claude-skill-lord 2.1.0 → 2.2.0

package/.claude-plugin/marketplace.json

@@ -9,8 +9,8 @@
     {
       "name": "claude-skill-lord",
       "source": "./",
-      "description": "Curated Claude Code plugin — 22 agents, 61 skills, 40+ commands with intelligent skill routing and UI/UX design intelligence",
-      "version": "1.5.1",
+      "description": "Curated Claude Code plugin — 43 agents, 165 skills, 114 commands, 11 language rules",
+      "version": "2.2.0",
       "category": "workflow",
       "tags": ["agents", "skills", "commands", "hooks", "skill-routing", "quality-gate", "tdd", "code-review"],
       "strict": false

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "claude-skill-lord",
-  "version": "2.0.6",
-  "description": "Curated Claude Code plugin — 43 agents, 170 skills, 114 commands, 11 language rules",
+  "version": "2.2.0",
+  "description": "Curated Claude Code plugin — 43 agents, 165 skills, 114 commands, 11 language rules",
   "author": {
     "name": "Dong Anh",
     "email": "donganhvu20@gmail.com"

package/CLAUDE.md

@@ -11,7 +11,7 @@ Curated Claude Code plugin with intelligent skill routing, structured agents, an
 
 **IMPORTANT:** Follow development rules strictly. Research & Reuse is mandatory FIRST step before implementation.
 
-## Agents (44)
+## Agents (43)
 
 ### Core Agents
 | Agent | Role |
@@ -68,11 +68,11 @@ Curated Claude Code plugin with intelligent skill routing, structured agents, an
 | go-build-resolver | Go |
 | pytorch-build-resolver | PyTorch |
 
-## Skills (161)
+## Skills (165)
 
-All skills live in `./skills/<name>/SKILL.md` — flat structure, no tiers.
+All skills live in `./skills/<name>/SKILL.md` — flat or nested structure (e.g. `document-skills/docx/`).
 
-## Commands (115)
+## Commands (114)
 
 ### Core Commands
 | Command | Description |
@@ -85,7 +85,7 @@ All skills live in `./skills/<name>/SKILL.md` — flat structure, no tiers.
 | /tdd | Test-driven development workflow |
 | /debug | Deep issue analysis |
 | /code-review | Code review |
-| /route | Get skill recommendations for your task |
+| /model-route | Get skill recommendations for your task |
 | /audit | Run quality checks |
 | /scout | Search codebase (variants: ext) |
 | /bootstrap | Initialize new projects (variants: auto, auto/fast) |

package/README.md

@@ -1,23 +1,29 @@
-# Claude Skill Lord
-
-**The all-in-one Claude Code plugin you install once and never outgrow.**
-
-[![npm](https://img.shields.io/npm/v/claude-skill-lord)](https://www.npmjs.com/package/claude-skill-lord)
-![License](https://img.shields.io/badge/license-MIT-green)
-![Agents](https://img.shields.io/badge/agents-43-purple)
-![Skills](https://img.shields.io/badge/skills-161-orange)
-![Commands](https://img.shields.io/badge/commands-114-red)
-![Rules](https://img.shields.io/badge/rules-11%20languages-blue)
+<p align="center">
+  <img src="https://raw.githubusercontent.com/donganhvuphp/Claude-Skills-Lord/main/assets/logo.png" alt="Claude Skill Lord" width="120" />
+</p>
+
+<h1 align="center">Claude Skill Lord</h1>
+
+<p align="center">
+  <strong>The all-in-one Claude Code plugin you install once and never outgrow.</strong>
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/claude-skill-lord"><img src="https://img.shields.io/npm/v/claude-skill-lord?color=cb0000&label=npm" alt="npm" /></a>
+  <a href="https://www.npmjs.com/package/claude-skill-lord"><img src="https://img.shields.io/npm/dm/claude-skill-lord?color=cb0000" alt="downloads" /></a>
+  <a href="https://github.com/donganhvuphp/Claude-Skills-Lord"><img src="https://img.shields.io/github/stars/donganhvuphp/Claude-Skills-Lord?style=flat&color=orange" alt="stars" /></a>
+  <img src="https://img.shields.io/badge/agents-43-8b5cf6" alt="agents" />
+  <img src="https://img.shields.io/badge/skills-165-f97316" alt="skills" />
+  <img src="https://img.shields.io/badge/commands-114-ef4444" alt="commands" />
+  <img src="https://img.shields.io/badge/languages-11-3b82f6" alt="languages" />
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-22c55e" alt="license" /></a>
+</p>
 
 ---
 
-## Why Claude Skill Lord?
+## What is Claude Skill Lord?
 
