[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"extension-plugin-anthropics-security-guidance-zh-CN":3,"guides-for-anthropics-security-guidance":705,"similar-k17fj1spv934vgvg91qt16xn9d86mt6h-zh-CN":706},{"_creationTime":4,"_id":5,"children":6,"community":7,"display":9,"evaluation":14,"identity":255,"isFallback":252,"parentExtension":260,"providers":296,"relations":300,"repo":301,"tags":703,"workflow":704},1778675383815.6475,"k17fj1spv934vgvg91qt16xn9d86mt6h",[],{"reviewCount":8},0,{"description":10,"installMethods":11,"name":12,"sourceUrl":13},"Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns",{"claudeCode":12},"security-guidance","https://github.com/anthropics/claude-code",{"_creationTime":15,"_id":16,"extensionId":5,"locale":17,"result":18,"trustSignals":236,"workflow":253},1778675645695.968,"kn79zp71ygfg1ge6n1h8vgxd6n86nmyy","en",{"checks":19,"evaluatedAt":207,"extensionSummary":208,"features":209,"nonGoals":215,"promptVersionExtension":219,"promptVersionScoring":220,"purpose":221,"rationale":222,"score":223,"summary":224,"tags":225,"targetMarket":230,"tier":231,"useCases":232},[20,25,28,31,35,38,42,47,51,54,59,63,66,70,73,76,79,82,85,88,92,96,100,104,109,112,115,118,122,125,128,131,134,137,140,144,148,152,155,159,162,165,168,171,174,177,180,183,186,189,193,196,199,203],{"category":21,"check":22,"severity":23,"summary":24},"Practical Utility","Problem relevance","pass","The description clearly states the problem of potential security issues when editing files, including command injection, XSS, and unsafe code patterns.",{"category":21,"check":26,"severity":23,"summary":27},"Unique selling proposition","The plugin offers a specific security-focused hook that goes beyond default LLM behavior by proactively identifying and warning about specific code injection and XSS patterns, providing safer alternatives and guidance.",{"category":21,"check":29,"severity":23,"summary":30},"Production readiness","The plugin is a self-contained hook that integrates with file editing tools, provides clear warnings and guidance, and has a mechanism to disable it, indicating it's ready for use in a workflow.",{"category":32,"check":33,"severity":23,"summary":34},"Scope","Single responsibility principle","The plugin focuses exclusively on providing security reminders during file edits, covering a single, coherent domain.",{"category":32,"check":36,"severity":23,"summary":37},"Description quality","The provided description accurately and concisely reflects the plugin's functionality of warning about potential security issues during file edits.",{"category":39,"check":40,"severity":23,"summary":41},"Invocation","Scoped tools","The hook is scoped to specific file editing tools (`Edit`, `Write`, `MultiEdit`) with path and content-based pattern matching, avoiding generalist command execution.",{"category":43,"check":44,"severity":45,"summary":46},"Documentation","Configuration & parameter reference","info","The plugin mentions an `ENABLE_SECURITY_REMINDER` environment variable but does not explicitly document its default value or precedence order.",{"category":32,"check":48,"severity":49,"summary":50},"Tool naming","not_applicable","This plugin primarily uses hooks and does not expose user-facing tools with individual names.",{"category":32,"check":52,"severity":23,"summary":53},"Minimal I/O surface","The hook correctly processes structured JSON input and outputs warnings to stderr, with no unnecessary data returned.",{"category":55,"check":56,"severity":57,"summary":58},"License","License usability","critical","The plugin's LICENSE.md states 'All rights reserved. Use is subject to Anthropic's Commercial Terms of Service', indicating a proprietary license that restricts redistribution and use, not a permissive OSS license.",{"category":60,"check":61,"severity":23,"summary":62},"Maintenance","Commit recency","The last commit was on May 12, 2026, which is within the last 3 months.",{"category":60,"check":64,"severity":49,"summary":65},"Dependency Management","The plugin does not appear to use any third-party dependencies.",{"category":67,"check":68,"severity":23,"summary":69},"Security","Secret Management","The plugin does not handle or expose any secrets.",{"category":67,"check":71,"severity":23,"summary":72},"Injection","The hook correctly treats loaded file content as data and does not execute instructions within it. It also utilizes explicit patterns to identify risky code snippets, rather than executing them.",{"category":67,"check":74,"severity":23,"summary":75},"Transitive Supply-Chain Grenades","The plugin does not fetch external content at runtime; all security patterns and logic are bundled within the repository.",{"category":67,"check":77,"severity":23,"summary":78},"Sandbox Isolation","The Python script runs within the Claude Code sandbox and does not attempt to access or modify files outside its designated scope. It uses expanded user paths for state files but within the user's home directory.",{"category":67,"check":80,"severity":23,"summary":81},"Sandbox escape primitives","No detached processes or retry loops around denied tool calls were found in the hook script.",{"category":67,"check":83,"severity":23,"summary":84},"Data Exfiltration","The plugin does not read or submit confidential data. Warnings are printed to stderr and state is saved locally.",{"category":67,"check":86,"severity":23,"summary":87},"Hidden