claude-skill-lord 2.0.7 → 2.1.1

package/.claude-plugin/marketplace.json

@@ -9,8 +9,8 @@
     {
       "name": "claude-skill-lord",
       "source": "./",
-      "description": "Curated Claude Code plugin — 22 agents, 61 skills, 40+ commands with intelligent skill routing and UI/UX design intelligence",
-      "version": "1.5.1",
+      "description": "Curated Claude Code plugin — 43 agents, 161 skills, 114 commands, 11 language rules",
+      "version": "2.1.0",
       "category": "workflow",
       "tags": ["agents", "skills", "commands", "hooks", "skill-routing", "quality-gate", "tdd", "code-review"],
       "strict": false

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "claude-skill-lord",
-  "version": "2.0.6",
-  "description": "Curated Claude Code plugin — 43 agents, 170 skills, 114 commands, 11 language rules",
+  "version": "2.1.0",
+  "description": "Curated Claude Code plugin — 43 agents, 161 skills, 114 commands, 11 language rules",
   "author": {
     "name": "Dong Anh",
     "email": "donganhvu20@gmail.com"

package/.releaserc.json

@@ -97,8 +97,8 @@
             "label": "Changelog"
           },
           {
-            "path": "dist/claudekit-engineer.zip",
-            "label": "ClaudeKit Engineer Package"
+            "path": "dist/claude-skill-lord.zip",
+            "label": "Claude Skill Lord Package"
           }
         ]
       }

package/CLAUDE.md

@@ -1,6 +1,6 @@
 # SkillLord — Claude Code Plugin
 
-Curated best-of-both plugin merging ClaudeKit Engineer (base) + Everything Claude Code (cherry-picked) with intelligent skill routing.
+Curated Claude Code plugin with intelligent skill routing, structured agents, and production workflows.
 
 ## Workflows
 
@@ -11,7 +11,7 @@ Curated best-of-both plugin merging ClaudeKit Engineer (base) + Everything Claud
 
 **IMPORTANT:** Follow development rules strictly. Research & Reuse is mandatory FIRST step before implementation.
 
-## Agents (44)
+## Agents (43)
 
 ### Core Agents
 | Agent | Role |
@@ -72,7 +72,7 @@ Curated best-of-both plugin merging ClaudeKit Engineer (base) + Everything Claud
 
 All skills live in `./skills/<name>/SKILL.md` — flat structure, no tiers.
 
-## Commands (115)
+## Commands (114)
 
 ### Core Commands
 | Command | Description |
@@ -85,7 +85,7 @@ All skills live in `./skills/<name>/SKILL.md` — flat structure, no tiers.
 | /tdd | Test-driven development workflow |
 | /debug | Deep issue analysis |
 | /code-review | Code review |
-| /route | Get skill recommendations for your task |
+| /model-route | Get skill recommendations for your task |
 | /audit | Run quality checks |
 | /scout | Search codebase (variants: ext) |
 | /bootstrap | Initialize new projects (variants: auto, auto/fast) |
@@ -98,7 +98,7 @@ All skills live in `./skills/<name>/SKILL.md` — flat structure, no tiers.
 | /verify | Verify implementation |
 | /quality-gate | Run quality validation |
 
-### Multi-Agent Commands (from ECC)
+### Multi-Agent Commands
 | Command | Description |
 |---------|-------------|
 | /multi-plan | Multi-agent planning |
@@ -108,7 +108,7 @@ All skills live in `./skills/<name>/SKILL.md` — flat structure, no tiers.
 | /multi-execute | Multi-agent execution |
 | /orchestrate | Agent orchestration |
 
-### Session Management (from ECC)
+### Session Management
 | Command | Description |
 |---------|-------------|
 | /save-session | Save current session |
@@ -116,7 +116,7 @@ All skills live in `./skills/<name>/SKILL.md` — flat structure, no tiers.
 | /sessions | List sessions |
 | /checkpoint | Create checkpoint |
 