-- **Stop configuring, start building** — 161 skills, 43 agents, 114 commands work out of the box
-- **Multi-language support** — 11 language-specific rule sets (TypeScript, Python, Go, Rust, Java, Kotlin, C++, C#, PHP, Perl, Swift) + common rules
-- **Language-specific agents** — dedicated reviewers and build resolvers for 8 languages
-- **Design intelligence built-in** — 67 UI styles, 161 color palettes, reasoning engine for production-grade design decisions
-- **Battle-tested foundations** — curated agents, skills, commands, and rules for production development
+Claude Skill Lord is a curated plugin for [Claude Code](https://docs.anthropic.com/en/docs/claude-code) that adds **43 specialized agents**, **165 production-ready skills**, **114 commands**, and **11 language rule sets** to your development workflow. One install gives Claude deep expertise in planning, coding, testing, reviewing, debugging, and designing — across any language or framework.
 
 ---
 
@@ -33,75 +39,63 @@ npm i -g claude-skill-lord
 
 ```bash
 cd your-project
-csl init                # install all components
-claude                 # start coding with Claude Skill Lord
+csl init       # copies agents, skills, commands into .claude/
+claude         # start coding with Claude Skill Lord
 ```
 
-That's it. `csl init` copies skills, agents, and commands into `.claude/` and generates `plugin.json` automatically.
+That's it. `csl init` generates `plugin.json` and wires everything up automatically.
 
-### CLI commands
+### Alternative installs
 
 ```bash
-csl init                # install everything
-csl init --dry-run      # preview without copying
-csl init --fresh        # clean reinstall
-csl init --no-fonts     # skip canvas font files (~7MB)
-csl update              # update CLI to latest version
-csl migrate             # update project files after csl update
-csl migrate --dry-run   # preview what would change
-csl diff                # compare project files with source package
-csl uninstall           # remove from current project
-csl doctor              # check health + available updates
-csl list                # show all components with install status
-```
+# Per-project
+npm i claude-skill-lord && npx csl init
 
-### Alternative: per-project install
-
-```bash
-npm i claude-skill-lord
-npx csl init
+# From source
+git clone https://github.com/donganhvuphp/Claude-Skills-Lord.git
+cd Claude-Skills-Lord && node scripts/sl.js init --target /path/to/your/project
 ```
 
-### Alternative: git clone
+---
 
-```bash
-git clone https://github.com/donganhvuphp/Claude-Skills-Lord.git
-cd Claude-Skills-Lord
-node scripts/sl.js init full --target /path/to/your/project
+## CLI
+
+```
+csl init                  Install everything
+csl init --dry-run        Preview without copying
+csl init --fresh          Clean reinstall
+csl init --no-fonts       Skip canvas font files (~7 MB)
+csl update                Update CLI to latest version
+csl migrate               Update project files after csl update
+csl migrate --dry-run     Preview what would change
+csl diff                  Compare project files with source
+csl uninstall             Remove from current project
+csl doctor                Health check + available updates
+csl list                  Show all components
 ```
 
 ---
 
-## Architecture
-
-```mermaid
-graph TD
-    subgraph Plugin["Claude Skill Lord Plugin"]
-        A["Agents (43)"]
-        B["Commands (114)"]
-        C["Skills (161)"]
-        R["Rules (11 langs)"]
-    end
-
-    subgraph Intelligence["Intelligence Layer"]
-        E["Quality Gate"]
-    end
-
-    subgraph Infra["Foundation"]
-        F["Hooks"]
-        G["Workflows"]
-        H["Manifests"]
-        CTX["Contexts"]
-    end
-
-    A --> E
-    B --> E
-    C --> E
-    R --> E
-    E --> F
-    E --> G
-    E --> H
-    CTX --> E
+## How It Works
+
+```
+┌─────────────────────────────────────────────────────────┐
+│                    Claude Skill Lord                     │
+│                                                         │
+│  ┌───────────┐  ┌───────────┐  ┌──────────┐  ┌──────┐  │
+│  │ 43 Agents │  │165 Skills │  │114 Cmds  │  │Rules │  │
+│  └─────┬─────┘  └─────┬─────┘  └────┬─────┘  └──┬───┘  │
+│        │              │              │            │      │
+│        └──────────┬───┴──────────────┘            │      │
+│                   ▼                               │      │
+│          ┌────────────────┐                       │      │
+│          │  Quality Gate  │◄──────────────────────┘      │
+│          └───────┬────────┘                              │
+│                  ▼                                       │
+│    ┌──────────────────────────┐                          │
+│    │ Hooks · Workflows · MCP │                          │
+│    └──────────────────────────┘                          │
+└─────────────────────────────────────────────────────────┘
 ```
 
