Claude Code¶
Validates the Claude Code formats: plugin manifests (.claude-plugin/plugin.json), marketplace.json catalogs, command and agent frontmatter, .claude/settings.json security, and .claude/rules/ files. These rules carry the claude- prefix (mirroring codex-); their pre-0.18 bare names still work as legacy aliases everywhere a rule is named.
| Rule ID | Description | Default Severity | Autofix |
|---|---|---|---|
claude-plugin-json-required |
Plugin must have .claude-plugin/plugin.json | error (auto) | - |
claude-plugin-json-valid |
plugin.json must be valid JSON with required fields | error (auto) | - |
claude-plugin-naming |
Plugin names should use kebab-case | warning (auto) | - |
claude-plugin-readme |
Plugin should have a README.md file | warning (auto) | - |
claude-command-naming |
Command files should use kebab-case naming | warning | auto |
claude-command-frontmatter |
Command files must have valid frontmatter with description | error | auto |
claude-command-sections |
Command files should have Name, Synopsis, Description, and Implementation sections | warning (disabled) | - |
claude-command-name-format |
Command Name section should be 'plugin-name:command-name' | warning (disabled) | - |
claude-agent-frontmatter |
Agent files must have valid frontmatter with name and description | error | auto |
claude-marketplace-json-valid |
Marketplace.json must be valid JSON with required fields | error (auto) | - |
claude-marketplace-registration |
Plugins must be registered in marketplace.json | error (auto) | auto |
claude-settings-dangerous |
Flags settings keys that execute arbitrary commands (apiKeyHelper, awsAuthRefresh, awsCredentialExport, gcpAuthRefresh, otelHeadersHelper) and dangerous env vars (LD_PRELOAD, NODE_OPTIONS, proxy settings, GIT_SSH_COMMAND, etc.) | error (auto) | - |
claude-rules-valid |
.claude/rules/ files must be markdown with valid optional paths frontmatter | error (auto) | - |