-### Language-Specific Commands (from ECC)
+### Language-Specific Commands
 | Command | Description |
 |---------|-------------|
 | /cpp-build, /cpp-review, /cpp-test | C++ workflows |

package/LICENSE

@@ -2,18 +2,6 @@ MIT License
 
 Copyright (c) 2026 SkillLord Contributors
 
-This project incorporates code from:
-
-1. Everything Claude Code (ECC)
-   - Original Author: Affaan Mustafa
-   - License: MIT (2026)
-   - Repository: https://github.com/affaan-m/everything-claude-code
-
-2. ClaudeKit Engineer
-   - Original Author: Duy Nguyen
-   - License: MIT (2024)
-   - Repository: https://github.com/claudekit/claudekit-engineer
-
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights

package/README.md

@@ -17,7 +17,7 @@
 - **Multi-language support** — 11 language-specific rule sets (TypeScript, Python, Go, Rust, Java, Kotlin, C++, C#, PHP, Perl, Swift) + common rules
 - **Language-specific agents** — dedicated reviewers and build resolvers for 8 languages
 - **Design intelligence built-in** — 67 UI styles, 161 color palettes, reasoning engine for production-grade design decisions
-- **Battle-tested foundations** — curated from [ClaudeKit Engineer](https://github.com/claudekit/claudekit-engineer) (base) + [Everything Claude Code](https://github.com/affaan-m/everything-claude-code) (cherry-picked)
+- **Battle-tested foundations** — curated agents, skills, commands, and rules for production development
 
 ---
 
@@ -33,7 +33,7 @@ npm i -g claude-skill-lord
 
 ```bash
 cd your-project
-csl init                # developer profile (recommended)
+csl init                # install all components
 claude                 # start coding with Claude Skill Lord
 ```
 
@@ -42,11 +42,10 @@ That's it. `csl init` copies skills, agents, and commands into `.claude/` and ge
 ### CLI commands
 
 ```bash
-csl init                # interactive setup (asks profile + target)
-csl init full           # install everything (161 skills + canvas fonts)
+csl init                # install everything
 csl init --dry-run      # preview without copying
 csl init --fresh        # clean reinstall
-csl upgrade full        # upgrade to full profile (additive, no overwrites)
+csl init --no-fonts     # skip canvas font files (~7MB)
 csl update              # update CLI to latest version
 csl migrate             # update project files after csl update
 csl migrate --dry-run   # preview what would change
@@ -140,7 +139,7 @@ The most common workflow — plan first, then implement, then validate:
 
 ```
 /scout src/ find all API endpoints
-/route I need to refactor the authentication module
+/model-route I need to refactor the authentication module
 /review:codebase
 ```
 
@@ -438,16 +437,6 @@ node tests/run-all.js
 
 ---
 
-## Attribution
-
-Built on the shoulders of giants:
-
-> [ClaudeKit Engineer](https://github.com/claudekit/claudekit-engineer) by Duy Nguyen — base architecture, mental models, strategic depth, unique agents
->
-> [Everything Claude Code](https://github.com/affaan-m/everything-claude-code) by Affaan Mustafa — cherry-picked agents, skills, commands, rules
->
-> [UI/UX Pro Max Skill](https://github.com/nextlevelbuilder/ui-ux-pro-max-skill) by Next Level Builder — design intelligence, 67 styles, 161 color palettes, brand & design-system skills (MIT)
-
 ## Contributing
 
 See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.

package/agents/copywriter.md

@@ -1,6 +1,6 @@
 ---
 name: copywriter
-description: Use this agent when you need to create high-converting, engagement-driven copy for marketing materials, social media posts, landing pages, email campaigns, product descriptions, or any content that needs to capture attention and drive action. Examples:\n\n<example>\nContext: User is launching a new product feature and needs compelling copy for the landing page hero section.\nuser: "We just added a new AI-powered code review feature. Can you write a hero headline and subheadline for the landing page?"\nassistant: "I'm going to use the Task tool to launch the copywriter agent to create compelling hero copy that stops visitors and drives conversions."\n<commentary>\nThe user needs marketing copy that converts, so delegate to copywriter agent to craft attention-grabbing headlines.\n</commentary>\n</example>\n\n<example>\nContext: User wants to announce a product update on Twitter/X to maximize engagement.\nuser: "We just shipped GitHub auto-invites for ClaudeKit. Need a tweet that'll get people excited."\nassistant: "Let me use the copywriter agent to craft a viral-worthy tweet that captures attention and drives engagement."\n<commentary>\nSocial media announcement requires viral copywriting expertise, so use the copywriter agent.\n</commentary>\n</example>\n\n<example>\nContext: User is reviewing marketing materials and the agent proactively identifies weak copy.\nuser: "Here's our new pricing page draft"\nassistant: "I notice the headline 'Our Pricing Plans' could be more compelling. Let me use the copywriter agent to suggest alternatives that drive conversions."\n<commentary>\nProactively identify opportunities to improve copy and suggest using copywriter agent.\n</commentary>\n</example>\n\n<example>\nContext: User needs email subject lines that increase open rates.\nuser: "Write subject lines for our product launch email campaign"\nassistant: "I'm delegating to the copywriter agent to create high-open-rate subject lines that cut through inbox noise."\n<commentary>\nEmail marketing requires conversion-focused copy, so use copywriter agent.\n</commentary>\n</example>
+description: Use this agent when you need to create high-converting, engagement-driven copy for marketing materials, social media posts, landing pages, email campaigns, product descriptions, or any content that needs to capture attention and drive action. Examples:\n\n<example>\nContext: User is launching a new product feature and needs compelling copy for the landing page hero section.\nuser: "We just added a new AI-powered code review feature. Can you write a hero headline and subheadline for the landing page?"\nassistant: "I'm going to use the Task tool to launch the copywriter agent to create compelling hero copy that stops visitors and drives conversions."\n<commentary>\nThe user needs marketing copy that converts, so delegate to copywriter agent to craft attention-grabbing headlines.\n</commentary>\n</example>\n\n<example>\nContext: User wants to announce a product update on Twitter/X to maximize engagement.\nuser: "We just shipped GitHub auto-invites for SkillLord. Need a tweet that'll get people excited."\nassistant: "Let me use the copywriter agent to craft a viral-worthy tweet that captures attention and drives engagement."\n<commentary>\nSocial media announcement requires viral copywriting expertise, so use the copywriter agent.\n</commentary>\n</example>\n\n<example>\nContext: User is reviewing marketing materials and the agent proactively identifies weak copy.\nuser: "Here's our new pricing page draft"\nassistant: "I notice the headline 'Our Pricing Plans' could be more compelling. Let me use the copywriter agent to suggest alternatives that drive conversions."\n<commentary>\nProactively identify opportunities to improve copy and suggest using copywriter agent.\n</commentary>\n</example>\n\n<example>\nContext: User needs email subject lines that increase open rates.\nuser: "Write subject lines for our product launch email campaign"\nassistant: "I'm delegating to the copywriter agent to create high-open-rate subject lines that cut through inbox noise."\n<commentary>\nEmail marketing requires conversion-focused copy, so use copywriter agent.\n</commentary>\n</example>
 model: sonnet
 tools: All tools
 ---

package/commands/claw.md

@@ -1,5 +1,5 @@
 ---
-description: Start NanoClaw v2 — ECC's persistent, zero-dependency REPL with model routing, skill hot-load, branching, compaction, export, and metrics.
+description: Start NanoClaw v2 — a persistent, zero-dependency REPL with model routing, skill hot-load, branching, compaction, export, and metrics.
 ---
 
 # Claw Command

package/commands/e2e.md

@@ -337,7 +337,7 @@ For PMX, prioritize these E2E tests:
 
 ## Related Agents
 
-This command invokes the `e2e-runner` agent provided by ECC.
+This command invokes the `e2e-runner` agent.
 
 For manual installs, the source file lives at:
 `agents/e2e-runner.md`

package/commands/harness-audit.md

@@ -45,7 +45,7 @@ Return:
 2. Category scores and concrete findings
 3. Failed checks with exact file paths
 4. Top 3 actions from the deterministic output (`top_actions`)
-5. Suggested ECC skills to apply next
+5. Suggested skills to apply next
 
 ## Checklist
 

package/commands/loop-start.md

@@ -26,7 +26,7 @@ Start a managed autonomous loop pattern with safety defaults.
 ## Required Safety Checks
 
 - Verify tests pass before first loop iteration.
-- Ensure `ECC_HOOK_PROFILE` is not disabled globally.
+- Ensure `HOOK_PROFILE` is not disabled globally.
 - Ensure loop has explicit stop condition.
 
 ## Arguments

package/commands/orchestrate.md

@@ -154,7 +154,7 @@ Combine outputs into single report
 
 For external tmux-pane workers with separate git worktrees, use `node scripts/orchestrate-worktrees.js plan.json --execute`. The built-in orchestration pattern stays in-process; the helper is for long-running or cross-harness sessions.
 
-When workers need to see dirty or untracked local files from the main checkout, add `seedPaths` to the plan file. ECC overlays only those selected paths into each worker worktree after `git worktree add`, which keeps the branch isolated while still exposing in-flight local scripts, plans, or docs.
+When workers need to see dirty or untracked local files from the main checkout, add `seedPaths` to the plan file. SkillLord overlays only those selected paths into each worker worktree after `git worktree add`, which keeps the branch isolated while still exposing in-flight local scripts, plans, or docs.
 
 ```json
 {

package/commands/prompt-optimize.md

@@ -1,10 +1,10 @@
 ---
-description: Analyze a draft prompt and output an optimized, ECC-enriched version ready to paste and run. Does NOT execute the task — outputs advisory analysis only.
+description: Analyze a draft prompt and output an optimized, optimized version ready to paste and run. Does NOT execute the task — outputs advisory analysis only.
 ---
 
 # /prompt-optimize
 
-Analyze and optimize the following prompt for maximum ECC leverage.
+Analyze and optimize the following prompt for maximum effectiveness.
 
 ## Your Task
 
@@ -13,13 +13,13 @@ Apply the **prompt-optimizer** skill to the user's input below. Follow the 6-pha
 0. **Project Detection** — Read CLAUDE.md, detect tech stack from project files (package.json, go.mod, pyproject.toml, etc.)
 1. **Intent Detection** — Classify the task type (new feature, bug fix, refactor, research, testing, review, documentation, infrastructure, design)
 2. **Scope Assessment** — Evaluate complexity (TRIVIAL / LOW / MEDIUM / HIGH / EPIC), using codebase size as signal if detected
-3. **ECC Component Matching** — Map to specific skills, commands, agents, and model tier
+3. **Component Matching** — Map to specific skills, commands, agents, and model tier
 4. **Missing Context Detection** — Identify gaps. If 3+ critical items missing, ask the user to clarify before generating
 5. **Workflow & Model** — Determine lifecycle position, recommend model tier, and split into multiple prompts if HIGH/EPIC
 
 ## Output Requirements
 
-- Present diagnosis, recommended ECC components, and an optimized prompt using the Output Format from the prompt-optimizer skill
+- Present diagnosis, recommended components, and an optimized prompt using the Output Format from the prompt-optimizer skill
 - Provide both **Full Version** (detailed) and **Quick Version** (compact, varied by intent type)
 - Respond in the same language as the user's input
 - The optimized prompt must be complete and ready to copy-paste into a new session

package/commands/quality-gate.md

@@ -1,10 +1,10 @@
 ---
-description: Run the ECC quality pipeline on demand for a file or project scope.
+description: Run the quality pipeline on demand for a file or project scope.
 ---
 
 # Quality Gate Command
 
-Run the ECC quality pipeline on demand for a file or project scope.
+Run the quality pipeline on demand for a file or project scope.
 
 ## Usage
 

package/commands/skill-create.md

@@ -171,4 +171,3 @@ For advanced features (10k+ commits, team sharing, auto-PRs), use the [Skill Cre
 
 ---
 
-*Part of [Everything Claude Code](https://github.com/affaan-m/everything-claude-code)*

package/commands/skill-health.md

@@ -13,22 +13,22 @@ Shows a comprehensive health dashboard for all skills in the portfolio with succ
 Run the skill health CLI in dashboard mode:
 
 ```bash
-ECC_ROOT="${CLAUDE_PLUGIN_ROOT:-$(node -e "var p=require('path'),f=require('fs'),h=require('os').homedir(),d=p.join(h,'.claude'),q=p.join('scripts','lib','utils.js');if(!f.existsSync(p.join(d,q))){try{var b=p.join(d,'plugins','cache','everything-claude-code');for(var o of f.readdirSync(b))for(var v of f.readdirSync(p.join(b,o))){var c=p.join(b,o,v);if(f.existsSync(p.join(c,q))){d=c;break}}}catch(x){}}console.log(d)")}"
-node "$ECC_ROOT/scripts/skills-health.js" --dashboard
+SL_ROOT="${CLAUDE_PLUGIN_ROOT:-$(node -e "var p=require('path'),f=require('fs'),h=require('os').homedir(),d=p.join(h,'.claude'),q=p.join('scripts','lib','utils.js');if(!f.existsSync(p.join(d,q))){try{var b=p.join(d,'plugins','cache','claude-skill-lord');for(var o of f.readdirSync(b))for(var v of f.readdirSync(p.join(b,o))){var c=p.join(b,o,v);if(f.existsSync(p.join(c,q))){d=c;break}}}catch(x){}}console.log(d)")}"
+node "$SL_ROOT/scripts/skills-health.js" --dashboard
 ```
 
 For a specific panel only:
 
 ```bash
-ECC_ROOT="${CLAUDE_PLUGIN_ROOT:-$(node -e "var p=require('path'),f=require('fs'),h=require('os').homedir(),d=p.join(h,'.claude'),q=p.join('scripts','lib','utils.js');if(!f.existsSync(p.join(d,q))){try{var b=p.join(d,'plugins','cache','everything-claude-code');for(var o of f.readdirSync(b))for(var v of f.readdirSync(p.join(b,o))){var c=p.join(b,o,v);if(f.existsSync(p.join(c,q))){d=c;break}}}catch(x){}}console.log(d)")}"
-node "$ECC_ROOT/scripts/skills-health.js" --dashboard --panel failures
+SL_ROOT="${CLAUDE_PLUGIN_ROOT:-$(node -e "var p=require('path'),f=require('fs'),h=require('os').homedir(),d=p.join(h,'.claude'),q=p.join('scripts','lib','utils.js');if(!f.existsSync(p.join(d,q))){try{var b=p.join(d,'plugins','cache','claude-skill-lord');for(var o of f.readdirSync(b))for(var v of f.readdirSync(p.join(b,o))){var c=p.join(b,o,v);if(f.existsSync(p.join(c,q))){d=c;break}}}catch(x){}}console.log(d)")}"
+node "$SL_ROOT/scripts/skills-health.js" --dashboard --panel failures
 ```
 
 For machine-readable output:
 
 ```bash
-ECC_ROOT="${CLAUDE_PLUGIN_ROOT:-$(node -e "var p=require('path'),f=require('fs'),h=require('os').homedir(),d=p.join(h,'.claude'),q=p.join('scripts','lib','utils.js');if(!f.existsSync(p.join(d,q))){try{var b=p.join(d,'plugins','cache','everything-claude-code');for(var o of f.readdirSync(b))for(var v of f.readdirSync(p.join(b,o))){var c=p.join(b,o,v);if(f.existsSync(p.join(c,q))){d=c;break}}}catch(x){}}console.log(d)")}"
-node "$ECC_ROOT/scripts/skills-health.js" --dashboard --json
+SL_ROOT="${CLAUDE_PLUGIN_ROOT:-$(node -e "var p=require('path'),f=require('fs'),h=require('os').homedir(),d=p.join(h,'.claude'),q=p.join('scripts','lib','utils.js');if(!f.existsSync(p.join(d,q))){try{var b=p.join(d,'plugins','cache','claude-skill-lord');for(var o of f.readdirSync(b))for(var v of f.readdirSync(p.join(b,o))){var c=p.join(b,o,v);if(f.existsSync(p.join(c,q))){d=c;break}}}catch(x){}}console.log(d)")}"
+node "$SL_ROOT/scripts/skills-health.js" --dashboard --json
 ```
 
 ## Usage

package/commands/tdd.md

@@ -319,9 +319,9 @@ Never skip the RED phase. Never write code before tests.
 
 ## Related Agents
 
-This command invokes the `tdd-guide` agent provided by ECC.
+This command invokes the `tdd-guide` agent.
 
-The related `tdd-workflow` skill is also bundled with ECC.
+The related `tdd-workflow` skill is also bundled with SkillLord.
 
 For manual installs, the source files live at:
 - `agents/tdd-guide.md`

package/docs/ARCHITECTURE.md

@@ -2,7 +2,7 @@
 
 ## Overview
 
-SkillLord is a Claude Code plugin that provides curated development workflows, structured agent orchestration, and 161 domain-specific skills. It combines best practices from ECC and ClaudeKit into a single, modular system.
+SkillLord is a Claude Code plugin that provides curated development workflows, structured agent orchestration, and 161 domain-specific skills. It provides a single, modular system for production development.
 
 SkillLord installs as a set of markdown files into your project's `.claude/` directory. Claude Code reads these files to gain domain-specific knowledge, follow structured workflows, and respond to slash commands.
 
@@ -32,17 +32,9 @@ Workflows define multi-step processes that coordinate agents and skills. The pri
 4. Pass/fail report is generated with actionable fixes
 5. Blocks PR creation if critical issues are found
 
-## Install Profiles
+## Installation
 
-SkillLord offers 3 install profiles that control which modules are copied:
-
-| Profile | Modules Included | Use Case |
-|---------|-----------------|----------|
-| **core** | agents, commands, skills, hooks, workflows | Minimal setup for quick tasks |
-| **developer** | core + rules, contexts | Individual developers (recommended) |
-| **full** | developer + MCP configs, canvas fonts | Teams, complex projects, design work |
-
-Each profile maps to a set of modules defined in `manifests/install-profiles.json`. Install with `csl init <profile>`.
+`csl init` installs all components (agents, commands, skills, rules, contexts, hooks, workflows, MCP configs, canvas fonts) into `.claude/`. Use `--no-fonts` to skip canvas font files (~7MB).
 
 ## Extension Points
 

package/docs/COMMAND-REFERENCE.md

@@ -53,7 +53,7 @@ SkillLord provides 114 slash commands organized by function.
 | `/ask` | Answer technical and architectural questions |
 | `/aside` | Answer a side question without losing current context |
 | `/model-route` | Recommend the best model tier for the current task |
-| `/quality-gate` | Run the ECC quality pipeline on demand |
+| `/quality-gate` | Run the quality pipeline on demand |
 | `/route` | Recommend relevant skills for current task |
 | `/context-budget` | Analyze context window usage and find optimization opportunities |
 | `/harness-audit` | Run a deterministic repository harness audit |

