cli-with-claude-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cli-with-claude-skill (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Yuheng's collection of Claude Code skills, distributed as a plugin marketplace.
In Claude Code:
/plugin marketplace add hoveychen/claude-skillsThen install any plugin from this hub:
/plugin install <plugin-name>@hoveychen-claude-skillsDiscipline rules + Go / Rust / Node / Python reference templates for building CLI tools that embed and install their own Claude Code skill.
Solves the recurring failure modes: hand-parsed args, missing install-claude-skill command, missing version: field, embedded SKILL.md drifting from CLI surface, and editing the installed copy instead of the source.
Via Claude Code plugin marketplace:
/plugin install cli-with-claude-skill@hoveychen-claude-skillsVia npm (alternative):
npx @hoveychen/cli-with-claude-skill install-claude-skillPick one route — both write to ~/.claude/skills/cli-with-claude-skill/. See plugins/cli-with-claude-skill/skills/cli-with-claude-skill/SKILL.md.
Playbook for producing Anthropic-style product launch / intro videos in Remotion (cream + coral + Fraunces serif + JetBrains Mono terminal aesthetic). Encodes both the visual language (color tokens, typography, grid) and the editing logic (trailing-word reveal, mouse-as-narrator, form morph, agent spinner→check, live diff typing, outro pacing).
Iron-rule discipline: confirm Player vs mp4 before scaffolding, validate which layer (style / editing / both) the user wants reproduced, dense 4fps reference frame extraction, and mandatory ffmpeg self-check on every render.
Via Claude Code plugin marketplace:
/plugin install anthropic-launch-video@hoveychen-claude-skillsVia npm (alternative):
npx @hoveychen/anthropic-launch-video install-claude-skillBoth routes write to ~/.claude/skills/anthropic-launch-video/. See plugins/anthropic-launch-video/skills/anthropic-launch-video/SKILL.md.
claude-skills/
├── .claude-plugin/
│ └── marketplace.json ← marketplace catalog
├── plugins/
│ ├── cli-with-claude-skill/
│ │ ├── .claude-plugin/plugin.json
│ │ └── skills/cli-with-claude-skill/
│ │ ├── SKILL.md ← canonical source
│ │ └── template/ ← per-language reference templates
│ └── anthropic-launch-video/
│ ├── .claude-plugin/plugin.json
│ └── skills/anthropic-launch-video/
│ └── SKILL.md ← canonical source
└── npm/ ← one self-installer npm package per skill
├── cli-with-claude-skill/ ← @hoveychen/cli-with-claude-skill
│ ├── package.json
│ ├── bin/cli.js
│ ├── scripts/sync-skill.js ← copies plugins/.../<skill>/* → skill/
│ └── skill/ ← synced copy of canonical source (do not edit)
└── anthropic-launch-video/ ← @hoveychen/anthropic-launch-video
├── package.json
├── bin/cli.js
├── scripts/sync-skill.js
└── skill/Source-of-truth: edit plugins/<skill>/skills/<skill>/. Run cd npm/<skill> && npm run sync-skill to refresh the npm-bundled copy. Each npm package's prepublishOnly script runs sync automatically before publish.
MIT.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.