From hydra-config-shield
Use when the developer asks about repository config safety, malicious config files, or session-start scan results. Auto-triggers on: "config scan", "repo safety", "malicious config", "CVE-2025-59536", "config poisoning", "session start scan", "config-check".
How this skill is triggered — by the user, by Claude, or both
Slash command
/hydra-config-shield:config-awarenessThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
<purpose>
<decision_tree> IF user asks about session-start findings: → Read ${CLAUDE_PLUGIN_ROOT}/state/audit.jsonl → grep for "config_attack_detected" events → Show: file, CVE, severity, description, attack scenario → Provide remediation
IF user asks for deep config analysis: → Run: python3 ${CLAUDE_PLUGIN_ROOT}/../../shared/scripts/config-scanner.py . → Show detailed findings including base64 decode results → Check for hidden Unicode characters
IF user asks about a specific CVE: → Explain the CVE attack vector → Show which config files are affected → Provide specific remediation
IF no findings: → "No suspicious config files detected at session start." → "Config-shield scans: .claude/, .vscode/, .devcontainer/, package.json, .npmrc, .mcp.json" </decision_tree>
<output_format>
CVE-2025-59536: .claude/settings.json contains hooks with shell commands
...
<escalate_to_sonnet> IF base64-encoded payloads found in config files: "ESCALATE_TO_SONNET: obfuscated payload in config — deep decode analysis needed" IF hidden Unicode characters found: "ESCALATE_TO_SONNET: Rules File Backdoor attack pattern — prompt injection analysis needed" </escalate_to_sonnet>
npx claudepluginhub enchanter-ai/hydra --plugin config-shieldProvides UI/UX resources: 50+ styles, color palettes, font pairings, guidelines, charts for web/mobile across React, Next.js, Vue, Svelte, Tailwind, React Native, Flutter. Aids planning, building, reviewing interfaces.
Fetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.