Command Development
Facilitates the creation and management of slash commands for Claude Code, enhancing user interaction and workflow efficiency.
Install this skill
Security score
The Command Development skill was audited on Mar 1, 2026 and we found 14 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 531 | Plugin commands have access to `${CLAUDE_PLUGIN_ROOT}`, an environment variable that resolves to the plugin's absolute path. |
Template literal with variable interpolation in command context
| 547 | Run analysis: !`node ${CLAUDE_PLUGIN_ROOT}/scripts/analyze.js $1` |
Template literal with variable interpolation in command context
| 556 | !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/script.sh` |
Template literal with variable interpolation in command context
| 604 | ```markdown |
Template literal with variable interpolation in command context
| 619 | ```markdown |
Template literal with variable interpolation in command context
| 638 | Build: !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/build.sh` |
Template literal with variable interpolation in command context
| 639 | Test: !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/test.sh` |
Template literal with variable interpolation in command context
| 640 | Package: !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/package.sh` |
Template literal with variable interpolation in command context
| 655 | ```markdown |
Template literal with variable interpolation in command context
| 731 | !`node ${CLAUDE_PLUGIN_ROOT}/scripts/lint.js $1` |
Template literal with variable interpolation in command context
| 799 | - Script: !`test -x ${CLAUDE_PLUGIN_ROOT}/bin/analyze && echo "✓" || echo "✗"` |
Template literal with variable interpolation in command context
| 800 | - Config: !`test -f ${CLAUDE_PLUGIN_ROOT}/config.json && echo "✓" || echo "✗"` |
Template literal with variable interpolation in command context
| 814 | Execute build: !`bash ${CLAUDE_PLUGIN_ROOT}/scripts/build.sh 2>&1 || echo "BUILD_FAILED"` |
Access to hidden dotfiles in home directory
| 63 | - Location: `~/.claude/commands/` |
Install this skill with one command
/learn @wenjunduan/command-development