claude-code-plugins

The plugins define instructions for an AI agent to interact with external CLI tools (`sentry-cli`, `cased-piglet`, `cased-kit`). The security score is high for the plugin definitions themselves as they primarily consist of descriptive markdown. However, safe operation critically depends on: 1. The integrity and security of the underlying CLI tools. 2. The AI agent's robust sanitization and validation of user inputs before constructing and executing shell commands (e.g., ensuring issue IDs are strictly numeric, or preventing command injection in flag values). 3. The secure configuration and handling of sensitive environment variables (`SENTRY_AUTH_TOKEN`, `POSTHOG_API_KEY`) within the Claude Code environment. No hardcoded secrets or direct 'eval' calls are present within the provided plugin definitions.