By kazukinagata
Companion plugin used to trigger validator errors. Provides multiple skills/hooks that intentionally violate substitution rules and naming conventions, used by probes 02 (substitution-allowlist) and 20 (cowork-validation).
Intentionally violates §1.2 validator rule by referencing ${CLAUDE_PLUGIN_DATA} in skill frontmatter hook. Expected to be blocked at install time with a "plugin-only" error.
References user_config.KEY in skill frontmatter hook. Validator may pass; /bin/sh should error with Bad substitution at hook execution time.
Used by probe 20 to trigger validation rejection on Cowork by including UserPromptExpansion in hooks.
Used by probe 20 to trigger validation rejection on Cowork via non-kebab-case naming. NOTE this skill folder is named lowercase but the frontmatter name field intentionally violates the rule.
Claude Code plugin 機構の挙動を 22 個の probe skill で実機検証し、公式ドキュメントには書かれていない仕様や、ドキュメントと挙動が矛盾する箇所を洗い出したレポジトリ。
検証対象:
docs/team-report.md に 約 2,400 行の落とし穴まとめがあります。主なトピック:
CLAUDE_PLUGIN_ROOT / CLAUDE_PLUGIN_DATA / CLAUDE_PROJECT_DIR 等が plugin-level hook / skill frontmatter hook / Bash tool subprocess の 3 階層で非対称に渡される${VAR} 事前置換の tier 別 allowlist:skill body は最も広い、skill frontmatter は ${CLAUDE_PLUGIN_ROOT} のみsensitive: true userConfig の挙動:plugin-level hook には平文で env 渡し、skill body は Claude Code 本体が block 文字列に置換して leak 防止PreToolUse:Skill は自然言語のみ、UserPromptExpansion は slash のみclaude_code.skill_activated event による 3 経路 (user-slash / claude-proactive / nested-skill) の追跡方法verifier/ # 22 probe skill を持つ検証用 plugin 本体
verifier-violator/ # validator block を意図的にトリガーする違反 plugin
docs/
team-report.md # 全 finding をまとめた本文(一番読むべき)
check-matrix.md # probe 別 verdict 表
cowork-runbook.md # Cowork 実機検証手順
methodology.md # 検証手法
scripts/ # log 解析 / assert / Cowork zip 生成
findings/ # 実行結果(per-version observations.md / report.md のみ git 管理)
MASTER-RUNBOOK.md # 22 probe を順に回すための手動手順
LICENSE
claude --print 等の自動化は採用しない。人間が claude 対話セッションを起動し、/verifier:NN-... を順に叩くscripts/assert.sh)のみ~/.claude/ を汚さないよう CLAUDE_CONFIG_DIR=$(pwd)/findings/claude-home/ で project-local に閉じ込めるfindings/v<version>/report.md に verdict 6+1 種(PASS / FAIL / DOC-ALIGNED / PARTIAL / UNKNOWN / CANARY-FAILED / MANUAL-OK)で残すcd /path/to/analyzing-claude-plugin
. scripts/_env.sh
./scripts/capture-cli-help.sh
# findings/cli-help/*.log と STEP0-SUMMARY.md を生成
. scripts/_env.sh
bash scripts/install-marketplace.sh
別 terminal で:
. scripts/_env.sh
claude
claude prompt 内で:
/verifier:00-canary
完了後に exit して:
./scripts/assert.sh 00
# PASS が返れば観測基盤 OK
MASTER-RUNBOOK.md を順に追って 22 probe を回す。各 probe で assert.sh NN を叩いて verdict を確認。
最後に ./scripts/assert-all.sh で findings/v<version>/report.md を生成。
./scripts/package-cowork.sh
で zip を作成、docs/cowork-runbook.md の手順で Claude Desktop にアップロード。
| トピック | 観測 | 関連 § |
|---|---|---|
${VAR} 事前置換 allowlist | tier ごとに別 allowlist で運用、skill frontmatter は ${CLAUDE_PLUGIN_ROOT} のみ | team-report §1.2 |
sensitive: true の skill body block | Claude Code 本体が [sensitive option 'KEY' not available in skill content] に置換して leak を防ぐ | team-report §1.4 |
| Cowork architecture | host-adjacent VM + virtio-fs。plugin-level hook は host 側、Bash tool は cloud VM 側 | team-report §2.0 |
| Cowork validator | CLI より厳しい:kebab-case 強制、description 内の ${...}/<...> 拒否、UserPromptExpansion event 拒否 | team-report §2.16 |
OTel skill_activated | invocation_trigger=user-slash/claude-proactive/nested-skill で 3 経路完全区別、Cowork でも emit | team-report Appendix B |
MIT License — LICENSE 参照。
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
確定申告を自動化する Claude Code Plugin。会社員+副業(事業所得・青色申告)の所得税・消費税確定申告をエンドツーエンドで支援。
An async task coordination protocol for autonomous AI agents. Agents discover, claim, execute, and hand off tasks through a shared board.
Notion provider for waggle. Enables team task management via Notion workspace.
SQLite provider for waggle. Local zero-config task management.
Turso provider for waggle. Remote SQLite for multi-agent coordination.
npx claudepluginhub kazukinagata/analyzing-claude-plugin --plugin verifier-violatorUltra-compressed communication mode. Cuts ~75% of tokens while keeping full technical accuracy by speaking like a caveman.
Frontend design skill for UI/UX implementation
Comprehensive UI/UX design plugin for mobile (iOS, Android, React Native) and web applications with design systems, accessibility, and modern patterns
Memory compression system for Claude Code - persist context across sessions
Marketing skills for AI agents — conversion optimization, copywriting, SEO, paid ads, ad creative, and growth
Standalone image generation plugin using Nano Banana MCP server. Generates and edits images, icons, diagrams, patterns, and visual assets via Gemini image models. No Gemini CLI dependency required.