claude

render-policy

Two skills for rendering agent output safely: replace innerHTML with render-policy's sanitize-into-a-fragment renderers for plain DOM, React and Angular, with image, link and host policies, streaming and ESLint rules; and lint the CSP and tool metadata an MCP App declares before you publish it.

3,741 on GitHubby shteynuv0.1.6MITupdated 2 days agosecurity
/

Plugin render-policy from marketplace buildwithclaude in davepoon/buildwithclaude. Commands read from the repo's manifest — yesterday.

What it installs

Skills (2)

  • mcp-app-csp

    Check and fix the security metadata of an MCP App (MCP Apps / SEP-1865 UI resources) with mcp-app-lint. Use when building, reviewing or publishing an MCP server that serves ui:// resources with MIME type text/html;profile=mcp-app, declares _meta.ui.csp (connectDomains, resourceDomains, frameDomains,

  • safe-agent-html

    Render Markdown or HTML that an LLM, agent or tool produced without innerHTML, dangerouslySetInnerHTML or [innerHTML]. Use when writing or reviewing frontend code that displays model output, chat messages, tool results or other agent-generated content in the DOM (plain DOM, React, Angular), includin

View source on GitHub buildwithclaude.com

More from davepoon/buildwithclaude

All 277 plugins →

Complete collection of ~110 Claude Code skills across document processing, development, automation, CRM, DevOps, and more

200 skills

3,741

Complete collection of 174 slash commands across 22 categories

177 commands

3,741

Complete collection of 117 specialized AI agents across 11 categories

117 agents

3,741

gsd

claude

Get Shit Done -- a structured workflow plugin for Claude Code that adds planning, execution, and verification commands with MCP-backed project state

83 skills · 33 agents · 1 MCP server

3,741

forge

claude

Full-lifecycle SDLC orchestrator: a 12-stage pipeline (SRS, architecture, spec, plan, build, eval, deploy, monitor, release) driven by specialized agents, persistent cross-session memory, auto-reflection, gate enforcement, and semantic skill mining that proposes new skills from recurring workflows.

45 skills · 27 agents · hooks

3,741

suede-skills

claudecodex

74 skills for Claude Code and Codex. A build DAG researches your repo, fans out disjoint lanes, and refutes its own review before anything lands. A blunt A-F ship grade blocks the bad merge instead of complimenting it. The same folder designs the page, writes the copy, and ships native iOS and Android builds.

70 skills · 1 MCP server

3,741

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

hookify

claude

Easily create custom hooks to prevent unwanted behaviors by analyzing conversation patterns or from explicit instructions. Define rules via simple markdown files.

1 skill · 4 commands · 1 agent · hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Generate natively editable PPTX from PDF / DOCX / URL / Markdown — real DrawingML shapes, text boxes, charts, and animations. Note: run `pip install -r requirements.txt` inside the installed plugin directory for the Python post-processing scripts to work.

1 skill

hugohe3/ppt-master 76,375

obsidian

claude

Claude Skills for Obsidian

6 skills

kepano/obsidian-skills 51,587

Maintain render-policy?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins277 plugins