reviewing-claude-config
Audited by Runlayer on Feb 24, 2026
Malicious tool definition detected
Tool: README.md [1/2] Description: # reviewing-claude-config Comprehensive skill for reviewing Claude Code configuration files with security-first approach.
Tool: README.md [2/2] Description: fix) - **IMPORTANT** - Significant quality/maintainability impact (should fix) - **SUGGESTED** - Nice-to-have improvements (could fix) - **OPTIONAL** - Personal preferences, alternatives (consider) ### Best Practices **Feedback Quality:** - Provide specific fixes with code examples, not just problem identification - Explain rationale (the "why"), not just the "what" - Include references to documentation when applicable - Use precise file:line references **Tone:
Malicious tool definition detected
Tool: SKILL.md Description: --- name: reviewing-claude-config description: Reviews Claude configuration files for security, structure, and prompt engineering quality. Use when reviewing changes to CLAUDE.md files (project-level or .claude/), skills (SKILL.md), agents, prompts, commands, or settings. Validates YAML frontmatter, progressive disclosure patterns, token efficiency, and security best practices.
Malicious tool definition detected
Tool: checklists/agents.md [1/2] Description: # Agents Review Checklist Review checklist for changes to Claude Code agent files (`.claude/agents/*.md` and `plugins/*/agents/*.md`). --- ## Multi-Pass Review Strategy ### First Pass: Structure and YAML Frontmatter <thinking> Critical structural elements for agents: 1. Is YAML frontmatter present and valid? 2.
Tool: checklists/agents.md [2/2] Description: ## Examples [Include 2-3 examples of good review comments] ``` ✅ **GOOD - Includes structured thinking:** ```markdown Before analyzing each file, use structured thinking: <thinking> 1. What is the file's purpose?
Malicious tool definition detected
Tool: checklists/claude-md.md Description: # CLAUDE.md Review Checklist Review checklist for changes to CLAUDE.md files at any level (project root, `.claude/` directory, or subdirectories). **Valid CLAUDE.md Locations:** - Project root: `/CLAUDE.md` - Global project instructions - Claude directory: `/.claude/CLAUDE.md` - Claude Code-specific instructions - Subdirectories: `/path/to/subdirectory/CLAUDE.md` - Scoped instructions for specific modules/components All locations are valid and serve dif
Malicious tool definition detected
Tool: checklists/prompts.md Description: # Prompts and Commands Review Checklist Review checklist for changes to `.claude/prompts/*.md` and `.claude/commands/*.md` files. --- ## Multi-Pass Review Strategy ### First Pass: Purpose and Activation <thinking> Purpose clarity: 1. Is it clear what this prompt/command does? 2.
Malicious tool definition detected
Tool: checklists/settings.md Description: # Settings Review Checklist Review checklist for changes to `.claude/settings.json` and `.claude/settings.local.json`. --- ## CRITICAL SECURITY CHECK <thinking> CRITICAL security considerations: 1. Is settings.local.json committed to git? 2.
Malicious tool definition detected
Tool: checklists/skills.md [1/2] Description: # Skills Review Checklist Review checklist for changes to Claude Code skill files (`SKILL.md` and supporting files). --- ## Multi-Pass Review Strategy ### First Pass: Structure and Security <thinking> Critical structural elements: 1.
Tool: checklists/skills.md [2/2]
Malicious tool definition detected
Tool: examples/example-agent-review.md [1/2] Description: # Example Agent Configuration Reviews Examples of agent configuration reviews showing common issues and best practices. --- ## Example 1: Security Issues and Over-Privileged Access **Context:** Reviewing a new documentation-writer agent with security concerns. ### Agent Configuration **File:** `.claude/agents/documentation-writer.md` ```yaml --- name: documentation-writer description: Helps write documentation.
Tool: examples/example-agent-review.md [2/2] Description: Assessment:** APPROVE This is an exemplary agent configuration that demonstrates: - Security best practices (minimal tool access) - Clear activation triggers for automatic delegation - Comprehensive system prompt with structured thinking - Concrete examples demonstrating expected output - Appropriate model selection - Focused single responsibility No changes required. Consider this a reference implementation for security analysis agents.
Malicious tool definition detected
Tool: examples/example-claude-md-review.md Description: # Example CLAUDE.md Review **Context:** Reviewing CLAUDE.md that duplicates architecture documentation.
Malicious tool definition detected
Tool: examples/example-prompts-review.md Description: # Example Prompts Review **Context:** Reviewing a new slash command prompt. ### Review Comments **`.claude/commands/review-feature.md:1`** - IMPORTANT: Missing usage information Add usage format and example after description: ```markdown # review-feature Reviews a feature implementation for architectural compliance and code quality.
Malicious tool definition detected
Tool: examples/example-settings-review.md Description: # Example Settings Review **Context:** Reviewing settings.json with multiple security concerns.
Malicious tool definition detected
Tool: examples/example-skill-review.md Description: # Example Skill Review **Context:** Reviewing a new skill with structural and quality issues.
Malicious tool definition detected
Tool: reference/claude-code-requirements.md [1/2] Description: # Claude Code Requirements Claude Code-specific conventions, formats, and requirements that differ from general best practices.
Tool: reference/claude-code-requirements.md [2/2]
Malicious tool definition detected
Tool: reference/priority-framework.md Description: # Priority Framework for Claude Configuration Reviews Classification system for prioritizing issues found in Claude configuration files. --- ## Priority Levels ### CRITICAL **Definition:** Issues that prevent functionality, expose security vulnerabilities, or cause immediate harm.
Malicious tool definition detected
Tool: reference/security-patterns.md [1/2] Description: # Security Patterns for Claude Configuration Security checks, detection commands, and remediation patterns for Claude configuration files.
Tool: reference/security-patterns.md [2/2]
Malicious tool definition detected
Tool: scripts/security-scan.sh [1/2]
Tool: scripts/security-scan.sh [2/2]