Is compound-writing safe to install?

SaferSkills independently audited compound-writing (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md5.7 KB · Markdown

Claude Code Toolkit

Extend Claude Code with specialized workflows, automatic formatting, and better defaults.

Skills give Claude domain expertise—brainstorming methods, documentation generation, book writing pipelines. Hooks automate repetitive tasks—format code after edits, summarize changes at session end. Templates configure how Claude works with you.

Works with both Claude Code (CLI) and Claude.ai (web/mobile/desktop).

Quick Start

# Clone the toolkit
git clone https://github.com/robertguss/claude-code-toolkit.git

# Use a skill in Claude Code
# Add to your project's CLAUDE.md:
echo "When brainstorming, read /path/to/claude-code-toolkit/skills/brainstorm/SKILL.md" >> CLAUDE.md

# Or package for Claude.ai
python build.py brainstorm
# Upload dist/brainstorm.skill to Claude.ai → Settings → Skills

What's Included

Skills

Packaged workflows that Claude follows when invoked. Use them with /skillname or reference in CLAUDE.md.

Skill	Description
brainstorm	Multi-session ideation partner with method catalog
code-documenter	Intelligent documentation generation with health tracking
handoff	Session continuity documents for picking up where you left off

Book & Writing:

ebook-factory — Focused ebook creation pipeline
non-fiction-book-factory — Full pipeline

from idea to chapter architecture

writing — Voice capture and ghost writing

Hooks

Shell scripts that run automatically at specific Claude Code events.

Hook	Event	Description
auto-format	`PostToolUse`	Formats files after edits (ruff, goimports, prettier)
change-summary	`Stop`	TypeScript checking + session change summary
compaction	`PreCompact`	Injects preservation priorities for better context compaction

Templates

Document templates for configuring how Claude works with you.

Template	Purpose
HUMAN.md	Relationship document — helps Claude remember who you are
CLAUDE.md	Global instructions for all projects
compaction-strategy.md	What to preserve during context compaction

Quick Start

Using Skills

Claude Code (CLI):

Reference in your project or global CLAUDE.md:

# CLAUDE.md

When brainstorming, read and follow
/path/to/claude-code-toolkit/skills/brainstorm/SKILL.md

Claude.ai (Web/Mobile/Desktop):

python build.py brainstorm
# Upload dist/brainstorm.skill to Claude.ai → Settings → Skills

Installing Hooks

Copy the hook script:

   cp hooks/auto-format/auto-format.sh ~/.claude/hooks/
   chmod +x ~/.claude/hooks/auto-format.sh

Add to ~/.claude/settings.json:

   {
     "hooks": {
       "PostToolUse": [
         {
           "matcher": "Edit|MultiEdit|Write",
           "hooks": [
             {
               "type": "command",
               "command": "$HOME/.claude/hooks/auto-format.sh"
             }
           ]
         }
       ]
     }
   }

See each hook's README for specific configuration.

Using Templates

# Copy and customize
cp templates/HUMAN.md ~/.claude/YOURNAME.md
cp templates/CLAUDE.md ~/.claude/CLAUDE.md

# Edit to match your preferences

Directory Structure

claude-code-toolkit/
├── skills/                    # Packaged workflows
│   ├── brainstorm/
│   ├── code-documenter/
│   ├── handoff/
│   └── ...
├── hooks/                     # Automatic event handlers
│   ├── auto-format/
│   ├── change-summary/
│   └── compaction/
├── templates/                 # Configuration templates
│   ├── HUMAN.md
│   ├── CLAUDE.md
│   └── compaction-strategy.md
├── docs/                      # Documentation site source
└── build.py                   # Skill packager for Claude.ai

Documentation

Development

This project uses uv for dependency management and just as a command runner.

# Install dependencies
just install

# Serve docs locally at http://localhost:8000
just docs-serve

# Deploy docs to GitHub Pages
just docs-deploy

# Package a skill
just package brainstorm

# See all commands
just

Contributing

See CONTRIBUTING.md for guidelines on submitting skills, hooks, or improvements.

License

MIT License. See LICENSE.md for details.

compound-writing— plugin

Is compound-writing safe to install?

Claude Code Toolkit

Quick Start

What's Included

Skills

Hooks

Templates

Quick Start

Using Skills

Installing Hooks

Using Templates

Directory Structure

Documentation

Development

Contributing

License

Audit the pieces. Scan the whole. Decide.