list
Lists various Claude Code components, including skills, environment variables, and settings for efficient management.
Install this skill
Security score
The list skill was audited on May 12, 2026 and we found 22 security issues across 3 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 344 | ```bash |
Piping content to bash shell
| 729 | | `execution` | Bash, Task, TaskOutput, KillShell | |
Access to hidden dotfiles in home directory
| 38 | find ~/.claude/plugins -name "list_skills.py" -path "*claude-ecosystem*" 2>/dev/null | head -1 |
Access to hidden dotfiles in home directory
| 59 | - **Personal skills**: `~/.claude/skills/*/SKILL.md` |
Access to hidden dotfiles in home directory
| 61 | - **Plugin skills**: `~/.claude/plugins/marketplaces/*/*/skills/*/SKILL.md` |
Access to hidden dotfiles in home directory
| 68 | ## Personal Skills (~/.claude/skills/) |
Access to hidden dotfiles in home directory
| 122 | | Enterprise | `~/.claude/enterprise/settings.json` | IT-managed defaults | |
Access to hidden dotfiles in home directory
| 123 | | User/Global | `~/.claude/settings.json` | User preferences | |
Access to hidden dotfiles in home directory
| 148 | **Enterprise** (~/.claude/enterprise/settings.json) |
Access to hidden dotfiles in home directory
| 151 | **User** (~/.claude/settings.json) |
Access to hidden dotfiles in home directory
| 416 | | 1 (Highest) | Managed | `~/.claude/managed/settings.json` | IT-enforced (cannot be overridden) | |
Access to hidden dotfiles in home directory
| 420 | | 5 (Lowest) | User | `~/.claude/settings.json` | User preferences | |
Access to hidden dotfiles in home directory
| 429 | - `~/.claude/managed/settings.json` (managed) |
Access to hidden dotfiles in home directory
| 430 | - `~/.claude/settings.json` (user) |
Access to hidden dotfiles in home directory
| 448 | 5. User settings (~/.claude/settings.json) |
Access to hidden dotfiles in home directory
| 456 | | plansDirectory | ~/.claude/plans | default | - | |
Access to hidden dotfiles in home directory
| 550 | | plansDirectory | string | ~/.claude/plans | Plan file storage | v2.1.9 | |
External URL reference
| 205 | First WebFetch https://code.claude.com/docs/en/claude_code_docs_map.md to find |
External URL reference
| 285 | - Official: https://code.claude.com/docs/en/settings |
External URL reference
| 532 | Reference the schema at: `https://json.schemastore.org/claude-code-settings.json` |
External URL reference
| 613 | - Schema: https://json.schemastore.org/claude-code-settings.json |
External URL reference
| 614 | - Docs: https://code.claude.com/docs/en/settings |