 ---
@@ -110,8 +104,6 @@ graph TD
 
 ### Plan → Code → Test
 
-The most common workflow — plan first, then implement, then validate:
-
 ```
 /plan Add user authentication with OAuth2
 /code
@@ -122,9 +114,9 @@ The most common workflow — plan first, then implement, then validate:
 
 ```
 /fix login not redirecting after auth
-/fix:ci                              # fix from CI/CD logs
-/fix:types                           # fix TypeScript errors
-/fix:fast connection timeout on API  # quick fix, no deep research
+/fix:ci                                # fix from CI/CD logs
+/fix:types                             # fix TypeScript errors
+/fix:fast connection timeout on API    # quick fix, no deep research
 ```
 
 ### Design UI
@@ -135,23 +127,22 @@ The most common workflow — plan first, then implement, then validate:
 /design:3d Interactive 3D product showcase
 ```
 
-### Explore and understand code
+### Build features end-to-end
 
 ```
-/scout src/ find all API endpoints
-/route I need to refactor the authentication module
-/review:codebase
+/cook Add dark mode toggle in settings page
+/brainstorm WebSocket vs SSE for real-time notifications?
+/bootstrap:auto Next.js SaaS starter with auth and payments
 ```
 
-### Build features end-to-end
+### Explore & understand code
 
 ```
-/cook Add dark mode toggle in settings page
-/brainstorm Should we use WebSocket or SSE for real-time notifications?
-/bootstrap:auto Next.js SaaS starter with auth and payments
+/scout src/ find all API endpoints
+/model-route I need to refactor the authentication module
 ```
 
-### Multi-agent workflows (new)
+### Multi-agent workflows
 
 ```
 /multi-plan Complex feature requiring multiple perspectives
@@ -159,42 +150,42 @@ The most common workflow — plan first, then implement, then validate:
 /orchestrate Coordinate multiple agents on a large task
 ```
 
-### Session management (new)
+### Session management
 
 ```
-/save-session     # save current work context
-/resume-session   # resume where you left off
-/checkpoint       # create a recovery point
+/save-session      Save current work context
+/resume-session    Resume where you left off
+/checkpoint        Create a recovery point
 ```
 
-### Language-specific workflows (new)
+### Language-specific workflows
 
 ```
-/rust-build       # build Rust project
-/go-review        # review Go code
-/kotlin-test      # test Kotlin project
-/cpp-build        # build C++ project
-/python-review    # review Python code
+/rust-build   /rust-review   /rust-test
+/go-build     /go-review     /go-test
+/kotlin-build /kotlin-review /kotlin-test
+/cpp-build    /cpp-review    /cpp-test
+/python-review
 ```
 
 ---
 
 ## Key Commands
 
-| Command | Description |
+| Command | What it does |
 |---------|-------------|
-| `/plan` | Create implementation plan (variants: `fast`, `hard`, `two`, `cro`, `ci`) |
+| `/plan` | Create implementation plan (`fast`, `hard`, `two`, `cro`, `ci`) |
 | `/code` | Start coding from plan |
 | `/test` | Run and validate tests |
-| `/fix` | Fix issues (variants: `fast`, `hard`, `ci`, `test`, `types`, `ui`, `logs`) |
-| `/cook` | Implement features end-to-end |
+| `/fix` | Fix issues (`fast`, `hard`, `ci`, `test`, `types`, `ui`, `logs`) |
+| `/cook` | Implement features end-to-end (`auto`, `auto/fast`) |
 | `/tdd` | Test-driven development workflow |
 | `/debug` | Deep root-cause investigation |
-| `/design:good` | Create UI designs (variants: `fast`, `good`, `3d`, `screenshot`, `video`, `describe`) |
+| `/design` | Create UI designs (`fast`, `good`, `3d`, `screenshot`, `video`) |
 | `/audit` | Run quality gate checks |
 
 <details>
-<summary><strong>All commands (114)</strong></summary>
+<summary><strong>View all 114 commands</strong></summary>
 
 | Category | Commands |
 |----------|----------|
@@ -210,12 +201,9 @@ The most common workflow — plan first, then implement, then validate:
 | **Session** | `/save-session`, `/resume-session`, `/sessions`, `/checkpoint` |
 | **Scout** | `/scout`, `/scout:ext` |
 | **Bootstrap** | `/bootstrap`, `/bootstrap:auto`, `/bootstrap:auto/fast` |
-| **Skills** | `/skill:add`, `/skill:create`, `/skill:optimize`, `/skill:fix-logs`, `/skill-create`, `/skill-health` |
+| **Skills** | `/skill:add`, `/skill:create`, `/skill:optimize`, `/skill:fix-logs` |
 | **Quality** | `/quality-gate`, `/audit`, `/refactor-clean`, `/prompt-optimize` |
 | **Loop** | `/loop-start`, `/loop-status` |
-| **Other** | `/brainstorm`, `/learn`, `/evolve`, `/model-route`, `/ask`, `/journal`, `/watzup` |
-
-See [commands/](commands/) for the full list.
 
 </details>
 
@@ -226,17 +214,17 @@ See [commands/](commands/) for the full list.
 <details>
 <summary><strong>43 agents — click to expand</strong></summary>
 
-### Core Agents
+### Core
 
 | Agent | Role |
 |-------|------|
 | planner | Technical planning with 9 mental models |
 | architect | System design and scalability |
-| code-reviewer | Quality assessment with >80% confidence filtering |
+| code-reviewer | Quality assessment with confidence filtering |
 | security-reviewer | OWASP vulnerability detection |
 | tdd-guide | RED-GREEN-REFACTOR workflow |
-| debugger | Root cause investigation methodology |
-| build-error-resolver | Build and compile error fixing |
+| debugger | Root cause investigation |
+| build-error-resolver | Build / compile error fixing |
 | e2e-runner | Playwright E2E test generation |
 | refactor-cleaner | Dead code cleanup |
 | git-manager | Version control operations |
@@ -246,8 +234,8 @@ See [commands/](commands/) for the full list.
 | project-manager | Progress tracking |
 | ui-ux-designer | UI/UX design |
 | database-admin | Database optimization |
-| database-reviewer | Database review specialist |
-| brainstormer | Solution ideation (YAGNI/KISS/DRY) |
+| database-reviewer | Database review |
+| brainstormer | Solution ideation (YAGNI / KISS / DRY) |
 | copywriter | Conversion-focused content |
 | scout | Parallel codebase exploration |
 | scout-external | External tool-based exploration |
@@ -255,8 +243,8 @@ See [commands/](commands/) for the full list.
 | chief-of-staff | Multi-channel coordination |
 | harness-optimizer | Agent self-optimization |
 | quality-gate | Output validation |
-| researcher | Deep research agent |
-| tester | Test execution agent |
+| researcher | Deep research |
+| tester | Test execution |
 | mcp-manager | MCP server management |
 | journal-writer | Session journaling |
 
@@ -271,7 +259,7 @@ See [commands/](commands/) for the full list.
 | kotlin-reviewer | Kotlin |
 | java-reviewer | Java |
 | cpp-reviewer | C++ |
-| flutter-reviewer | Flutter/Dart |
+| flutter-reviewer | Flutter / Dart |
 
 ### Language-Specific Build Resolvers
 
@@ -288,159 +276,85 @@ See [commands/](commands/) for the full list.
 
 ---
 
-## Skills (161)
+## Skills (165)
 
-All skills live in `./skills/<name>/SKILL.md` — flat structure.
+All skills live in `./skills/<name>/SKILL.md` — flat or nested structure.
 
