Project health and permission management, dev sessions, team updates with feedback triage, GitHub releases, multi-model brains trust, git workflows, UX audits, responsive layout testing, and browser automation.
- Stars
- 1,094
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 4 findings to review, highest severity high.
- Highest severity
- high
- Findings
- 4
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
Skills in this plugin
- app-docsjezwebGenerate complete user documentation for a web app with screenshots. Browses the app via browser automation, screenshots every screen, and… No issuesResearchDocuments1.1k
- codex-reviewjezwebRun an independent code review using the OpenAI Codex CLI in headless mode. Gets a second opinion from a different model family (the… No issuesEngineeringAI & agents1.1k
- deep-researchjezwebDeep research and discovery before building something new. Explores local projects for reusable code, researches competitors, reads forums… No issuesResearchData & analytics1.1k
- fork-disciplinejezwebAudit and enforce the core/client boundary in multi-client projects. Detects where shared platform code is tangled with client-specific… No issuesEngineeringDocuments1.1k
- github-releasejezwebPrepare and publish GitHub releases. Sanitizes code for public release (secrets scan, personal artifacts, LICENSE/README validation),… No issuesEngineeringSales & marketing1.1k
- git-workflowjezwebGuided git workflows: prepare PRs, clean up branches, resolve merge conflicts, handle monorepo tags, squash-and-merge patterns. Use when… No issuesEngineeringProductivity1.1k
- onboarding-uxjezwebAudit and generate in-app user guidance: onboarding flows, empty states, tooltips, feature tours, contextual help, defaults, and inline… No issuesDesignEngineering1.1k
- project-docsjezwebGenerate project documentation from codebase analysis, ARCHITECTURE.md, API_ENDPOINTS.md, DATABASE_SCHEMA.md. Reads source code, schema… No issuesData & analyticsEngineering1.1k
- project-healthjezwebAll-in-one project configuration and health management. Sets up new projects (settings.local.json, CLAUDE.md, .gitignore), audits existing… No issuesProductivityAI & agents1.1k
We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 4 findings to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (4)
high · 4
- high
Tells Claude to install unpinned packages (vitest)
skills/vitest/SKILL.md:50 · skill_risk:S2
- high
Tells Claude to install unpinned packages (@vitest/coverage-v8, jsdom, @testing-library/react, @testing-library/jest-dom, @testing-library/user-event)
skills/vitest/SKILL.md:53 · skill_risk:S2
- high
Tells Claude to install unpinned packages (@vitest/coverage-v8, @cloudflare/vitest-pool-workers)
skills/vitest/SKILL.md:56 · skill_risk:S2
- high
Tells Claude to install unpinned packages (@vitest/coverage-v8)
skills/vitest/SKILL.md:59 · skill_risk:S2
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
Files
Files
70 files, 521 KB in total. Names only; open them on GitHub.
- .claude-plugin/plugin.json
- commands/app-docs.md
- commands/deep-research.md
- commands/fork-discipline.md
- commands/git-workflow.md
- commands/onboarding-ux.md
- commands/project-docs.md
- commands/project-health.md
- commands/release.md
- commands/responsiveness-check.md
- commands/roadmap.md
- commands/team-update.md
- commands/ux-audit.md
- commands/ux-compare.md
- commands/ux-extract.md
- skills/app-docs/SKILL.md
- skills/codex-review/SKILL.md
- skills/codex-review/prompt.md
- skills/deep-research/SKILL.md
- skills/fork-discipline/SKILL.md
- skills/git-workflow/SKILL.md
- skills/github-release/SKILL.md
- skills/github-release/references/release-workflow.md
- skills/github-release/references/safety-checklist.md
- skills/onboarding-ux/SKILL.md
- skills/project-docs/SKILL.md
- skills/project-health/SKILL.md
- skills/project-health/references/commit-hook.md
- skills/project-health/references/permission-presets.md
- skills/project-health/references/project-types.md
- skills/project-health/references/quality-criteria.md
- skills/project-health/references/templates.md
- skills/responsiveness-check/SKILL.md
- skills/responsiveness-check/references/breakpoints.md
- skills/responsiveness-check/references/report-template.md
- skills/roadmap/SKILL.md
- skills/team-update/SKILL.md
- skills/team-update/references/discovery-patterns.md
- skills/team-update/references/feedback-triage.md
- skills/team-update/references/message-composition.md
- skills/team-update/references/playbook-format.md
- skills/ux-audit/SKILL.md
- skills/ux-audit/references/a11y-automation.md
- skills/ux-audit/references/audit-config.md
- skills/ux-audit/references/audit-output-discipline.md
- skills/ux-audit/references/auth-expired-handling.md
- skills/ux-audit/references/browser-tools.md
- skills/ux-audit/references/data-seasoning.md
- skills/ux-audit/references/interaction-manifest.md
- skills/ux-audit/references/live-interaction-smoke.md
- skills/ux-audit/references/long-running-check-in-pattern.md
- skills/ux-audit/references/multi-pane-stress.md
- skills/ux-audit/references/perfection-checklist.md
- skills/ux-audit/references/performance-budget.md
- skills/ux-audit/references/persona-lock.md
- skills/ux-audit/references/playwright-killer-flows.md
- skills/ux-audit/references/project-adaptation.md
- skills/ux-audit/references/report-template.md
- skills/ux-audit/references/round-trip-workflows.md
- skills/ux-audit/references/scenario-tests.md
- skills/ux-audit/references/stress-test-recipes.md
- skills/ux-audit/references/visual-polish.md
- skills/ux-audit/references/walkthrough-checklist.md
- skills/ux-audit/references/workflow-comprehension.md
- skills/ux-compare/SKILL.md
- skills/ux-compare/references/comparison-template.md
- skills/ux-extract/SKILL.md
- skills/ux-extract/references/capture-checklist.md
- skills/ux-extract/references/pattern-library-template.md
- skills/vitest/SKILL.md
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
- codex-reviewjezwebRun an independent code review using the OpenAI Codex CLI in headless mode. Gets a second opinion from a different model family (the… No issuesEngineeringAI & agents1.1k
- fork-disciplinejezwebAudit and enforce the core/client boundary in multi-client projects. Detects where shared platform code is tangled with client-specific… No issuesEngineeringDocuments1.1k
- git-workflowjezwebGuided git workflows: prepare PRs, clean up branches, resolve merge conflicts, handle monorepo tags, squash-and-merge patterns. Use when… No issuesEngineeringProductivity1.1k
- github-releasejezwebPrepare and publish GitHub releases. Sanitizes code for public release (secrets scan, personal artifacts, LICENSE/README validation),… No issuesEngineeringSales & marketing1.1k