command-development
Facilitates the creation and management of slash commands for Claude Code, enhancing interactive workflows and command organization.
Install this skill
Security score
The command-development skill was audited on Feb 12, 2026 and we found 14 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 531 | Plugin commands have access to `${CLAUDE_PLUGIN_ROOT}`, an environment variable that resolves to the plugin's absolute path. |
Template literal with variable interpolation in command context
| 547 | Run analysis: !`node ${CLAUDE_PLUGIN_ROOT}/scripts/analyze.js $1` |
Template literal with variable interpolation in command context
| 556 | !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/script.sh` |
Template literal with variable interpolation in command context
| 604 | ```markdown |
Template literal with variable interpolation in command context
| 619 | ```markdown |
Template literal with variable interpolation in command context
| 638 | Build: !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/build.sh` |
Template literal with variable interpolation in command context
| 639 | Test: !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/test.sh` |
Template literal with variable interpolation in command context
| 640 | Package: !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/package.sh` |
Template literal with variable interpolation in command context
| 655 | ```markdown |
Template literal with variable interpolation in command context
| 731 | !`node ${CLAUDE_PLUGIN_ROOT}/scripts/lint.js $1` |
Template literal with variable interpolation in command context
| 799 | - Script: !`test -x ${CLAUDE_PLUGIN_ROOT}/bin/analyze && echo "✓" || echo "✗"` |
Template literal with variable interpolation in command context
| 800 | - Config: !`test -f ${CLAUDE_PLUGIN_ROOT}/config.json && echo "✓" || echo "✗"` |
Template literal with variable interpolation in command context
| 814 | Execute build: !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/build.sh 2>&1 || echo "BUILD_FAILED"` |
Access to hidden dotfiles in home directory
| 63 | - Location: `~/.claude/commands/` |