Text Tricks","The bundled script and README do not contain hidden text tricks, invisible Unicode characters, or suspicious formatting.",{"category":89,"check":90,"severity":23,"summary":91},"Hooks","Opaque code execution","The hook script is a readable Python file and does not use obfuscation, base64 payloads, or runtime script fetching.",{"category":93,"check":94,"severity":23,"summary":95},"Portability","Structural Assumption","The script uses `os.path.expanduser` for state files, which is portable across OSes, and does not make assumptions about project structure.",{"category":97,"check":98,"severity":45,"summary":99},"Trust","Issues Attention","The repository has 9462 open issues and 22831 closed issues in the last 90 days, indicating high activity but potentially slow response times for new issues.",{"category":101,"check":102,"severity":23,"summary":103},"Versioning","Release Management","The plugin has a `version` field in its `plugin.json` file set to `1.0.0`, indicating a meaningful version.",{"category":105,"check":106,"severity":107,"summary":108},"Code Execution","Validation","warning","The script parses JSON input and checks for file paths and substrings but lacks explicit schema validation for all inputs and does not sanitize outputs beyond printing to stderr.",{"category":67,"check":110,"severity":23,"summary":111},"Unguarded Destructive Operations","The plugin is read-only in terms of modifying files and does not perform destructive operations.",{"category":105,"check":113,"severity":23,"summary":114},"Error Handling","The Python script handles JSON parsing errors, file I/O errors, and exits with specific codes (0, 2) to control tool execution flow. Errors in logging are silently ignored.",{"category":105,"check":116,"severity":45,"summary":117},"Logging","The plugin logs debug messages to a local file `/tmp/security-warnings-log.txt` and also writes warnings to stderr. It includes a periodic cleanup of old state files.",{"category":119,"check":120,"severity":23,"summary":121},"Compliance","GDPR","The plugin operates on file content and paths provided by the user, and saves state locally. It does not submit personal data to third parties.",{"category":119,"check":123,"severity":23,"summary":124},"Target market","The extension is a code-scanning tool with no regional or jurisdictional logic, making it globally applicable.",{"category":93,"check":126,"severity":23,"summary":127},"Runtime stability","The Python script uses standard libraries and should be portable across POSIX-compliant systems. It handles potential input errors gracefully.",{"category":43,"check":129,"severity":23,"summary":130},"README","The README provides a good overview of Claude Code, installation instructions, and links to further documentation, though it does not detail this specific plugin.",{"category":32,"check":132,"severity":49,"summary":133},"Tool surface size","This is a hook-based plugin and does not expose a large surface area of distinct tools.",{"category":39,"check":135,"severity":49,"summary":136},"Overlapping near-synonym tools","This plugin uses hooks tied to specific tool names (`Edit`, `Write`, `MultiEdit`) rather than exposing multiple, similarly named tools.",{"category":43,"check":138,"severity":23,"summary":139},"Phantom features","The README describes Claude Code's general functionality, and the plugin's functionality aligns with its description in `plugin.json` and `hooks.json`.",{"category":141,"check":142,"severity":45,"summary":143},"Install","Installation instruction","The main README provides installation instructions for Claude Code but does not detail how to install or enable this specific plugin, nor does it mention authentication requirements for this plugin.",{"category":145,"check":146,"severity":107,"summary":147},"Errors","Actionable error messages","Errors from JSON parsing or file operations are handled, but the `ENABLE_SECURITY_REMINDER` environment variable is not documented with a clear remediation step if it's causing unexpected behavior.",{"category":149,"check":150,"severity":23,"summary":151},"Execution","Pinned dependencies","The plugin script uses `python3` shebang and standard Python libraries, not third-party dependencies requiring pinning. It's a simple script.",{"category":32,"check":153,"severity":49,"summary":154},"Dry-run preview","The plugin is a read-only security linter and does not perform state-changing operations or send data outward.",{"category":156,"check":157,"severity":23,"summary":158},"Protocol","Idempotent retry & timeouts","The plugin performs local checks and prints to stderr; it does not involve remote calls or state-changing operations requiring idempotency or timeouts.",{"category":119,"check":160,"severity":23,"summary":161},"Telemetry opt-in","The plugin does not emit telemetry. Any logging is to a local file.",{"category":39,"check":163,"severity":49,"summary":164},"Name collisions","This plugin only has one hook that targets specific tool names, preventing name collisions within the plugin itself.",{"category":39,"check":166,"severity":45,"summary":167},"Hooks-off mechanism","The plugin provides an `ENABLE_SECURITY_REMINDER` environment variable to disable warnings, but this is not explicitly documented as a hooks-off mechanism in the README.",{"category":39,"check":169,"severity":23,"summary":170},"Hook matcher tightness","The hook matcher is specific to `Edit`, `Write`, and `MultiEdit` tools, avoiding broad `.