Skill UI

Automates Claude Code plugin audits whenever audit or security keywords appear, checking for vulnerabilities, compliance with CLAUDE.md standards, marketplace/MCP requirements, best practices, documentation, and repository hygiene before emitting a structured report.

Automates scaffolding of new Claude Code plugins within the claude-code-plugins repo, creating directories, plugin.json, READMEs, LICENSE, commands/agents/skills/MCP assets, and marketplace entries before validating schemas and syncing the catalog.

This guide details the recommended pattern for managing per-project plugin settings and state within a development environment. Plugins store their configuration in a dedicated `.claude/plugin-name.local.md` file. This file utilizes YAML frontmatter for structured settings (like enabling flags, retry counts, and parameters) and a Markdown body for additional context or instructions. It provides techniques for reading these settings using Bash hooks, commands, and agents.

This guide details the standardized directory structure and best practices for building robust and maintainable plugins for Claude Code. It covers critical components including the plugin manifest (plugin.json), commands, agents, skills, and hooks. Use this skill when you need to scaffold a new plugin, understand the required component organization, or configure the plugin's architecture according to best practices.

Automatically validates Claude Code plugin repositories by checking required files, JSON schema, frontmatter, permissions, security, marketplace metadata, and README compliance whenever a user asks to validate or check plugins.

Profiles application performance by analyzing CPU usage, memory allocation, and execution time with the application-profiler plugin, then identifies bottlenecks and suggests code-level optimizations for faster execution.

Efficiently run Nx workspace-plugin generators with priority before falling back to core Nx tools, so scaffolding, code generation, migrations, and repetitive monorepo tasks stay automated, tested, and formatted.

Performs OWASP-guided security scans on PostgreSQL and MySQL databases via the database-security-scanner plugin, identifying weak passwords, SQL injection risks, and misconfigurations while generating reports and remediation advice.

Conducts detailed accessibility audits for web apps via the accessibility-test-scanner plugin, verifying WCAG 2.1/2.2 compliance, ARIA usage, keyboard navigation, and screen reader compatibility while providing remediation guidance when accessibility or compliance checks are requested.

Automatically scans code and configs using the data-privacy-scanner plugin to flag sensitive data exposure and compliance violations for privacy audits.

Enables Claude to trigger the gdpr-compliance-scanner plugin, analyze applications or data systems for GDPR violations, and produce a detailed compliance report with gaps and remediation advice.

Automatically runs the vulnerability-scanner plugin to inspect code, dependencies, and configurations, detecting CVEs and insecure settings before releases and delivering detailed reports with remediation guidance.