$git clone https://github.com/siva01c/claude-pluginsClaude Code plugin marketplace: Drupal development, DDEV, Docker, CI/CD, git workflows, and OWASP ASVS security
| 1 | # Claude Code Plugin Marketplace |
| 2 | |
| 3 | A curated collection of [Claude Code](https://claude.com/claude-code) plugins for **Drupal development, security, and deployment**. Each plugin covers one topic — Drupal itself, DDEV, Docker, CI/CD, git workflows, and security verification — so you install only what you need. |
| 4 | |
| 5 | ## Repository |
| 6 | |
| 7 | [https://github.com/siva01c/claude-plugins](https://github.com/siva01c/claude-plugins) |
| 8 | |
| 9 | ## Available Plugins |
| 10 | |
| 11 | | Plugin | Version | Contents | |
| 12 | |---|---|---| |
| 13 | | [drupal-dev-tools](drupal-dev-tools/) | 4.0.0 | `/drupal-dev-tools:drupal` audit command, skills: module development, security review | |
| 14 | | [ddev-tools](ddev-tools/) | 1.0.0 | `drupal-ddev` agent, skill: DDEV operations for Drupal projects | |
| 15 | | [git-tools](git-tools/) | 1.0.0 | Skill: git worktrees for parallel, conflict-free work | |
| 16 | | [security-tools](security-tools/) | 1.0.0 | Skill: OWASP ASVS v5.0 checklist mapped to Drupal 11 APIs | |
| 17 | | [docker-tools](docker-tools/) | 1.0.0 | Skills: Docker Compose for Drupal stacks, Docker Model Runner for local AI models | |
| 18 | | [cicd-tools](cicd-tools/) | 1.0.0 | Skills: GitLab CI and GitHub Actions pipelines for Drupal projects | |
| 19 | | [workflow-tools](workflow-tools/) | 1.0.0 | Skills: phased feature/deploy workflows and a tiny-fix path, rigor scaled to risk | |
| 20 | |
| 21 | ### drupal-dev-tools |
| 22 | |
| 23 | Comprehensive Drupal 11 toolkit: |
| 24 | |
| 25 | - **Slash command `/drupal-dev-tools:drupal`** — full code audit of custom themes and modules: Drupal 11 standards, security (SQL injection, XSS, unsafe input), SOLID/DRY design review, duplication, refactoring recommendations. |
| 26 | - **Skills** — `drupal-module-development`, `drupal-security-review`. |
| 27 | |
| 28 | ### ddev-tools |
| 29 | |
| 30 | DDEV is a multiplatform local development environment (built on Docker), so it has its own plugin: |
| 31 | |
| 32 | - **Agent `drupal-ddev`** — manages DDEV-based Drupal 11 projects: modules, configuration, database operations, caches, Composer workflows. |
| 33 | - **`drupal-ddev-operations`** — safe operational workflows for Drupal in DDEV: backup-first updates, database/config import-export, troubleshooting. |
| 34 | |
| 35 | ### git-tools |
| 36 | |
| 37 | - **`git-worktree`** — check out multiple branches into separate directories so parallel tasks (or parallel Claude sessions) never conflict. Covers create/list/remove/move/repair, agent workflow, and safety rules. |
| 38 | |
| 39 | ### security-tools |
| 40 | |
| 41 | - **`owasp-asvs`** — OWASP ASVS v5.0 verification checklist (V1–V14) with every requirement mapped to Drupal 11 APIs (`Xss::filter()`, Query Builder, Flood control, Key module…), critical security patterns in PHP, red-flags table, and recommended Drupal security modules. |
| 42 | |
| 43 | ### docker-tools |
| 44 | |
| 45 | - **`docker-compose`** — compose.yaml authoring and operations with a Drupal stack (php-fpm, nginx, MariaDB, Redis) as the working example: healthchecks, depends_on conditions, dev/prod override files, profiles, troubleshooting. |
| 46 | - **`docker-model`** — Docker Model Runner: pull/run local AI models, OpenAI-compatible endpoints, the Compose `models:` element, and using it as a local backend for the Drupal AI module. |
| 47 | |
| 48 | ### cicd-tools |
| 49 | |
| 50 | - **`gitlab-ci`** — `.gitlab-ci.yml` authoring for Drupal: composer caching, phpcs/phpstan/phpunit jobs with a MariaDB service, `rules:`, environments, and drush-based deployment. |
| 51 | - **`github-actions`** — workflows for Drupal: least-privilege permissions, concurrency, matrix PHP builds, database services, reusable workflows, and SSH/drush deployment. |
| 52 | |
| 53 | ### workflow-tools |
| 54 | |
| 55 | Phased development workflows that orchestrate the other plugins' skills, with rigor scaled to the risk of the task: |
| 56 | |
| 57 | - **`feature-workflow`** — gated plan → implement → review → test → finalize procedure for non-trivial Drupal changes. Classifies the task first (standard / security-sensitive / schema-touching) and adds a mandatory security pass or update-hook requirement accordingly. Uses `drupal-module-development`, the `/drupal-dev-tools:drupal` audit, and `owasp-asvs` when those plugins are installed, with documented manual fallbacks when they are not. |
| 58 | - **`deploy-workflow`** — safe deployment sequence: pre-flight config-status check, mandatory backup, `composer install` → `drush updb` → `drush cim` → `drush cr` (or `drush deploy`), post-deploy verification, and a rollback plan. Covers per-site update passes for multisite releases. |
| 59 | - **`tiny-fix`** — deliberately minimal path for typos, CSS tweaks, and single-line changes, with an escalation tripwire to `feature-workflow` the moment a change touches logic, config, security, or schema. |
| 60 | |
| 61 | ## Installation |
| 62 | |
| 63 | ### Step 1: Add the Marketplace |
| 64 | |
| 65 | In Claude Code, run the following command to add this plugin marketplace: |
| 66 | |
| 67 | ``` |
| 68 | /plugin marketplace add siva01c/claude-plugins |
| 69 | ``` |
| 70 | |
| 71 | ### Step 2: List Available Plugins |
| 72 | |
| 73 | View all plugins available in the marketplace: |
| 74 | |
| 75 | ``` |
| 76 | /plugin marketplace list |
| 77 | ``` |
| 78 | |
| 79 | ### Step 3: Install Plugins |
| 80 | |
| 81 | Install any plugin with `/plugin install <plugin-name>@<marketplace-name>`: |
| 82 | |
| 83 | ``` |
| 84 | /plugin install drupal-dev-tools@dev-tools |
| 85 | /plugin install ddev-tools@dev-tools |
| 86 | /plugin install git-tools@dev-tools |
| 87 | /plugin install securi |