*` patterns.",{"category":67,"check":172,"severity":23,"summary":173},"Hook security","The hook is read-only, only prints warnings to stderr, and can be disabled via an environment variable. It does not mutate prompts or file contents.",{"category":89,"check":175,"severity":23,"summary":176},"Silent prompt rewriting","The plugin does not use `UserPromptSubmit` hooks, thus no prompt rewriting occurs.",{"category":67,"check":178,"severity":49,"summary":179},"Permission Hook","The plugin does not use `PermissionRequest` hooks.",{"category":119,"check":181,"severity":23,"summary":182},"Hook privacy","The plugin's logging is local to `/tmp/security-warnings-log.txt` and state is saved locally. No data is sent over the network.",{"category":105,"check":184,"severity":23,"summary":185},"Hook dependency","The hook script is a short, readable Python file (`security_reminder_hook.py`) and is bundled within the repository.",{"category":43,"check":187,"severity":107,"summary":188},"Feature Transparency","The `plugin.json` declares a `PreToolUse` hook, but the README does not mention or describe this hook or the security guidance it provides.",{"category":190,"check":191,"severity":23,"summary":192},"Convention","Layout convention adherence","The plugin structure follows conventions with `plugin.json` in `.claude-plugin/` and the hook script in `hooks/`.",{"category":190,"check":194,"severity":23,"summary":195},"Plugin state","State files for shown warnings are stored under `~/.claude/`, which adheres to the convention of keeping state within user-accessible directories.",{"category":67,"check":197,"severity":49,"summary":198},"Keychain-stored secrets","The plugin does not handle or require any secrets, thus not needing keychain storage.",{"category":200,"check":201,"severity":49,"summary":202},"Dependencies","Tagged release sourcing","This plugin is bundled directly and does not depend on external MCP servers that would require tagged release sourcing.",{"category":204,"check":205,"severity":23,"summary":206},"Installation","Clean uninstall","The plugin only writes to local files and prints to stderr; it does not spawn background daemons or services that would persist after uninstall.",1778675645581,"This plugin acts as a security reminder hook that scans file content and paths for common security vulnerabilities such as command injection, XSS, and unsafe code patterns. It operates during file editing operations (Edit, Write, MultiEdit) and prints warnings to stderr, blocking the operation if a pattern is detected. It manages session-specific warning states locally to avoid repeated alerts.",[210,211,212,213,214],"Detects command injection, XSS, and unsafe code patterns","Warns users via stderr during file edits","Blocks file edits upon detecting critical security patterns","Manages per-session warning states locally","Includes GitHub Actions workflow security checks",[216,217,218],"Does not replace static analysis security scanners (SAST).","Does not actively sanitize code or automatically fix vulnerabilities.","Does not perform runtime security analysis.","3.0.0","4.4.0","To proactively alert developers to potential security vulnerabilities in their code as they edit files, fostering safer coding practices.","The plugin's proprietary license is a critical issue, capping the score at 49. The lack of documentation for the hook's features and the configuration variable prevents a higher score within the available band.",75,"A plugin providing security reminders during file edits, but with a restrictive license.",[226,227,228,229],"security","code-quality","hooks","python","global","flagged",[233,234,235],"Use when editing sensitive files like GitHub Actions workflows or code that executes external commands.","Incorporate into development workflows to catch common security mistakes before they are committed.","Leverage for code reviews to ensure adherence to security best practices.",{"codeQuality":237,"collectedAt":239,"documentation":240,"maintenance":243,"security":250,"testCoverage":251},{"hasLockfile":238},false,1778675627120,{"descriptionLength":241,"readmeSize":242},144,2873,{"closedIssues90d":244,"forks":245,"hasChangelog":238,"manifestVersion":246,"openIssues90d":247,"pushedAt":248,"stars":249},22831,20310,"1.0.0",9462,1778620184000,123134,{"hasNpmPackage":238,"smitheryVerified":238},{"hasCi":252,"hasTests":238},true,{"updatedAt":254},1778675645696,{"basePath":256,"githubOwner":257,"githubRepo":258,"locale":17,"slug":12,"type":259},"plugins/security-guidance","anthropics","claude-code","plugin",{"_creationTime":261,"_id":262,"community":263,"display":264,"identity":269,"parentExtension":272,"providers":273,"relations":290,"tags":292,"workflow":293},1778675383815.6443,"k17ft5f5kw1crrqpbr5ez2tfx586mxk0",{"reviewCount":8},{"description":265,"installMethods":266,"name":268,"sourceUrl":13},"Bundled plugins for Claude Code including Agent SDK development tools, PR review toolkit, and commit