoId":43},"kd730wnerzx73qbf3qgdt7wwth86npj4",[32,31,28,33,30,29],{"evaluatedAt":46,"extractAt":47,"updatedAt":48},1778686137834,1778686096261,1778686234946,{"reviewCount":11},{"description":51,"installMethods":52,"name":19,"sourceUrl":16},"Official Wonda plugins for Claude Code",{"claudeCode":53},"degausai/wonda",{"_creationTime":55,"_id":56,"extensionId":5,"locale":20,"result":57,"trustSignals":235,"workflow":249},1778686114982.8496,"kn74z50hr1h8jpv6x7deydqz8186mb6d",{"checks":58,"evaluatedAt":205,"extensionSummary":206,"features":207,"nonGoals":213,"promptVersionExtension":217,"promptVersionScoring":25,"purpose":218,"rationale":219,"score":220,"summary":221,"tags":222,"targetMarket":34,"tier":229,"useCases":230},[59,64,67,70,75,78,82,87,90,93,97,101,104,108,111,114,117,120,123,126,130,134,138,142,146,149,152,155,159,162,165,168,171,174,177,181,185,189,192,196,199,202],{"category":60,"check":61,"severity":62,"summary":63},"Practical Utility","Problem relevance","pass","The description clearly states that the extension provides AI-powered content generation from the terminal, addressing a specific user need.",{"category":60,"check":65,"severity":62,"summary":66},"Unique selling proposition","The extension offers a comprehensive suite of tools for content generation, editing, and publishing, going beyond simple LLM defaults by providing specialized CLI commands and workflows.",{"category":60,"check":68,"severity":62,"summary":69},"Production readiness","The extension provides a complete lifecycle for content creation, from generation to publishing, and its CLI commands cover a wide range of operations, indicating readiness for real-world workflows.",{"category":71,"check":72,"severity":73,"summary":74},"Scope","Single responsibility principle","warning","The extension covers a very broad range of capabilities including image, video, audio generation, editing, publishing, and detailed LinkedIn/X/Reddit integrations, which goes beyond a single coherent domain.",{"category":71,"check":76,"severity":62,"summary":77},"Description quality","The displayed description 'Official Wonda plugins for Claude Code' accurately reflects the function of the marketplace catalog, which is to provide Wonda plugins.",{"category":79,"check":80,"severity":73,"summary":81},"Invocation","Scoped tools","While many specific commands exist, the sheer number of commands and the potential for broad interpretation of some like 'scrape social' or 'generate text' suggest a less strictly scoped toolset than ideal.",{"category":83,"check":84,"severity":85,"summary":86},"Documentation","Configuration & parameter reference","info","The README provides extensive command documentation, but explicit default values for all parameters and precedence order for configuration are not always clear.",{"category":71,"check":88,"severity":62,"summary":89},"Tool naming","Tool names are generally descriptive and follow a consistent verb-noun pattern relevant to the domain.",{"category":71,"check":91,"severity":73,"summary":92},"Minimal I/O surface","Some commands, like `wonda skill install --all -o .`, and parameters for editing operations (e.g., `params` in `edit video`) suggest potentially broad inputs that might not be strictly minimal for the task.",{"category":94,"check":95,"severity":73,"summary":96},"License","License usability","The license is described as 'Proprietary' in the README with a link to wonda.sh, but no SPDX identifier or explicit LICENSE file is readily available in the repository, making its precise usability unclear.",{"category":98,"check":99,"severity":62,"summary":100},"Maintenance","Commit recency","The repository shows recent commits as of 2026-05-13, indicating active maintenance.",{"category":98,"check":102,"severity":73,"summary":103},"Dependency Management","The project uses npm and Homebrew for installation, but there's no clear indication of vulnerability scanning or automated dependency update mechanisms beyond what npm/Homebrew might provide.",{"category":105,"check":106,"severity":73,"summary":107},"Security","Secret Management","Commands like `wonda auth login`, `wonda linkedin auth set`, and `wonda x auth set` imply secret handling, but the README does not detail how these secrets are stored, protected, or if they are ever exposed via logs or debug output.",{"category":105,"check":109,"severity":73,"summary":110},"Injection","The