Skip to main content

claude-code-reference

Provides a comprehensive reference for building and troubleshooting Claude Code extensions, including skills, commands, and hooks.

Install this skill

or
54/100

Security score

The claude-code-reference skill was audited on Feb 9, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 118

Access to hidden dotfiles in home directory

SourceSKILL.md
1182. Personal: `~/.claude/skills/`
low line 134

Access to hidden dotfiles in home directory

SourceSKILL.md
134~/.claude/commands/command-name.md # Personal command
low line 166

Access to hidden dotfiles in home directory

SourceSKILL.md
166// ~/.claude/settings.json (user)
medium line 275

Access to hidden dotfiles in home directory

SourceSKILL.md
2752. Verify SKILL.md path: `~/.claude/skills/name/SKILL.md` or `.claude/skills/name/SKILL.md`
medium line 387

Access to hidden dotfiles in home directory

SourceSKILL.md
387| `creating-hooks` | All 10 hook events with examples | `cp -r skills/creating-hooks ~/.claude/skills/` |
medium line 388

Access to hidden dotfiles in home directory

SourceSKILL.md
388| `creating-mcp-servers` | MCP server creation and integration | `cp -r skills/creating-mcp-servers ~/.claude/skills/` |
medium line 389

Access to hidden dotfiles in home directory

SourceSKILL.md
389| `transcript-intelligence` | Search past sessions | `cp -r skills/transcript-intelligence ~/.claude/skills/` |
medium line 390

Access to hidden dotfiles in home directory

SourceSKILL.md
390| `writing-skills` | Best practices for skill creation | `cp -r skills/writing-skills ~/.claude/skills/` |
low line 395

Access to hidden dotfiles in home directory

SourceSKILL.md
395ln -s node_modules/claude-code-sdk/skills/creating-hooks ~/.claude/skills/
low line 396

Access to hidden dotfiles in home directory

SourceSKILL.md
396ln -s node_modules/claude-code-sdk/skills/creating-mcp-servers ~/.claude/skills/
low line 397

Access to hidden dotfiles in home directory

SourceSKILL.md
397ln -s node_modules/claude-code-sdk/skills/transcript-intelligence ~/.claude/skills/
low line 398

Access to hidden dotfiles in home directory

SourceSKILL.md
398ln -s node_modules/claude-code-sdk/skills/writing-skills ~/.claude/skills/
low line 404

Access to hidden dotfiles in home directory

SourceSKILL.md
404cp -r /tmp/sdk/skills/* ~/.claude/skills/
low line 218

External URL reference

SourceSKILL.md
218claude mcp add --transport http name https://url
low line 221

External URL reference

SourceSKILL.md
221claude mcp add --transport sse name https://url
low line 351

External URL reference

SourceSKILL.md
351| Git URL | `{"source": "url", "url": "https://..."}` |
low line 379

External URL reference

SourceSKILL.md
379See: https://code.claude.com/docs/en/plugin-marketplaces
low line 411

External URL reference

SourceSKILL.md
411- Skills: https://code.claude.com/docs/en/skills
low line 412

External URL reference

SourceSKILL.md
412- Slash Commands: https://code.claude.com/docs/en/slash-commands
low line 413

External URL reference

SourceSKILL.md
413- Hooks: https://code.claude.com/docs/en/hooks
low line 414

External URL reference

SourceSKILL.md
414- MCP: https://code.claude.com/docs/en/mcp
low line 415

External URL reference

SourceSKILL.md
415- Plugin Marketplaces: https://code.claude.com/docs/en/plugin-marketplaces
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →