claudelint
skill
Fail
Health Warn
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 5 GitHub stars
Code Fail
- child_process — Shell command execution capability in .claude-plugin/scripts/check-dependency.js
- execSync — Synchronous shell command execution in .claude-plugin/scripts/check-dependency.js
Permissions Pass
- Permissions — No dangerous permissions requested
Purpose
This is a linter and validation tool for Claude Code projects. It checks and enforces configuration standards across project files like CLAUDE.md, settings, hooks, and plugins.
Security Assessment
The tool uses synchronous shell command execution (`execSync` via `child_process`) in its dependency checking scripts. While this is a common pattern for CLI tools to check system requirements, it does introduce command injection risk if inputs are not properly sanitized. No hardcoded secrets were found, and the tool doesn't request dangerous permissions. Overall risk is Medium — the shell execution capability warrants attention but appears to be used for standard dependency checks rather than arbitrary command execution.
Quality Assessment
The project is actively maintained (last push was today) and properly licensed under MIT. It has CI/CD setup with code coverage tracking, and a dedicated documentation site. However, it has very low community adoption with only 5 GitHub stars, meaning it hasn't been widely reviewed or battle-tested. The codebase includes structured testing and clear documentation, which are positive quality indicators. The npm package is published and installable. Compatible CLIs are listed as unknown.
Verdict
Use with caution — the tool appears well-structured and actively maintained, but the low community adoption and shell execution capability mean you should review the dependency checking scripts before running in production environments. Appropriate for individual developer use with standard precautions.
This is a linter and validation tool for Claude Code projects. It checks and enforces configuration standards across project files like CLAUDE.md, settings, hooks, and plugins.
Security Assessment
The tool uses synchronous shell command execution (`execSync` via `child_process`) in its dependency checking scripts. While this is a common pattern for CLI tools to check system requirements, it does introduce command injection risk if inputs are not properly sanitized. No hardcoded secrets were found, and the tool doesn't request dangerous permissions. Overall risk is Medium — the shell execution capability warrants attention but appears to be used for standard dependency checks rather than arbitrary command execution.
Quality Assessment
The project is actively maintained (last push was today) and properly licensed under MIT. It has CI/CD setup with code coverage tracking, and a dedicated documentation site. However, it has very low community adoption with only 5 GitHub stars, meaning it hasn't been widely reviewed or battle-tested. The codebase includes structured testing and clear documentation, which are positive quality indicators. The npm package is published and installable. Compatible CLIs are listed as unknown.
Verdict
Use with caution — the tool appears well-structured and actively maintained, but the low community adoption and shell execution capability mean you should review the dependency checking scripts before running in production environments. Appropriate for individual developer use with standard precautions.
A linter for Claude Code projects. Validates CLAUDE.md files, skills, settings, hooks, MCP servers, and plugins.
README.md
claudelint
A linter for Claude Code projects. Validates CLAUDE.md files, skills, settings, hooks, MCP servers, plugins, and more.
Quick Start
Install
npm install -g claude-code-lint
claudelint init # Creates .claudelintrc.json and .claudelintignore
claudelint check-all # Validate your project
Or install as a project dependency:
npm install --save-dev claude-code-lint
npx claudelint init
npx claudelint check-all
Claude Code Plugin
Use claudelint as a Claude Code plugin for interactive validation via slash commands.
Inside Claude Code, add the marketplace and install the plugin:
/plugin marketplace add pdugan20/claudelint
/plugin install claudelint@pdugan20-plugins
Or run claudelint install-plugin for guided setup.
See the Plugin Guide for team setup, plugin scopes, and troubleshooting.
What It Checks
- CLAUDE.md -- Size limits, import syntax, circular references, frontmatter
- Skills -- Frontmatter schema, structure, referenced files, security
- Settings -- JSON schema, permissions, tool names, hook configuration
- Hooks -- Event names, script existence, type validation
- MCP Servers -- Transport types, URLs, environment variables
- Plugins -- Manifest schema, directory structure, cross-references
CLI
claudelint check-all # Validate everything
claudelint check-all --fix # Auto-fix issues
claudelint check-all --strict # Zero-tolerance mode
claudelint validate-skills --path . # Validate specific component
claudelint list-rules # Browse all rules
claudelint format --check # Check formatting
Plugin Skills
After installing as a plugin, use skills via /skill-name or natural language:
| Skill | Description |
|---|---|
validate-all |
Validate all project files |
validate-cc-md |
Validate CLAUDE.md files |
validate-skills |
Validate skill structure and content |
validate-settings |
Validate settings.json |
validate-hooks |
Validate hooks.json |
validate-mcp |
Validate MCP server configuration |
validate-plugin |
Validate plugin.json manifest |
format-cc |
Format Claude Code files |
optimize-cc-md |
Interactively optimize CLAUDE.md |
Documentation
Full documentation is available at claudelint.com.
Rule documentation is auto-generated from inline metadata in each rule's source code. Run npm run docs:generate to regenerate pages after modifying rules.
Quick Links
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found