 <details>
-<summary><strong>Click to expand full skill list</strong></summary>
+<summary><strong>View all 165 skills by category</strong></summary>
+
+**Development Core** — debugging, code-review, tdd-workflow, testing, backend-development, frontend-development, web-frameworks, ui-styling, databases, api-design, devops, sequential-thinking, research, planning, problem-solving, coding-standards
 
-### Development Core
-debugging, code-review, tdd-workflow, testing, backend-development, frontend-development, web-frameworks, ui-styling, databases, api-design, devops, sequential-thinking, research, planning, problem-solving, coding-standards
+**Frontend & Design** — ui-ux-pro-max, react-best-practices, frontend-patterns, frontend-design, frontend-slides, nextjs-turbopack, design, design-system, brand, banner-design, slides, aesthetic, web-design-guidelines, liquid-glass-design, threejs
 
-### Frontend & Design
-ui-ux-pro-max, react-best-practices, frontend-patterns, frontend-design, frontend-slides, nextjs-turbopack, design, design-system, brand, banner-design, slides, aesthetic, web-design-guidelines, liquid-glass-design, threejs
+**Backend & API** — backend-patterns, api-design, mcp-server-patterns, mcp-management, mcp-builder
 
-### Backend & API
-backend-patterns, api-design, mcp-server-patterns, mcp-management, mcp-builder
+**Language Patterns** — python-patterns, golang-patterns, rust-patterns, kotlin-patterns, perl-patterns, django-patterns, laravel-patterns, springboot-patterns, swiftui-patterns, nuxt4-patterns
 
-### Language Patterns
-python-patterns, golang-patterns, rust-patterns, kotlin-patterns, perl-patterns, django-patterns, laravel-patterns, springboot-patterns, swiftui-patterns, nuxt4-patterns
+**Language Testing & Security** — python-testing, golang-testing, rust-testing, kotlin-testing, cpp-testing, perl-testing, perl-security, django-tdd, laravel-tdd, springboot-tdd, django-security, laravel-security, springboot-security, django-verification, laravel-verification, springboot-verification
 
-### Language Testing & Security
-python-testing, golang-testing, rust-testing, kotlin-testing, cpp-testing, perl-testing, perl-security, django-tdd, laravel-tdd, springboot-tdd, django-security, laravel-security, springboot-security, django-verification, laravel-verification, springboot-verification
+**Language Specialized** — kotlin-coroutines-flows, kotlin-exposed-patterns, kotlin-ktor-patterns, java-coding-standards, cpp-coding-standards, swift-actor-persistence, swift-concurrency-6-2, swift-protocol-di-testing, jpa-patterns, compose-multiplatform-patterns
 
-### Language Specialized
-kotlin-coroutines-flows, kotlin-exposed-patterns, kotlin-ktor-patterns, java-coding-standards, cpp-coding-standards, swift-actor-persistence, swift-concurrency-6-2, swift-protocol-di-testing, jpa-patterns, compose-multiplatform-patterns
+**Mobile** — mobile-development, android-clean-architecture, flutter-dart-code-review
 
-### Mobile
-mobile-development, android-clean-architecture, flutter-dart-code-review
+**DevOps & Infrastructure** — deployment-patterns, docker-patterns, vercel-deploy
 
-### DevOps & Infrastructure
-deployment-patterns, docker-patterns, vercel-deploy
+**Database** — postgres-patterns, database-migrations, clickhouse-io
 
-### Database
-postgres-patterns, database-migrations, clickhouse-io
+**AI & ML** — ai-multimodal, pytorch-patterns, google-adk-python, cost-aware-llm-pipeline, foundation-models-on-device, prompt-optimizer
 
-### AI & ML
-ai-multimodal, pytorch-patterns, google-adk-python, cost-aware-llm-pipeline, foundation-models-on-device, prompt-optimizer
+**Agentic Engineering** — agentic-engineering, ai-first-engineering, ai-regression-testing, agent-harness-construction, agent-eval, autonomous-loops, continuous-agent-loop, continuous-learning, continuous-learning-v2, eval-harness, verification-loop, enterprise-agent-ops
 
-### Agentic Engineering
-agentic-engineering, ai-first-engineering, ai-regression-testing, agent-harness-construction, agent-eval, autonomous-loops, continuous-agent-loop, continuous-learning, continuous-learning-v2, eval-harness, verification-loop, enterprise-agent-ops
+**Content & Business** — article-writing, content-engine, crosspost, market-research, investor-outreach, investor-materials, shopify
 
-### Content & Business
-article-writing, content-engine, crosspost, market-research, investor-outreach, investor-materials, shopify
+**Security & Auth** — security-review, security-scan, better-auth, payment-integration, safety-guard
 