workflows",{"claudeCode":267},"anthropics/claude-code","claude-code-plugins",{"basePath":270,"githubOwner":257,"githubRepo":258,"locale":17,"slug":258,"type":271},"","marketplace",null,{"evaluate":274,"extract":284},{"promptVersionExtension":275,"promptVersionScoring":220,"score":276,"tags":277,"targetMarket":230,"tier":283},"3.1.0",79,[258,278,279,280,281,282],"plugins","development","productivity","code-review","agent-sdk","community",{"commitSha":285,"marketplace":286,"plugin":288},"HEAD",{"name":268,"pluginCount":287,"version":246},13,{"mcpCount":8,"provider":289,"skillCount":8},"classify",{"repoId":291},"kd7d2pdr9h079xr7vcg3zyy2nx86mab0",[282,258,281,279,278,280],{"evaluatedAt":294,"extractAt":295,"updatedAt":294},1778675396350,1778675383815,{"evaluate":297,"extract":299},{"promptVersionExtension":219,"promptVersionScoring":220,"score":223,"tags":298,"targetMarket":230,"tier":231},[226,227,228,229],{"commitSha":285},{"parentExtensionId":262,"repoId":291},{"_creationTime":302,"_id":291,"identity":303,"providers":304,"workflow":699},1778675378145.0718,{"githubOwner":257,"githubRepo":258,"sourceUrl":13},{"classify":305,"discover":692,"github":695},{"commitSha":285,"extensions":306},[307,320,336,348,358,373,384,401,412,444,454,470,492,509,517,530,537,545,566,593,621,641,663,682],{"basePath":270,"description":265,"displayName":268,"installMethods":308,"rationale":309,"selectedPaths":310,"source":319,"sourceLanguage":17,"type":271},{"claudeCode":267},"marketplace.json at .claude-plugin/marketplace.json",[311,314,316],{"path":312,"priority":313},".claude-plugin/marketplace.json","mandatory",{"path":315,"priority":313},"README.md",{"path":317,"priority":318},"LICENSE.md","high","rule",{"basePath":321,"description":322,"displayName":323,"installMethods":324,"rationale":325,"selectedPaths":326,"source":319,"sourceLanguage":17,"type":259},"plugins/agent-sdk-dev","Claude Agent SDK Development Plugin","agent-sdk-dev",{"claudeCode":323},"plugin manifest at plugins/agent-sdk-dev/.claude-plugin/plugin.json",[327,329,330,332,334],{"path":328,"priority":313},".claude-plugin/plugin.json",{"path":315,"priority":313},{"path":331,"priority":318},"agents/agent-sdk-verifier-py.md",{"path":333,"priority":318},"agents/agent-sdk-verifier-ts.md",{"path":335,"priority":318},"commands/new-sdk-app.md",{"basePath":337,"description":338,"displayName":339,"installMethods":340,"rationale":341,"selectedPaths":342,"source":319,"sourceLanguage":17,"type":259},"plugins/claude-opus-4-5-migration","Migrate your code and prompts from Sonnet 4.x and Opus 4.1 to Opus 4.5.","claude-opus-4-5-migration",{"claudeCode":339},"plugin manifest at plugins/claude-opus-4-5-migration/.claude-plugin/plugin.json",[343,344,345],{"path":328,"priority":313},{"path":315,"priority":313},{"path":346,"priority":347},"skills/claude-opus-4-5-migration/SKILL.md","medium",{"basePath":349,"description":350,"displayName":281,"installMethods":351,"rationale":352,"selectedPaths":353,"source":319,"sourceLanguage":17,"type":259},"plugins/code-review","Automated code review for pull requests using multiple specialized agents with confidence-based scoring",{"claudeCode":281},"plugin manifest at plugins/code-review/.claude-plugin/plugin.json",[354,355,356],{"path":328,"priority":313},{"path":315,"priority":313},{"path":357,"priority":318},"commands/code-review.md",{"basePath":359,"description":360,"displayName":361,"installMethods":362,"rationale":363,"selectedPaths":364,"source":319,"sourceLanguage":17,"type":259},"plugins/commit-commands","Streamline your git workflow with simple commands for committing, pushing, and creating pull requests","commit-commands",{"claudeCode":361},"plugin manifest at plugins/commit-commands/.claude-plugin/plugin.json",[365,366,367,369,371],{"path":328,"priority":313},{"path":315,"priority":313},{"path":368,"priority":318},"commands/clean_gone.md",{"path":370,"priority":318},"commands/commit-push-pr.md",{"path":372,"priority":318},"commands/commit.md",{"basePath":374,"description":375,"displayName":376,"installMethods":377,"rationale":378,"selectedPaths":379,"source":319,"sourceLanguage":17,"type":259},"plugins/explanatory-output-style","Adds educational insights about implementation choices and codebase patterns (mimics the deprecated Explanatory output style)","explanatory-output-style",{"claudeCode":376},"plugin manifest at plugins/explanatory-output-style/.claude-plugin/plugin.json",[380,381,382],{"path":328,"priority":313},{"path":315,"priority":313},{"path":383,"priority":318},"hooks/hooks.json",{"basePath":385,"description":386,"displayName":387,"installMethods":388,"rationale":389,"selectedPaths":390,"source":319,"sourceLanguage":17,"type":259},"plugins/feature-dev","Comprehensive feature development workflow with specialized agents for codebase exploration, architecture design, and quality review","feature-dev",{"claudeCode":387},"plugin manifest at plugins/feature-dev/.claude-plugin/plugin.json",[391,392,393,395,397,399],{"path":328,"priority":313},{"path":315,"priority":313},{"path":394,"priority":318},"agents/code-architect.md",{"path":396,"priority":318},"agents/code-explorer.md",{"path":398,"priority":318},"agents/code-reviewer.md",{"path":400,"priority":318},"commands/feature-dev.md",{"basePath":402,"description":403,"displayName":404,"installMethods":405,"rationale":406,"selectedPaths":407,"source":319,"sourceLanguage":17,"type":259},"plugins/frontend-design","Frontend design skill for UI/UX implementation","frontend-design",{"claudeCode":404},"plugin manifest at plugins/frontend-design/.claude-plugin/plugin.json",[408,409,410],{"path":328,"priority":313},{"path":315,"priority":313},{"path":411,"priority":347},"skills/frontend-design/SKILL.md",{"basePath":413,"description":414,"displayName":415,"installMethods":416,"rationale":417,"selectedPaths":418,"source":319,"sourceLanguage":17,"type":259},"plugins/hookify","Easily