extension executes shell commands and interacts with external services based on user input and prompts; without explicit mention of input sanitization or treating loaded data as untrusted, there's a potential risk of injection.",{"category":105,"check":112,"severity":73,"summary":113},"Transitive Supply-Chain Grenades","The use of `npm i -g` and `brew install` for installation, and the potential for commands like `wonda skill install` to fetch remote content, suggest a reliance on external sources that could be subject to supply-chain attacks if not carefully managed.",{"category":105,"check":115,"severity":73,"summary":116},"Sandbox Isolation","While not explicitly stated, commands that modify files or interact with external services (like publishing) could potentially write outside of expected scopes if not carefully implemented, though the README does not detail specific sandbox escape primitives.",{"category":105,"check":118,"severity":62,"summary":119},"Sandbox escape primitives","No evidence of detached-process spawns or deny-retry loops was found in the provided source snippets or README.",{"category":105,"check":121,"severity":73,"summary":122},"Data Exfiltration","Commands that authenticate with services like LinkedIn and X, and the presence of `wonda auth login`, imply handling of sensitive credentials. The README does not explicitly state how this data is protected from exfiltration or if it's submitted to third parties without clear user consent.",{"category":105,"check":124,"severity":62,"summary":125},"Hidden Text Tricks","The provided README content does not appear to contain any hidden text tricks, suspicious Unicode characters, or other steering mechanisms.",{"category":127,"check":128,"severity":62,"summary":129},"Hooks","Opaque code execution","The installation methods (npm, brew) and the provided code snippets suggest standard executable code rather than obfuscated payloads or runtime script fetches.",{"category":131,"check":132,"severity":73,"summary":133},"Portability","Structural Assumption","The `wonda skill install -o .` command suggests assumptions about project structure for local skill installation, which might break if a user's project organization differs from expectations.",{"category":135,"check":136,"severity":73,"summary":137},"Trust","Issues Attention","There are 2 open issues with 0 closed issues in the last 90 days, indicating slow responsiveness or a lack of active issue management.",{"category":139,"check":140,"severity":62,"summary":141},"Versioning","Release Management","The project uses GitHub releases and npm versioning, with a clear 'Latest Release' badge pointing to a specific version, indicating a robust release management process.",{"category":143,"check":144,"severity":73,"summary":145},"Code Execution","Validation","While commands accept parameters, there is no explicit mention or evidence of a schema library being used for validation and sanitization of all input arguments, which could lead to unexpected behavior or errors.",{"category":105,"check":147,"severity":73,"summary":148},"Unguarded Destructive Operations","Commands like `wonda delete-post` and potentially others that modify external services (e.g., publishing) lack explicit mention of confirmation gates or dry-run modes in the README, posing a risk of accidental destructive operations.",{"category":143,"check":150,"severity":73,"summary":151},"Error Handling","The README does not detail specific error handling mechanisms for commands. While JSON output is mentioned for commands, the clarity and actionability of error messages are not elaborated upon.",{"category":143,"check":153,"severity":73,"summary":154},"Logging","The README does not mention any local audit logging for destructive actions or outbound calls, which would be important for reviewing executed commands.",{"category":156,"check":157,"severity":73,"summary":158},"Compliance","GDPR","The extension handles user authentication and interacts with social media platforms, which inherently involves personal data. The README does not specify how this data is sanitized or protected, nor if it's submitted to third parties.",{"category":156,"check":160,"severity":62,"summary":161},"Target market","The extension's commands and documentation appear to be globally applicable, with no specific regional or jurisdictional limitations