package/docs/SKILL-CATALOG.md

@@ -233,7 +233,7 @@ SkillLord includes 161 curated skills organized by domain. All skills live in `s
 |-------|-------------|
 | claude-code | Claude Code features, setup, configuration |
 | claude-api | Anthropic Claude API patterns for Python and TypeScript |
-| configure-ecc | Interactive installer for Everything Claude Code |
+| configure-skilllord | Interactive SkillLord configuration wizard |
 | skill-comply | Visualize skill, rule, and agent compliance |
 | skill-stocktake | Audit Claude skills and commands for quality |
 | rules-distill | Extract cross-cutting principles from skills |

package/docs/code-standards.md

@@ -2,11 +2,11 @@
 
 **Last Updated**: 2025-10-26
 **Version**: 1.8.0
-**Applies To**: All code within ClaudeKit Engineer project
+**Applies To**: All code within SkillLord project
 
 ## Overview
 
-This document defines coding standards, file organization patterns, naming conventions, and best practices for ClaudeKit Engineer. All code must adhere to these standards to ensure consistency, maintainability, and quality.
+This document defines coding standards, file organization patterns, naming conventions, and best practices for SkillLord. All code must adhere to these standards to ensure consistency, maintainability, and quality.
 
 ## Core Development Principles
 
@@ -284,7 +284,7 @@ GET    /api/users/:userId/posts
  * Handles user authentication, registration, and profile management.
  *
  * @module services/user-service
- * @author ClaudeKit
+ * @author SkillLord
  * @version 1.0.0
  */
 ```

package/hooks/discord-hook-setup.md

@@ -178,9 +178,9 @@ Discord messages are sent as rich embeds with the following structure:
 ║ ✅ All tests passing
 ╠═══════════════════════════════╣
 ║ ⏰ Session Time: 14:30:45
-║ 📂 Project: claudekit-engineer
+║ 📂 Project: skilllord-project
 ╠═══════════════════════════════╣
-║ DevPocket API • claudekit-engineer
+║ DevPocket API • skilllord-project
 ║ Today at 14:30
 ╚═══════════════════════════════╝
 ```

package/hooks/scripts/check-console-log.js

@@ -14,7 +14,7 @@
  */
 
 const fs = require('fs');
-const { isGitRepo, getGitModifiedFiles, readFile, log } = require('../lib/utils');
+const { isGitRepo, getGitModifiedFiles, readFile, log } = require('../../scripts/lib/utils');
 
 // Files where console.log is expected and should not trigger warnings
 const EXCLUDED_PATTERNS = [

package/hooks/scripts/discord-notify.sh

@@ -27,19 +27,16 @@ fi
 
 send_discord_embed() {
     local title="$1" description="$2" color="$3" fields="$4"
-    local payload=$(cat <<EOF
-{
-    "embeds": [{
-        "title": "$title",
-        "description": "$description",
-        "color": $color,
-        "timestamp": "$(date -u +%Y-%m-%dT%H:%M:%S.000Z)",
-        "footer": {"text": "CSL • ${PROJECT_NAME}"},
-        "fields": $fields
-    }]
-}
-EOF
-)
+    # Use jq to safely construct JSON (prevents injection from unescaped variables)
+    local payload
+    payload=$(jq -n \
+        --arg title "$title" \
+        --arg desc "$description" \
+        --argjson color "$color" \
+        --arg ts "$(date -u +%Y-%m-%dT%H:%M:%S.000Z)" \
+        --arg footer "CSL • ${PROJECT_NAME}" \
+        --argjson fields "$fields" \
+        '{embeds: [{title: $title, description: $desc, color: $color, timestamp: $ts, footer: {text: $footer}, fields: $fields}]}')
     curl -s -X POST "$DISCORD_WEBHOOK_URL" -H "Content-Type: application/json" -d "$payload" > /dev/null 2>&1
 }
 

package/hooks/scripts/post-edit-format.js

@@ -23,7 +23,7 @@ const path = require('path');
 // Shell metacharacters that cmd.exe interprets as command separators/operators
 const UNSAFE_PATH_CHARS = /[&|<>^%!]/;
 