-### Security & Auth
-security-review, security-scan, better-auth, payment-integration, safety-guard
+**Media & Processing** — media-processing, video-editing, videodb, fal-ai-media, nutrient-document-processing
 
-### Media & Processing
-media-processing, video-editing, videodb, fal-ai-media, nutrient-document-processing
+**Document Skills** — document-skills/docx, document-skills/pdf, document-skills/pptx, document-skills/xlsx
 
-### Tools & Utilities
-repomix, chrome-devtools, docs-seeker, documentation-lookup, document-skills, skill-creator, data-scraper-agent, exa-search, x-api, bun-runtime, nanoclaw-repl, dmux-workflows
+**Tools & Utilities** — repomix, chrome-devtools, docs-seeker, documentation-lookup, skill-creator, data-scraper-agent, exa-search, x-api, bun-runtime, nanoclaw-repl, dmux-workflows
 
-### Research & Strategy
-deep-research, strategic-compact, search-first, iterative-retrieval, codebase-onboarding, blueprint, santa-method, team-builder, architecture-decision-records
+**Research & Strategy** — deep-research, strategic-compact, search-first, iterative-retrieval, codebase-onboarding, blueprint, santa-method, team-builder, architecture-decision-records
 
-### Domain-Specific
-carrier-relationship-management, customs-trade-compliance, energy-procurement, inventory-demand-planning, logistics-exception-management, production-scheduling, quality-nonconformance, returns-reverse-logistics, visa-doc-translate
+**Domain-Specific** — carrier-relationship-management, customs-trade-compliance, energy-procurement, inventory-demand-planning, logistics-exception-management, production-scheduling, quality-nonconformance, returns-reverse-logistics, visa-doc-translate
 
-### Meta & Config
-claude-code, claude-api, claude-devfleet, configure-ecc, skill-comply, skill-stocktake, rules-distill, plankton-code-quality, ralphinho-rfc-pipeline, regex-vs-llm-structured-text, click-path-audit, context-budget, content-hash-cache-pattern, project-guidelines-example, plan-preview, template-skill, e2e-testing
+**Meta & Config** — claude-api, claude-devfleet, configure-skilllord, skill-comply, skill-stocktake, rules-distill, plankton-code-quality, ralphinho-rfc-pipeline, regex-vs-llm-structured-text, click-path-audit, context-budget, content-hash-cache-pattern, project-guidelines-example, plan-preview, template-skill, e2e-testing
 
 </details>
 
 ---
 
-## Rules (11 Languages + Common)
-
-Language-specific coding rules in `./rules/`:
-
-| Language | Files |
-|----------|-------|
-| Common | agents, coding-style, development-workflow, git-workflow, hooks, patterns, performance, security, testing |
-| TypeScript | coding-style, hooks, patterns, security, testing |
-| Python | coding-style, hooks, patterns, security, testing |
-| Go | coding-style, hooks, patterns, security, testing |
-| Rust | coding-style, hooks, patterns, security, testing |
-| Java | coding-style, hooks, patterns, security, testing |
-| Kotlin | coding-style, hooks, patterns, security, testing |
-| C++ | coding-style, hooks, patterns, security, testing |
-| C# | coding-style, hooks, patterns, security, testing |
-| PHP | coding-style, hooks, patterns, security, testing |
-| Perl | coding-style, hooks, patterns, security, testing |
-| Swift | coding-style, hooks, patterns, security, testing |
+## Rules
+
+11 language-specific rule sets plus a common base, each covering: coding-style, hooks, patterns, security, and testing.
+
+**Supported languages:** TypeScript, Python, Go, Rust, Java, Kotlin, C++, C#, PHP, Perl, Swift
 