create hooks to prevent unwanted behaviors by analyzing conversation patterns","hookify",{"claudeCode":415},"plugin manifest at plugins/hookify/.claude-plugin/plugin.json",[419,420,421,423,425,427,429,431,433,435,436,438,440,442],{"path":328,"priority":313},{"path":315,"priority":313},{"path":422,"priority":347},"skills/writing-rules/SKILL.md",{"path":424,"priority":318},"agents/conversation-analyzer.md",{"path":426,"priority":318},"commands/configure.md",{"path":428,"priority":318},"commands/help.md",{"path":430,"priority":318},"commands/hookify.md",{"path":432,"priority":318},"commands/list.md",{"path":434,"priority":318},"hooks/__init__.py",{"path":383,"priority":318},{"path":437,"priority":318},"hooks/posttooluse.py",{"path":439,"priority":318},"hooks/pretooluse.py",{"path":441,"priority":318},"hooks/stop.py",{"path":443,"priority":318},"hooks/userpromptsubmit.py",{"basePath":445,"description":446,"displayName":447,"installMethods":448,"rationale":449,"selectedPaths":450,"source":319,"sourceLanguage":17,"type":259},"plugins/learning-output-style","Interactive learning mode that requests meaningful code contributions at decision points (mimics the unshipped Learning output style)","learning-output-style",{"claudeCode":447},"plugin manifest at plugins/learning-output-style/.claude-plugin/plugin.json",[451,452,453],{"path":328,"priority":313},{"path":315,"priority":313},{"path":383,"priority":318},{"basePath":455,"description":456,"displayName":457,"installMethods":458,"rationale":459,"selectedPaths":460,"source":319,"sourceLanguage":17,"type":259},"plugins/plugin-dev","Comprehensive toolkit for developing Claude Code plugins. Includes 7 expert skills covering hooks, MCP integration, commands, agents, and best practices. AI-assisted plugin creation and validation.","plugin-dev",{"claudeCode":457},"inline plugin source from marketplace.json at plugins/plugin-dev",[461,462,464,466,468],{"path":315,"priority":313},{"path":463,"priority":318},"agents/agent-creator.md",{"path":465,"priority":318},"agents/plugin-validator.md",{"path":467,"priority":318},"agents/skill-reviewer.md",{"path":469,"priority":318},"commands/create-plugin.md",{"basePath":471,"description":472,"displayName":473,"installMethods":474,"rationale":475,"selectedPaths":476,"source":319,"sourceLanguage":17,"type":259},"plugins/pr-review-toolkit","Comprehensive PR review agents specializing in comments, tests, error handling, type design, code quality, and code simplification","pr-review-toolkit",{"claudeCode":473},"plugin manifest at plugins/pr-review-toolkit/.claude-plugin/plugin.json",[477,478,479,480,482,484,486,488,490],{"path":328,"priority":313},{"path":315,"priority":313},{"path":398,"priority":318},{"path":481,"priority":318},"agents/code-simplifier.md",{"path":483,"priority":318},"agents/comment-analyzer.md",{"path":485,"priority":318},"agents/pr-test-analyzer.md",{"path":487,"priority":318},"agents/silent-failure-hunter.md",{"path":489,"priority":318},"agents/type-design-analyzer.md",{"path":491,"priority":318},"commands/review-pr.md",{"basePath":493,"description":494,"displayName":495,"installMethods":496,"rationale":497,"selectedPaths":498,"source":319,"sourceLanguage":17,"type":259},"plugins/ralph-wiggum","Implementation of the Ralph Wiggum technique - continuous self-referential AI loops for interactive iterative development. Run Claude in a while-true loop with the same prompt until task completion.","ralph-wiggum",{"claudeCode":495},"plugin manifest at plugins/ralph-wiggum/.claude-plugin/plugin.json",[499,500,501,503,504,506,507],{"path":328,"priority":313},{"path":315,"priority":313},{"path":502,"priority":318},"commands/cancel-ralph.md",{"path":428,"priority":318},{"path":505,"priority":318},"commands/ralph-loop.md",{"path":383,"priority":318},{"path":508,"priority":318},"hooks/stop-hook.sh",{"basePath":256,"description":10,"displayName":12,"installMethods":510,"rationale":511,"selectedPaths":512,"source":319,"sourceLanguage":17,"type":259},{"claudeCode":12},"plugin manifest at plugins/security-guidance/.claude-plugin/plugin.json",[513,514,515],{"path":328,"priority":313},{"path":383,"priority":318},{"path":516,"priority":318},"hooks/security_reminder_hook.py",{"basePath":518,"description":519,"displayName":339,"installMethods":520,"rationale":521,"selectedPaths":522,"source":319,"sourceLanguage":17,"type":529},"plugins/claude-opus-4-5-migration/skills/claude-opus-4-5-migration","Migrate prompts and code from Claude Sonnet 4.0, Sonnet 4.5, or Opus 4.1 to Opus 4.5. Use when the user wants to update their codebase, prompts, or API calls to use Opus 4.5. Handles model string updates and prompt adjustments for known Opus 4.5 behavioral differences. Does NOT migrate Haiku 4.5.",{"claudeCode":267},"SKILL.md frontmatter at plugins/claude-opus-4-5-migration/skills/claude-opus-4-5-migration/SKILL.md",[523,525,527],{"path":524,"priority":313},"SKILL.md",{"path":526,"priority":347},"references/effort.md",{"path":528,"priority":347},"references/prompt-snippets.md","skill",{"basePath":531,"description":532,"displayName":404,"installMethods":533,"rationale":534,"selectedPaths":535,"source":319,"sourceLanguage":17,"type":529},"plugins/frontend-design/skills/frontend-design","Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.",{"claudeCode":267},"SKILL.md