xm-cloud

CMS Analyzers Marketplace

Claude Code plugins that analyze your CMS codebase and make you a better developer.

Stop guessing about best practices. Get automated analysis with specific issues, exact locations, and actionable fixes for Sitecore, Umbraco, and Optimizely projects.

---

The Problem

Working with enterprise CMS platforms is hard:

• Best practices are scattered across documentation, blog posts, and tribal knowledge
• Security vulnerabilities hide in configuration files and custom code
• Performance issues only surface in production when it's too late
• Onboarding is slow — new developers take weeks to understand project patterns
• Code reviews miss things that automated analysis would catch instantly

The Solution

This marketplace provides platform-specific analyzers that understand your CMS deeply:

/sitecore-classic:analyze

✓ Scanned 847 files across 12 projects
✓ Detected Sitecore 10.4 with Helix architecture

Issues Found: 14 (2 Critical, 6 Warning, 6 Info)

CRITICAL: [SEC-003] Hardcoded connection string detected
  Location: src/Foundation/Database/code/ConnectionFactory.cs:24
  Fix: Move to environment variable or Azure Key Vault

CRITICAL: [ARCH-001] Cross-Feature dependency violates Helix
  Location: src/Feature/Navigation/code/Feature.Navigation.csproj:31
  Fix: Extract SharedModels to Foundation layer

Every issue includes severity, exact location, and how to fix it.

---

Quick Start

1. Add the Marketplace

/plugin marketplace add https://github.com/twofoldtech-dakota/claude-marketplace.git

2. Install Your CMS Analyzer

Your CMS	Install Command
Sitecore 10.x	/plugin install sitecore-classic@cms-analyzers-marketplace
Sitecore XM Cloud	/plugin install xm-cloud@cms-analyzers-marketplace
Umbraco 14-16	/plugin install umbraco@cms-analyzers-marketplace
Optimizely CMS	/plugin install optimizely@cms-analyzers-marketplace
Optimizely Experimentation	/plugin install optimizely-exp@cms-analyzers-marketplace

3. Run Analysis

/sitecore-classic:analyze   # Full analysis with report
/xm-cloud:analyze           # XM Cloud analysis
/umbraco:analyze            # Umbraco analysis
/optimizely:analyze         # Optimizely CMS analysis
/optimizely-exp:analyze     # Experimentation analysis

That's it. You'll get a detailed markdown report with all issues, scores, and recommendations.

---

What Each Analyzer Checks

Sitecore 10.x (Classic)

For on-premise and managed cloud Sitecore implementations:

Category	What's Analyzed
Architecture	Helix compliance, layer dependencies, solution structure
Serialization	SCS/Unicorn conflicts, overlapping includes, field value queries
Security	Config credentials, CORS settings, admin paths, XSS patterns
Performance	HTML cache settings, Solr optimization, Sitecore.Query usage
Code Quality	Glass Mapper patterns, DI implementation, controller complexity
Dependencies	NuGet compatibility with Sitecore version

Sitecore XM Cloud

For headless Sitecore with Next.js and JSS:

Category	What's Analyzed
Architecture	Component organization, layout patterns, app structure
GraphQL	Query efficiency, N+1 detection, fragment usage
Security	API key exposure, environment variables, introspection risks
Performance	SSR vs SSG decisions, bundle size, image optimization
TypeScript	Type safety, JSS patterns, React best practices
Dependencies	npm package compatibility, JSS version alignment

Umbraco 14-16

For modern Umbraco with Lit backoffice and Content Delivery API:

Category	What's Analyzed
Architecture	Composer patterns, service registration, project structure
Backoffice	Lit components, property editors, TypeScript quality
API	Content Delivery API setup, Management API, custom endpoints
Security	API authentication, credentials, backoffice access
Performance	HybridCache (v15+), content access patterns, Examine indexes
Code Quality	Controllers, notification handlers, service patterns

Optimizely CMS (Content Cloud)

For Optimizely CMS 12.x and 13.x implementations:

Category	What's Analyzed
Content Modeling	Content types, GUID requirements, block/page inheritance
Architecture	Content area restrictions, initialization modules
Security	Content Delivery API exposure, configuration secrets
Performance	Caching strategies, CDN configuration, N+1 queries
Code Quality	Service Locator anti-patterns, DI best practices
A/B Testing	Experimentation module integration

Optimizely Experimentation