open/claude-design
1
0
Fork 0
Code Issues Releases Activity

Compare commits

base: open:v0.1.0
Branches Tags
open:main
open:v0.1.0
...
compare: open:main
Branches Tags
open:main
open:v0.1.0

2 commits
v0.1.0 ... main

Author SHA1 Message Date
Kjell Tore Guttormsen
5c75bd5de7 docs: add full-depth plugin review (2026-06-20) 
Grade A — non-agentic; one v0.1.0 maturity nit (no permissions block). Part of the marketplace-wide review (config-audit v5.4.0 + llm-security + structure + version). Read-only; this file is the only artifact.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ter3E2JSi1Khgmuf2kady8
 2026-06-20 09:14:07 +02:00
Kjell Tore Guttormsen
a5d672aa86 chore(gitignore): add session/local-state baseline (polyrepo split) 2026-06-18 10:21:11 +02:00
2 changed files with 41 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
.gitignore vendored Normal file
View file

@ -0,0 +1,12 @@
# --- session/local state (gitignored per ~/.claude polyrepo-konvensjon) ---
STATE.md
REMEMBER.md
ROADMAP.md
TODO.md
NEXT-SESSION-PROMPT*.local.md
*.local.md
*.local.json
*.local.sh
.DS_Store
.claude/

29
docs/review-2026-06-20.md Normal file
View file

@ -0,0 +1,29 @@
# Plugin review — claude-design v0.1.0 (2026-06-20)
> Full-depth review (part of the marketplace-wide sweep; pilot was okr). Tooling: config-audit
> v5.4.0 scanners (from source) + llm-security posture assessor + structure/version checks.
> Read-only; this file is the only artifact.
## Verdict
**Clean, grade A — deliberately non-agentic.** Emits a copy-paste design prompt for a human to
paste into claude.ai/design; never executes the prompt, drives a browser, or touches the
filesystem. One v0.1.0 maturity nit. No blockers.
## Results by dimension
| Dimension | Result |
|-----------|--------|
| config-audit posture | **A** (Feature Coverage F 26, Token-Efficiency B 80 — expected for an early single-skill plugin) |
| config-audit plugin-health | **0 findings** |
| llm-security posture | **A** — only F-1 below. Strongest axis is Excessive Agency: `SKILL.md:151-156` explicitly disclaims code-gen, browser automation, and file writes. Unicode sweep clean; ~9 community-blog URLs are inert citations (never fetch targets). Scope-fence against Anthropic's official design plugin is test-enforced. |
| structure / hygiene | README ✓, CHANGELOG ✓, CLAUDE.md ✓, LICENSE ✓ |
| version consistency | **OK** (gate) |
## Findings
| ID | Severity | Location | Finding |
|----|----------|----------|---------|
| F-1 | Low (maturity) | `plugin.json:1-18` | No explicit `permissions` block. Not exploitable now (ships no hooks/MCP/commands; the skill invokes no tools), but new components added post-v0.1.0 would inherit session permissions with no deny-by-default baseline. **Recommend:** a minimal explicit `permissions` block before GA. |
Citation discipline and the command-name scope-fence are test-gated strengths, not findings.