frontmatter at plugins/frontend-design/skills/frontend-design/SKILL.md",[536],{"path":524,"priority":313},{"basePath":538,"description":539,"displayName":540,"installMethods":541,"rationale":542,"selectedPaths":543,"source":319,"sourceLanguage":17,"type":529},"plugins/hookify/skills/writing-rules","This skill should be used when the user asks to \"create a hookify rule\", \"write a hook rule\", \"configure hookify\", \"add a hookify rule\", or needs guidance on hookify rule syntax and patterns.","writing-rules",{"claudeCode":267},"SKILL.md frontmatter at plugins/hookify/skills/writing-rules/SKILL.md",[544],{"path":524,"priority":313},{"basePath":546,"description":547,"displayName":548,"installMethods":549,"rationale":550,"selectedPaths":551,"source":319,"sourceLanguage":17,"type":529},"plugins/plugin-dev/skills/agent-development","This skill should be used when the user asks to \"create an agent\", \"add an agent\", \"write a subagent\", \"agent frontmatter\", \"when to use description\", \"agent examples\", \"agent tools\", \"agent colors\", \"autonomous agent\", or needs guidance on agent structure, system prompts, triggering conditions, or agent development best practices for Claude Code plugins.","agent-development",{"claudeCode":267},"SKILL.md frontmatter at plugins/plugin-dev/skills/agent-development/SKILL.md",[552,553,556,558,560,562,564],{"path":524,"priority":313},{"path":554,"priority":555},"examples/agent-creation-prompt.md","low",{"path":557,"priority":555},"examples/complete-agent-examples.md",{"path":559,"priority":347},"references/agent-creation-system-prompt.md",{"path":561,"priority":347},"references/system-prompt-design.md",{"path":563,"priority":347},"references/triggering-examples.md",{"path":565,"priority":555},"scripts/validate-agent.sh",{"basePath":567,"description":568,"displayName":569,"installMethods":570,"rationale":571,"selectedPaths":572,"source":319,"sourceLanguage":17,"type":529},"plugins/plugin-dev/skills/command-development","This skill should be used when the user asks to \"create a slash command\", \"add a command\", \"write a custom command\", \"define command arguments\", \"use command frontmatter\", \"organize commands\", \"create command with file references\", \"interactive command\", \"use AskUserQuestion in command\", or needs guidance on slash command structure, YAML frontmatter fields, dynamic arguments, bash execution in commands, user interaction patterns, or command development best practices for Claude Code.","command-development",{"claudeCode":267},"SKILL.md frontmatter at plugins/plugin-dev/skills/command-development/SKILL.md",[573,574,575,577,579,581,583,585,587,589,591],{"path":524,"priority":313},{"path":315,"priority":318},{"path":576,"priority":555},"examples/plugin-commands.md",{"path":578,"priority":555},"examples/simple-commands.md",{"path":580,"priority":347},"references/advanced-workflows.md",{"path":582,"priority":347},"references/documentation-patterns.md",{"path":584,"priority":347},"references/frontmatter-reference.md",{"path":586,"priority":347},"references/interactive-commands.md",{"path":588,"priority":347},"references/marketplace-considerations.md",{"path":590,"priority":347},"references/plugin-features-reference.md",{"path":592,"priority":347},"references/testing-strategies.md",{"basePath":594,"description":595,"displayName":596,"installMethods":597,"rationale":598,"selectedPaths":599,"source":319,"sourceLanguage":17,"type":529},"plugins/plugin-dev/skills/hook-development","This skill should be used when the user asks to \"create a hook\", \"add a PreToolUse/PostToolUse/Stop hook\", \"validate tool use\", \"implement prompt-based hooks\", \"use ${CLAUDE_PLUGIN_ROOT}\", \"set up event-driven automation\", \"block dangerous commands\", or mentions hook events (PreToolUse, PostToolUse, Stop, SubagentStop, SessionStart, SessionEnd, UserPromptSubmit, PreCompact, Notification). Provides comprehensive guidance for creating and implementing Claude Code plugin hooks with focus on advanced prompt-based hooks API.","hook-development",{"claudeCode":267},"SKILL.md frontmatter at plugins/plugin-dev/skills/hook-development/SKILL.md",[600,601,603,605,607,609,611,613,615,617,619],{"path":524,"priority":313},{"path":602,"priority":555},"examples/load-context.sh",{"path":604,"priority":555},"examples/validate-bash.sh",{"path":606,"priority":555},"examples/validate-write.sh",{"path":608,"priority":347},"references/advanced.md",{"path":610,"priority":347},"references/migration.md",{"path":612,"priority":347},"references/patterns.md",{"path":614,"priority":555},"scripts/README.md",{"path":616,"priority":555},"scripts/hook-linter.sh",{"path":618,"priority":555},"scripts/test-hook.sh",{"path":620,"priority":555},"scripts/validate-hook-schema.sh",{"basePath":622,"description":623,"displayName":624,"installMethods":625,"rationale":626,"selectedPaths":627,"source":319,"sourceLanguage":17,"type":529},"plugins/plugin-dev/skills/mcp-integration","This skill should be used when the user asks to \"add MCP server\", \"integrate MCP\", \"configure MCP in plugin\", \"use .mcp.json\", \"set up Model Context Protocol\", \"connect external service\", mentions \"${CLAUDE_PLUGIN_ROOT} with MCP\", or discusses MCP server types (SSE, stdio, HTTP, WebSocket). Provides