-const { findProjectRoot, detectFormatter, resolveFormatterBin } = require('../lib/resolve-formatter');
+const { findProjectRoot, detectFormatter, resolveFormatterBin } = require('../../scripts/lib/resolve-formatter');
 
 const MAX_STDIN = 1024 * 1024; // 1MB limit
 

package/hooks/scripts/quality-gate.js

@@ -18,7 +18,7 @@ const fs = require('fs');
 const path = require('path');
 const { spawnSync } = require('child_process');
 
-const { findProjectRoot, detectFormatter, resolveFormatterBin } = require('../lib/resolve-formatter');
+const { findProjectRoot, detectFormatter, resolveFormatterBin } = require('../../scripts/lib/resolve-formatter');
 
 const MAX_STDIN = 1024 * 1024;
 
@@ -63,8 +63,8 @@ function maybeRunQualityGate(filePath) {
   filePath = path.resolve(filePath);
 
   const ext = path.extname(filePath).toLowerCase();
-  const fix = String(process.env.ECC_QUALITY_GATE_FIX || '').toLowerCase() === 'true';
-  const strict = String(process.env.ECC_QUALITY_GATE_STRICT || '').toLowerCase() === 'true';
+  const fix = String(process.env.SL_QUALITY_GATE_FIX || '').toLowerCase() === 'true';
+  const strict = String(process.env.SL_QUALITY_GATE_STRICT || '').toLowerCase() === 'true';
 
   if (['.ts', '.tsx', '.js', '.jsx', '.json', '.md'].includes(ext)) {
     const projectRoot = findProjectRoot(path.dirname(filePath));

package/hooks/scripts/run-with-flags.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * Executes a hook script only when enabled by ECC hook profile flags.
+ * Executes a hook script only when enabled by hook profile flags.
  *
  * Usage:
  *   node run-with-flags.js <hookId> <scriptRelativePath> [profilesCsv]
@@ -11,7 +11,7 @@
 const fs = require('fs');
 const path = require('path');
 const { spawnSync } = require('child_process');
-const { isHookEnabled } = require('../lib/hook-flags');
+const { isHookEnabled } = require('../../scripts/lib/hook-flags');
 
 const MAX_STDIN = 1024 * 1024;
 

package/hooks/scripts/session-end.js

@@ -23,10 +23,10 @@ const {
   runCommand,
   stripAnsi,
   log
-} = require('../lib/utils');
+} = require('../../scripts/lib/utils');
 
-const SUMMARY_START_MARKER = '<!-- ECC:SUMMARY:START -->';
-const SUMMARY_END_MARKER = '<!-- ECC:SUMMARY:END -->';
+const SUMMARY_START_MARKER = '<!-- SL:SUMMARY:START -->';
+const SUMMARY_END_MARKER = '<!-- SL:SUMMARY:END -->';
 const SESSION_SEPARATOR = '\n---\n';
 
 /**

package/hooks/scripts/telegram-notify.sh

@@ -27,10 +27,15 @@ fi
 
 send_telegram() {
     local message="$1"
-    local escaped=$(echo "$message" | jq -Rs .)
+    # Use jq to safely construct JSON payload (prevents injection from unescaped variables)
+    local payload
+    payload=$(jq -n \
+        --arg chat_id "$TELEGRAM_CHAT_ID" \
+        --arg text "$message" \
+        '{chat_id: $chat_id, text: $text, parse_mode: "Markdown", disable_web_page_preview: true}')
     curl -s -X POST "https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage" \
         -H "Content-Type: application/json" \
-        -d "{\"chat_id\":\"${TELEGRAM_CHAT_ID}\",\"text\":${escaped},\"parse_mode\":\"Markdown\",\"disable_web_page_preview\":true}" > /dev/null
+        -d "$payload" > /dev/null
 }
 
 case "$HOOK_TYPE" in