Seamless onboarding for the Code-with-Claude Makers Cardputer: one /maker-setup command clones the build-with-claude repo, flashes UIFlow firmware, and installs the Claude Buddy app bundle onto a freshly-plugged-in M5Stack Cardputer-Adv.
- Stars
- 45,953
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 1 finding to review, highest severity high.
- Highest severity
- high
- Findings
- 1
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
Skills in this plugin
- cardputer-buddyAnthropicIterate on the Cardputer-Adv MicroPython app bundle (Claude Buddy, Snake, Hello) after the device is already provisioned via m5-onboard.… No issuesAI & agents46k
- m5-onboardAnthropicEnd-to-end onboarding for a freshly-plugged-in M5Stack ESP32 device (Cardputer, Cardputer-Adv, Core, CoreS3, Stick), detect on USB, flash… Review findingsAI & agents46k
We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 1 finding to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (1)
high · 1
- high
Tells Claude to install unpinned packages (esptool)
skills/m5-onboard/SKILL.md:147 · skill_risk:S2
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1 (1.0.0), seen 2026-11-03.
Files
Files
6 files, 40 KB in total. Names only; open them on GitHub.
- .claude-plugin/plugin.json
- LICENSE
- README.md
- commands/maker-setup.md
- skills/cardputer-buddy/SKILL.md
- skills/m5-onboard/SKILL.md
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
- example-pluginAnthropicA comprehensive example plugin demonstrating all Claude Code extension options including commands, agents, skills, hooks, and MCP servers No issuesEngineeringAI & agents46k
- explanatory-output-styleAnthropicAdds educational insights about implementation choices and codebase patterns (mimics the deprecated Explanatory output style) No issuesEngineeringAI & agents46k
- learning-output-styleAnthropicInteractive learning mode that requests meaningful code contributions at decision points (mimics the unshipped Learning output style) No issuesEngineeringAI & agents46k
- build-mcp-appAnthropicThis skill should be used when the user wants to build an "MCP app", add "interactive UI" or "widgets" to an MCP server, "render… Review findingsEngineeringData & analytics46k