open/config-audit
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity Actions
config-audit/tests/fixtures
History
Kjell Tore Guttormsen 76d5eda101 feat(plh): validate plugin.json skills:-array entries (CA-PLH-016) 
PLH now validates each entry of a plugin.json `skills` field (string|array):
every entry must resolve to an existing directory inside the plugin root.
One finding per bad entry (medium, plugin-hygiene), problem ∈ {non-string,
escapes-root, not-found, not-a-directory}. Mirrors `claude plugin validate`.
String|array normalized so a non-string top-level value is caught too.

Verifiseringsplikt: the plan's "CC suggests the parent directory" error text
is NOT in the primary docs — dropped. Only the four primary-source-verified
conditions are asserted (escape backed by the path-traversal rule).

Tests +3 (941->944). Scanner count unchanged (13). --json/--raw byte-stable.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ter3E2JSi1Khgmuf2kady8
2026-06-19 21:56:57 +02:00
..
additional-dirs-many/.claude feat(config-audit): flag additionalDirectories > 2 (v5 M6) [skip-docs] 2026-05-01 06:50:24 +02:00
additional-dirs-ok/.claude feat(config-audit): flag additionalDirectories > 2 (v5 M6) [skip-docs] 2026-05-01 06:50:24 +02:00
baseline-all-a fix(mcp-config-validator): remove invented trust field (verify-first) 2026-06-18 14:22:56 +02:00
broken-plugin feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command 2026-04-08 08:58:35 +02:00
broken-project feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command 2026-04-08 08:58:35 +02:00
collision-plugins/fake-home/.claude feat(config-audit): cross-plugin collision scanner COL (v5 N6) [skip-docs] 2026-05-01 07:46:15 +02:00
conflict-project fix(config-audit): complete conflict-project fixture for CNF cross-scope tests 2026-04-19 22:29:46 +02:00
denied-tools-in-schema/.claude feat(config-audit): disabled-in-schema scanner DIS (v5 N4) [skip-docs] 2026-05-01 07:39:58 +02:00
deny-all-glob/.claude feat(dis): flag ineffective allow wildcards; treat Tool(*) as deny-all 2026-06-19 06:31:18 +02:00
duplicate-command-name fix(plh): downgrade cross-plugin command-name overlap to low ambiguity 2026-06-19 15:30:35 +02:00
duplicate-plugin-name fix(plh): downgrade cross-plugin command-name overlap to low ambiguity 2026-06-19 15:30:35 +02:00
fixable-project feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command 2026-04-08 08:58:35 +02:00
forbidden-param-permissions/.claude feat(dis): flag forbidden-param permission rules CC silently ignores 2026-06-19 14:04:25 +02:00
healthy-project fix(mcp-config-validator): remove invented trust field (verify-first) 2026-06-18 14:22:56 +02:00
hooks-quiet/hooks feat(config-audit): HKV flags verbose hook output (v5 M5) [skip-docs] 2026-05-01 07:05:45 +02:00
hooks-verbose/hooks feat(config-audit): HKV flags verbose hook output (v5 M5) [skip-docs] 2026-05-01 07:05:45 +02:00
ineffective-allow-globs/.claude feat(dis): flag ineffective allow wildcards; treat Tool(*) as deny-all 2026-06-19 06:31:18 +02:00
large-cascade feat(config-audit): TOK flags CLAUDE.md cascade > 10k tokens (v5 M4) [skip-docs] 2026-05-01 06:53:12 +02:00
large-claude-chars feat(cml): context-window-scaled CLAUDE.md char budget (mirrors CC 40.0k warning) 2026-06-19 13:34:40 +02:00
marketplace-large fix(mcp-config-validator): remove invented trust field (verify-first) 2026-06-18 14:22:56 +02:00
marketplace-medium fix(mcp-config-validator): remove invented trust field (verify-first) 2026-06-18 14:22:56 +02:00
marketplace-small test(config-audit): add marketplace-small/medium/large scanner fixtures 2026-04-19 22:36:33 +02:00
mcp-budget feat(config-audit): CA-TOK-005 MCP tool-schema budget (v5 N1) [skip-docs] 2026-05-01 07:29:57 +02:00
mcp-tool-heavy chore(config-audit): allow fake node_modules in tests/fixtures (v5 M1) [skip-docs] 2026-05-01 07:02:54 +02:00
minimal-project feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command 2026-04-08 08:58:35 +02:00
opus-47 test(config-audit): add Opus 4.7 pattern fixtures (cache, redundant, imports, sonnet-era) 2026-04-19 22:34:41 +02:00
param-conflict-project/.claude fix(permissions): param-aware DIS dead-allow + CNF conflict matching 2026-06-18 13:06:20 +02:00
param-qualified-permissions/.claude fix(permissions): param-aware DIS dead-allow + CNF conflict matching 2026-06-18 13:06:20 +02:00
plugin-shadow-folder feat(plh): flag plugin.json paths that shadow default folders (CA-PLH-015) 2026-06-19 21:46:22 +02:00
plugin-skills-array feat(plh): validate plugin.json skills:-array entries (CA-PLH-016) 2026-06-19 21:56:57 +02:00
readme-desynced feat(config-audit): self-audit --check-readme flag (v5 F6) [skip-docs] 2026-05-01 07:09:26 +02:00
skill-bloated/skills/bloated feat(config-audit): TOK flags skill description > 500 chars (v5 M2) [skip-docs] 2026-05-01 06:58:42 +02:00
skill-tight/skills/tight feat(config-audit): TOK flags skill description > 500 chars (v5 M2) [skip-docs] 2026-05-01 06:58:42 +02:00
small-cascade feat(config-audit): TOK flags CLAUDE.md cascade > 10k tokens (v5 M4) [skip-docs] 2026-05-01 06:53:12 +02:00
test-plugin feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command 2026-04-08 08:58:35 +02:00
tok-active-config feat(config-audit): TOK consumes readActiveConfig (v5 F1) 2026-05-01 06:27:34 +02:00
volatile-mid-section feat(config-audit): cache-prefix stability scanner CPS (v5 N3) [skip-docs] 2026-05-01 07:37:54 +02:00