comprehensive guidance for integrating Model Context Protocol servers into Claude Code plugins for external tool and service integration.","mcp-integration",{"claudeCode":267},"SKILL.md frontmatter at plugins/plugin-dev/skills/mcp-integration/SKILL.md",[628,629,631,633,635,637,639],{"path":524,"priority":313},{"path":630,"priority":555},"examples/http-server.json",{"path":632,"priority":555},"examples/sse-server.json",{"path":634,"priority":555},"examples/stdio-server.json",{"path":636,"priority":347},"references/authentication.md",{"path":638,"priority":347},"references/server-types.md",{"path":640,"priority":347},"references/tool-usage.md",{"basePath":642,"description":643,"displayName":644,"installMethods":645,"rationale":646,"selectedPaths":647,"source":319,"sourceLanguage":17,"type":529},"plugins/plugin-dev/skills/plugin-settings","This skill should be used when the user asks about \"plugin settings\", \"store plugin configuration\", \"user-configurable plugin\", \".local.md files\", \"plugin state files\", \"read YAML frontmatter\", \"per-project plugin settings\", or wants to make plugin behavior configurable. Documents the .claude/plugin-name.local.md pattern for storing plugin-specific configuration with YAML frontmatter and markdown content.","plugin-settings",{"claudeCode":267},"SKILL.md frontmatter at plugins/plugin-dev/skills/plugin-settings/SKILL.md",[648,649,651,653,655,657,659,661],{"path":524,"priority":313},{"path":650,"priority":555},"examples/create-settings-command.md",{"path":652,"priority":555},"examples/example-settings.md",{"path":654,"priority":555},"examples/read-settings-hook.sh",{"path":656,"priority":347},"references/parsing-techniques.md",{"path":658,"priority":347},"references/real-world-examples.md",{"path":660,"priority":555},"scripts/parse-frontmatter.sh",{"path":662,"priority":555},"scripts/validate-settings.sh",{"basePath":664,"description":665,"displayName":666,"installMethods":667,"rationale":668,"selectedPaths":669,"source":319,"sourceLanguage":17,"type":529},"plugins/plugin-dev/skills/plugin-structure","This skill should be used when the user asks to \"create a plugin\", \"scaffold a plugin\", \"understand plugin structure\", \"organize plugin components\", \"set up plugin.json\", \"use ${CLAUDE_PLUGIN_ROOT}\", \"add commands/agents/skills/hooks\", \"configure auto-discovery\", or needs guidance on plugin directory layout, manifest configuration, component organization, file naming conventions, or Claude Code plugin architecture best practices.","plugin-structure",{"claudeCode":267},"SKILL.md frontmatter at plugins/plugin-dev/skills/plugin-structure/SKILL.md",[670,671,672,674,676,678,680],{"path":524,"priority":313},{"path":315,"priority":318},{"path":673,"priority":555},"examples/advanced-plugin.md",{"path":675,"priority":555},"examples/minimal-plugin.md",{"path":677,"priority":555},"examples/standard-plugin.md",{"path":679,"priority":347},"references/component-patterns.md",{"path":681,"priority":347},"references/manifest-reference.md",{"basePath":683,"description":684,"displayName":685,"installMethods":686,"rationale":687,"selectedPaths":688,"source":319,"sourceLanguage":17,"type":529},"plugins/plugin-dev/skills/skill-development","This skill should be used when the user wants to \"create a skill\", \"add a skill to plugin\", \"write a new skill\", \"improve skill description\", \"organize skill content\", or needs guidance on skill structure, progressive disclosure, or skill development best practices for Claude Code plugins.","skill-development",{"claudeCode":267},"SKILL.md frontmatter at plugins/plugin-dev/skills/skill-development/SKILL.md",[689,690],{"path":524,"priority":313},{"path":691,"priority":347},"references/skill-creator-original.md",{"sources":693},[694],"manual",{"closedIssues90d":244,"description":696,"forks":245,"homepage":697,"openIssues90d":247,"pushedAt":248,"readmeSize":242,"stars":249,"topics":698},"Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.","https://code.claude.com/docs/en/overview",[],{"classifiedAt":700,"discoverAt":701,"extractAt":702,"githubAt":702,"updatedAt":700},1778675383497,1778675378145,1778675381570,[227,228,229,226],{"evaluatedAt":254,"extractAt":295,"updatedAt":254},[],[707,739,763,791,819,844],{"_creationTime":708,"_id":709,"community":710,"display":711,"identity":716,"providers":720,"relations":732,"tags":735,"workflow":736},1778675056600.2068,"k178z532bm8n047nxsbbprw3fd86mj5a",{"reviewCount":8},{"description":712,"installMethods":713,"name":714,"sourceUrl":715},"Active coding discipline enforcer based on Karpathy's 4 principles: surface assumptions, keep it simple, make surgical changes, define verifiable goals. Ships 4 Python tools (complexity_checker, diff_surgeon, assumption_linter, goal_verifier), a review agent, /karpathy-check slash command, and a pre-commit hook. All tools stdlib-only.",{"claudeCode":714},"karpathy-coder","https://github.com/alirezarezvani/claude-skills",{"basePath":717,"githubOwner":718,"githubRepo":719,"locale":17,"slug":714,"type":259},"engineering/karpathy-coder","alirezarezvani","claude-skills",{"evaluate":721,"extract":728},{"promptVersionExtension":219,"promptVersionScoring":220,"score":722,"tags":723,"targetMarket":230,"tier":727},100,[227,724,725,726,229],"developer-tools","linting","review","verified",{"commitSha":285,"license":729,"plugin":730},"MIT",{"mcpCount":8,"provider":289,"skillCount":731},1,{"parentExtensionId":733,"repoId":734},"k17dce6sbramb6sxm7ksr3928x86ncfs","kd7ff9s1w43mfyy1n7hf87816186m6px",[227,724,725,229,726],{"evaluatedAt":737,"extractAt":738,"updatedAt":737},1778675717756,1778675056600,{"_creationTime":740,"_id":741,"community":742,"display":743,"identity":747,"providers":749,"relations":759,"tags":760,"workflow":761},1778675056600.203,"k17a3t49yvhb9wjth9qywk121x86nvmw",{"reviewCount":8},{"description":744,"installMethods":745,"name":746,"sourceUrl":715},"Autonomous experiment loop that optimizes any file by a measurable metric. 