indicated.",{"category":131,"check":163,"severity":62,"summary":164},"Runtime stability","The extension explicitly lists support for macOS, Linux, and Windows (x64 + ARM64), indicating good cross-platform compatibility.",{"category":83,"check":166,"severity":62,"summary":167},"README","The README is comprehensive, well-structured, and clearly explains the extension's purpose and capabilities.",{"category":71,"check":169,"severity":73,"summary":170},"Tool surface size","The extension exposes a very large number of commands across multiple domains (content generation, editing, publishing, social media), far exceeding the target of 10.",{"category":79,"check":172,"severity":73,"summary":173},"Overlapping near-synonym tools","There are several near-synonym commands, such as `generate image`, `generate video`, `generate text`, `generate music`, and potentially overlapping functionalities within the LinkedIn and X commands, which could lead to model disambiguation challenges.",{"category":83,"check":175,"severity":62,"summary":176},"Phantom features","All advertised features, such as various generation and editing operations, are supported by corresponding commands and documented in the README.",{"category":178,"check":179,"severity":62,"summary":180},"Install","Installation instruction","The README provides clear installation instructions for npm and Homebrew, along with copy-pasteable examples for authentication and basic usage.",{"category":182,"check":183,"severity":73,"summary":184},"Errors","Actionable error messages","While the README mentions JSON output for commands, it does not specify if error messages are actionable, including root cause and remediation steps.",{"category":186,"check":187,"severity":73,"summary":188},"Execution","Pinned dependencies","The project uses npm and Homebrew, but there is no explicit mention of lockfiles or pinned interpreter versions for bundled scripts, which could lead to unpredictable behavior.",{"category":71,"check":190,"severity":73,"summary":191},"Dry-run preview","The README does not mention a dry-run feature for state-changing commands like publishing or deleting posts, making it difficult to preview the full effect before execution.",{"category":193,"check":194,"severity":73,"summary":195},"Protocol","Idempotent retry & timeouts","The README does not provide information on whether mutating operations are idempotent or if hard timeouts are enforced for external calls, which could lead to issues with retries and long-running operations.",{"category":156,"check":197,"severity":73,"summary":198},"Telemetry opt-in","The README does not specify whether telemetry is collected, if it's opt-in or opt-out, or what fields are collected, which is a privacy concern.",{"category":71,"check":200,"severity":62,"summary":201},"Theme declaration","The marketplace README clearly declares a curation theme of 'Official Wonda plugins for Claude Code', indicating a specific focus on Wonda's offerings.",{"category":139,"check":203,"severity":62,"summary":204},"Per-entry version metadata","The marketplace.json file includes explicit version metadata for the 'wonda' plugin.",1778686114846,"Wonda is a command-line interface that leverages AI models to generate various forms of content, including images, video, music, and text. It also provides extensive capabilities for editing media, publishing to social platforms like Instagram, TikTok, LinkedIn, and X (Twitter), and managing user accounts on these platforms. The tool requires authentication for most social media integrations and has a credit-based pricing system.",[208,209,210,211,212],"AI-powered content generation (image, video, music, text)","Extensive video and audio editing operations","Direct publishing to social media platforms (Instagram, TikTok, LinkedIn, X)","Social media account management and analysis","Integration with AI coding agents",[214,215,216],"Providing a graphical user interface for content creation.","Replacing the need for underlying social media platform accounts.","Offering real-time collaboration features beyond CLI execution.","3.1.0","To empower users to generate, edit, and publish diverse forms of digital content directly from their terminal using AI, streamlining creative workflows.","The extension has a broad scope and potential secret management concerns. However, it is actively maintained and well-documented, with a clear theme for the