 ---
 
-## Hooks & Automation
+## Hooks
 
 | Hook | Trigger | What it does |
-|------|---------|--------------|
+|------|---------|-------------|
 | Block no-verify | PreToolUse | Prevents bypassing git hooks |
 | Config protection | PreToolUse | Prevents weakening linter/formatter configs |
-| Scout block | PreToolUse | Controls scout command usage |
-| Auto-format | PostToolUse | Runs Biome or Prettier on edited JS/TS files |
+| Auto-format | PostToolUse | Runs Biome or Prettier on edited JS/TS |
 | Type check | PostToolUse | Validates TypeScript after edits |
-| Console.log check | Stop | Flags debug code left in modified files |
 | Quality gate | PostToolUse | Lint + types + tests + security checks |
-| Modularization | PostToolUse | Suggests splitting files >200 LOC |
-| Session persistence | Stop | Persist session state for cross-session continuity |
-| Discord/Telegram notify | Stop | Send notifications on session end |
-
----
-
-## Contexts
-
-Development contexts in `./contexts/` for specialized workflows:
-
-| Context | Use Case |
-|---------|----------|
-| `dev.md` | Development context |
-| `research.md` | Research context |
-| `review.md` | Code review context |
+| Modularization | PostToolUse | Suggests splitting files > 200 LOC |
+| Console.log check | Stop | Flags debug code left in modified files |
+| Session persistence | Stop | Persist state for cross-session continuity |
+| Notifications | Stop | Discord / Telegram notification on session end |
 
 ---
 
 ## Statusline
 
-Built-in cross-platform statusline showing real-time session metrics:
-
-- **Cost tracking** — cost per hour and session total via ccusage
-- **Token count** — current token usage
-- **Session timer** — remaining time with color-coded warnings
-- **Git branch** — current branch or commit hash
-- **Model info** — active model name and version
-
-Available in 3 variants: `scripts/statusline.js` (Node.js), `scripts/statusline.sh` (Bash), `scripts/statusline.ps1` (PowerShell).
+Built-in cross-platform statusline with real-time session metrics: cost tracking, token count, session timer, git branch, and model info. Available as Node.js, Bash, and PowerShell scripts.
 
 ---
 
-## Development Config
-
-| File | Purpose |
-|------|---------|
-| `.commitlintrc.json` | Enforces conventional commit message format |
-| `.releaserc.json` | Semantic release automation for npm publishing |
-| `.repomixignore` | Ignore patterns for repomix skill |
-| `.env.example` | Template for Discord/Telegram/Gemini API keys |
-| `docs/code-standards.md` | Project-level coding standards |
-
----
-
-## Testing
-
-```bash
-node tests/run-all.js
-```
-
----
-
-## Contributing
-
-See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
-
 ## License
 
 [MIT](LICENSE)

package/hooks/scripts/check-console-log.js

@@ -14,7 +14,7 @@
  */
 
 const fs = require('fs');
-const { isGitRepo, getGitModifiedFiles, readFile, log } = require('../lib/utils');
+const { isGitRepo, getGitModifiedFiles, readFile, log } = require('../../scripts/lib/utils');
 
 // Files where console.log is expected and should not trigger warnings
 const EXCLUDED_PATTERNS = [

package/hooks/scripts/discord-notify.sh

@@ -27,19 +27,16 @@ fi
 
 send_discord_embed() {
     local title="$1" description="$2" color="$3" fields="$4"
-    local payload=$(cat <<EOF
-{
-    "embeds": [{
-        "title": "$title",
-        "description": "$description",
-        "color": $color,
-        "timestamp": "$(date -u +%Y-%m-%dT%H:%M:%S.000Z)",
-        "footer": {"text": "CSL • ${PROJECT_NAME}"},
-        "fields": $fields
-    }]
-}
-EOF
-)
+    # Use jq to safely construct JSON (prevents injection from unescaped variables)
+    local payload
+    payload=$(jq -n \
+        --arg title "$title" \
+        --arg desc "$description" \
+        --argjson color "$color" \
+        --arg ts "$(date -u +%Y-%m-%dT%H:%M:%S.000Z)" \
+        --arg footer "CSL • ${PROJECT_NAME}" \
+        --argjson fields "$fields" \
+        '{embeds: [{title: $title, description: $desc, color: $color, timestamp: $ts, footer: {text: $footer}, fields: $fields}]}')
     curl -s -X POST "$DISCORD_WEBHOOK_URL" -H "Content-Type: application/json" -d "$payload" > /dev/null 2>&1
 }
 

package/hooks/scripts/post-edit-format.js

@@ -23,7 +23,7 @@ const path = require('path');
 // Shell metacharacters that cmd.exe interprets as command separators/operators
 const UNSAFE_PATH_CHARS = /[&|<>^%!]/;
 
-const { findProjectRoot, detectFormatter, resolveFormatterBin } = require('../lib/resolve-formatter');
+const { findProjectRoot, detectFormatter, resolveFormatterBin } = require('../../scripts/lib/resolve-formatter');
 
 const MAX_STDIN = 1024 * 1024; // 1MB limit