5 slash commands, 8 evaluators, configurable loop intervals (10min to monthly).",{"claudeCode":746},"autoresearch-agent",{"basePath":748,"githubOwner":718,"githubRepo":719,"locale":17,"slug":746,"type":259},"engineering/autoresearch-agent",{"evaluate":750,"extract":756},{"promptVersionExtension":219,"promptVersionScoring":220,"score":722,"tags":751,"targetMarket":230,"tier":727},[752,753,754,227,755],"optimization","experimentation","automation","machine-learning",{"commitSha":285,"license":729,"plugin":757},{"mcpCount":8,"provider":289,"skillCount":758},4,{"parentExtensionId":733,"repoId":734},[754,227,753,755,752],{"evaluatedAt":762,"extractAt":738,"updatedAt":762},1778675384189,{"_creationTime":764,"_id":765,"community":766,"display":767,"identity":772,"providers":775,"relations":783,"tags":786,"workflow":787},1778699562111.8264,"k174a28y9e8kpqfrx634vc3whd86ntx2",{"reviewCount":8},{"description":768,"installMethods":769,"name":770,"sourceUrl":771},"734 个用于 Claude Code 的安全钩子 — 在自主 AI 编码会话期间防止文件删除、凭证泄露、git 灾难和令牌浪费",{"claudeCode":770},"cc-safe-setup","https://github.com/yurukusa/cc-safe-setup",{"basePath":270,"githubOwner":773,"githubRepo":770,"locale":774,"slug":770,"type":259},"yurukusa","zh-CN",{"evaluate":776,"extract":781},{"promptVersionExtension":219,"promptVersionScoring":220,"score":777,"tags":778,"targetMarket":230,"tier":727},99,[226,228,779,227,780],"safety","cli",{"commitSha":285,"license":729,"plugin":782},{"mcpCount":8,"provider":289,"skillCount":731},{"repoId":784,"translatedFrom":785},"kd75r9w9e5zg6a7p0g22f0n1td86nsat","k178wjnjd4vs7xhw95cq04689n86nhkt",[780,227,228,779,226],{"evaluatedAt":788,"extractAt":789,"updatedAt":790},1778699475909,1778699381979,1778699562111,{"_creationTime":792,"_id":793,"community":794,"display":795,"identity":800,"providers":801,"relations":810,"tags":814,"workflow":815},1778699488319.683,"k1712kg39gcnk95dyy7jynvfvh86mt6a",{"reviewCount":8},{"description":796,"installMethods":797,"name":798,"sourceUrl":799},"为 Claude Code 的自动化运行提供生产环境安全钩子。包括上下文监控、语法检查、分支保护、活动日志记录等。",{"claudeCode":798},"claude-code-hooks","https://github.com/yurukusa/claude-code-hooks",{"basePath":270,"githubOwner":773,"githubRepo":798,"locale":774,"slug":798,"type":259},{"evaluate":802,"extract":807},{"promptVersionExtension":219,"promptVersionScoring":220,"score":777,"tags":803,"targetMarket":230,"tier":727},[779,228,804,805,780,806,226],"autonomous","production","monitoring",{"commitSha":285,"license":729,"plugin":808},{"mcpCount":8,"provider":289,"skillCount":809},2,{"parentExtensionId":811,"repoId":812,"translatedFrom":813},"k179rvzf2x5tsmmwbvpyv0mgxn86mkc8","kd7eh26xf9ft5m4mhhe34kedv586nq7c","k17cm6081dkz91ebw27jqh38q586nfry",[804,780,228,806,805,779,226],{"evaluatedAt":816,"extractAt":817,"updatedAt":818},1778699440255,1778699408572,1778699488319,{"_creationTime":820,"_id":821,"community":822,"display":823,"identity":828,"providers":832,"relations":838,"tags":840,"workflow":841},1778692488329.0122,"k1706nwc7f8zp4gh4th2smsax186n2ez",{"reviewCount":8},{"description":824,"installMethods":825,"name":826,"sourceUrl":827},"TDD workflow enforcement with auto-test hook",{"claudeCode":826},"tdd","https://github.com/luiseiman/claude-kit",{"basePath":829,"githubOwner":830,"githubRepo":831,"locale":17,"slug":826,"type":259},"stacks/tdd","luiseiman","claude-kit",{"evaluate":833,"extract":837},{"promptVersionExtension":219,"promptVersionScoring":220,"score":777,"tags":834,"targetMarket":230,"tier":727},[826,835,836,754,228],"testing","workflow",{"commitSha":285},{"repoId":839},"kd79wqc8an5wh20cc2znr8tyb586mxwx",[754,228,826,835,836],{"evaluatedAt":842,"extractAt":843,"updatedAt":842},1778692847867,1778692488329,{"_creationTime":845,"_id":846,"community":847,"display":848,"identity":853,"providers":855,"relations":866,"tags":870,"workflow":871},1778688530317.6575,"k17bmz2ym9hq2bdg77t7ne9tts86nxzj",{"reviewCount":8},{"description":849,"installMethods":850,"name":851,"sourceUrl":852},"为 Claude Code 提供基于主题的自动记忆——跨会话或压缩时绝不会丢失上下文。",{"claudeCode":851},"claude-recap","https://github.com/hatawong/claude-recap",{"basePath":270,"githubOwner":854,"githubRepo":851,"locale":774,"slug":851,"type":259},"hatawong",{"evaluate":856,"extract":864},{"promptVersionExtension":219,"promptVersionScoring":220,"score":777,"tags":857,"targetMarket":230,"tier":727},[858,859,228,860,861,862,863],"memory","persistence","context-management","local-storage","bash","nodejs",{"commitSha":285,"license":729,"plugin":865},{"mcpCount":8,"provider":289,"skillCount":758},{"parentExtensionId":867,"repoId":868,"translatedFrom":869},"k17944zm3ehfvm4ntncyz1dzyx86nc6v","kd78y3gm1ky53msejxede6b4x986nqyc","k17b9bmvrv1a5e41w678q1yvrh86m81g",[862,860,228,861,858,863,859],{"evaluatedAt":872,"extractAt":873,"updatedAt":874},1778688364899,1778688322101,1778688530317]