marketplace.",72,"A comprehensive CLI tool for AI-powered content generation, editing, and publishing across multiple platforms.",[223,224,225,226,31,30,227,228],"content-creation","video","image","audio","publishing","automation","community",[231,232,233,234],"Generating marketing materials like product videos and ad creatives.","Automating social media content creation and posting schedules.","Editing short-form videos with animated captions and overlays.","Managing and analyzing social media presence from the terminal.",{"codeQuality":236,"collectedAt":238,"documentation":239,"maintenance":242,"security":247,"testCoverage":248},{"hasLockfile":237},false,1778686097988,{"descriptionLength":240,"readmeSize":241},38,12857,{"closedIssues90d":11,"forks":243,"hasChangelog":237,"openIssues90d":244,"pushedAt":245,"stars":246},17,2,1778685876000,89,{"hasNpmPackage":237,"smitheryVerified":237},{"hasCi":237,"hasTests":237},{"updatedAt":250},1778686114982,{"basePath":18,"githubOwner":19,"githubRepo":15,"locale":20,"slug":15,"type":252},"marketplace",null,{"evaluate":255,"extract":257},{"promptVersionExtension":217,"promptVersionScoring":25,"score":220,"tags":256,"targetMarket":34,"tier":229},[223,224,225,226,31,30,227,228],{"commitSha":37,"marketplace":258,"plugin":259},{"name":19,"pluginCount":41},{"mcpCount":11,"provider":40,"skillCount":11},{"repoId":43},{"_creationTime":262,"_id":43,"identity":263,"providers":264,"workflow":344},1778686091607.3857,{"githubOwner":19,"githubRepo":15,"sourceUrl":16},{"classify":265,"discover":324,"github":327},{"commitSha":37,"extensions":266},[267,277,290,300],{"basePath":18,"description":51,"displayName":19,"installMethods":268,"rationale":269,"selectedPaths":270,"source":276,"sourceLanguage":20,"type":252},{"claudeCode":53},"marketplace.json at .claude-plugin/marketplace.json",[271,274],{"path":272,"priority":273},".claude-plugin/marketplace.json","mandatory",{"path":275,"priority":273},"README.md","rule",{"basePath":18,"description":13,"displayName":15,"installMethods":278,"license":38,"rationale":279,"selectedPaths":280,"source":276,"sourceLanguage":20,"type":21},{"claudeCode":15},"plugin manifest at .claude-plugin/plugin.json",[281,283,284,287],{"path":282,"priority":273},".claude-plugin/plugin.json",{"path":275,"priority":273},{"path":285,"priority":286},"skills/wonda-cli/SKILL.md","medium",{"path":288,"priority":289},".codex-plugin/plugin.json","high",{"basePath":291,"description":292,"displayName":293,"installMethods":294,"rationale":295,"selectedPaths":296,"source":276,"sourceLanguage":20,"type":299},"skills/wonda-cli","Using the Wonda CLI to generate images, videos, music, and audio from the terminal — plus LinkedIn, Reddit, and X/Twitter research and automation","wonda-cli",{"claudeCode":53},"SKILL.md frontmatter at skills/wonda-cli/SKILL.md",[297],{"path":298,"priority":273},"SKILL.md","skill",{"basePath":301,"description":302,"displayName":303,"installMethods":304,"license":305,"rationale":306,"selectedPaths":307,"source":276,"sourceLanguage":20,"type":301},"mcp","MCP server for the Wonda content creation API — images, video, music, audio, editing, and publishing","@degausai/wonda-mcp",{"npm":303},"MIT","package.json @modelcontextprotocol/sdk dep + bin at mcp/package.json",[308,310,311,314,316,318,320,322],{"path":309,"priority":273},"package.json",{"path":275,"priority":273},{"path":312,"priority":313},"src/index.ts","low",{"path":315,"priority":313},"src/tools/edit.ts",{"path":317,"priority":313},"src/tools/generate.ts",{"path":319,"priority":313},"src/tools/jobs.ts",{"path":321,"priority":313},"src/tools/media.ts",{"path":323,"priority":313},"src/tools/publish.ts",{"sources":325},[326],"manual",{"closedIssues90d":11,"description":328,"forks":243,"homepage":329,"openIssues90d":244,"pushedAt":245,"readmeSize":241,"stars":246,"topics":330},"Wonda CLI — AI-powered content creation from your terminal","https://wonda.sh",[331,332,333,334,31,335,225,336,337,338,339,224,29,340,341,228,223,342,30,343],"agent","agent-skills","ai","claude-code","codex","image-editing","image-generation","opencode","skills","video-generation","gemini-cli-extension","marketing","tiktok",{"classifiedAt":345,"discoverAt":346,"extractAt":347,"githubAt":347,"updatedAt":345},1778686096078,1778686091607,1778686094421,[226,228,31,223,225,227,30,224],{"evaluatedAt":250,"extractAt":47,"updatedAt":350},1778686234661,[],[]]