تشغيل أي مهارة في Manus بنقرة واحدة

22-substitution-frontmatter

النجوم٠

التفرعات٠

آخر تحديث٢٦ مايو ٢٠٢٦ في ٠٢:٥٥

Single-quote isolation probe to fill team-report §1.2 unverified cells. Tests Claude Code pre-substitution in plugin-level hook + skill frontmatter hook + skill body for SESSION_ID, PROJECT_DIR, SKILL_DIR, and user_config.KEY.

التثبيت

التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.

تشغيل في Manus

المصدر

kazukinagata

kazukinagata/analyzing-claude-plugin

فتح مستودع GitHub عرض مستودعات المنشئ

تنزيل

تشغيل في Manus

المهن ذات الصلةSOC

استنادا إلى تصنيف SOC المهني

محللو ضمان جودة البرمجيات والمختبرونمهن الحاسوب والرياضيات·SOC 15-1253

SKILL.md

readonly

name	22-substitution-frontmatter
description	Single-quote isolation probe to fill team-report §1.2 unverified cells. Tests Claude Code pre-substitution in plugin-level hook + skill frontmatter hook + skill body for SESSION_ID, PROJECT_DIR, SKILL_DIR, and user_config.KEY.
user-invocable	true
hooks	{"PreToolUse":[{"matcher":"Bash","hooks":[{"type":"command","command":"\"${CLAUDE_PLUGIN_ROOT}/hooks/subst-probe.sh\" fm SESSION_ID '${CLAUDE_SESSION_ID}'"},{"type":"command","command":"\"${CLAUDE_PLUGIN_ROOT}/hooks/subst-probe.sh\" fm PROJECT_DIR '${CLAUDE_PROJECT_DIR}'"},{"type":"command","command":"\"${CLAUDE_PLUGIN_ROOT}/hooks/subst-probe.sh\" fm SKILL_DIR '${CLAUDE_SKILL_DIR}'"}]}]}

22-substitution-frontmatter

§1.2 マトリクスの未検証セルを single-quote isolation で観測する probe。

観測の仕組み

'${CLAUDE_SESSION_ID}' のように single-quote 内に ${VAR} を書くと：

事前置換あり → Claude Code 本体が string を書き換え、shell には実値が渡る → log に実値
事前置換なし → string そのまま shell に渡る、single-quote で shell expansion 抑止 → log に literal ${...}

期待結果（v2.1.146 推測）：

tier	SESSION_ID	PROJECT_DIR	SKILL_DIR	user_config.KEY
plugin-level	?	✅	?	✅
frontmatter	?	?	?	—
body	✅	✅	✅	?

step 1: body tier の事前置換を観測 + 直近 log を表示

proj="${CLAUDE_PROJECT_DIR:-$PWD}"
ver="${VERIFIER_VERSION_DIR:-v-unknown}"
out_dir="$proj/findings/$ver/probe-22"
mkdir -p "$out_dir"

# body tier — single-quote isolation
echo '[BODY] USER_CONFIG_HELLO=${user_config.hello_message}' >> "$out_dir/subst.log"
echo '[BODY] USER_CONFIG_API=${user_config.api_secret}' >> "$out_dir/subst.log"
echo '[BODY] SESSION_ID=${CLAUDE_SESSION_ID}' >> "$out_dir/subst.log"
echo '[BODY] PROJECT_DIR=${CLAUDE_PROJECT_DIR}' >> "$out_dir/subst.log"
echo '[BODY] SKILL_DIR=${CLAUDE_SKILL_DIR}' >> "$out_dir/subst.log"

# show all results
echo "=== subst.log (tier=plugin: SessionStart 経路, tier=fm: 自スキル frontmatter 経路, tier=body: 直前 echo) ==="
cat "$out_dir/subst.log"

判定ロジック

各行を見て：

値が UUID (例: 9307ae27-...) → 事前置換 ✅
値が絶対パス (例: /home/...) → 事前置換 ✅
値が空 → 事前置換 ✅ だが値が unset
値が literal ${CLAUDE_SESSION_ID} 等 → 事前置換 ❌

完了したら exit。

المزيد من هذا المستودع

نفس المستودع

data-persist

kazukinagata/analyzing-claude-plugin

Mac Cowork で、plugin-level SessionStart hook(host 側)から $CLAUDE_PLUGIN_DATA に書いた値が「別の chat session を跨いで」残るかを検証する probe。書き込み＆読み戻しは hook(persist.sh)側で行い、その結果は SessionStart の stdout として context に出る。この skill body は対比用に「VM Bash 側から DATA が見えるか／hook が書いたファイルを読めるか」を確認する。

2026-06-010

show-upe

kazukinagata/analyzing-claude-plugin

Surfaces UPE_PROBE_* marker lines to test whether the plugin-level UserPromptExpansion hook fires on Cowork. Invoking this skill via slash is itself the trigger; compares against UserPromptSubmit and SessionStart controls.

2026-05-300

run-pretooluse-probe

kazukinagata/analyzing-claude-plugin

Triggers the plugin-level PreToolUse hooks by running a sentinel bash command, to test (via session export) whether Cowork runs PreToolUse hook commands through cmd.exe or a POSIX shell, and whether the inline block pattern actually blocks the bash tool.

2026-05-300

show-exec-form

kazukinagata/analyzing-claude-plugin

Surfaces the EXEC_* marker lines emitted by the plugin-level SessionStart hooks, which run hook commands in EXEC FORM (args present). Used to test whether exec form resolves ${CLAUDE_PLUGIN_ROOT} to a real path and exports it as an env var on Cowork, where shell form (§2.1/§2.2) failed both.

2026-05-290

bodypath

kazukinagata/analyzing-claude-plugin

Shows what skill-body CLAUDE_PLUGIN_ROOT and friends substitute to on Mac Cowork, whether the VM Bash tool can use that path, and whether the Read tool can read a bundled file at that host path.

2026-05-290

fm-bashblock

kazukinagata/analyzing-claude-plugin

Proves whether a skill frontmatter PreToolUse Bash hook fires on Cowork by emitting only a block decision (no echo). A marked bash should be blocked even though no frontmatter stdout surfaces.

2026-05-290

22-substitution-frontmatter

§1.2 マトリクスの未検証セルを single-quote isolation で観測する probe。

観測の仕組み

'${CLAUDE_SESSION_ID}' のように single-quote 内に ${VAR} を書くと：

事前置換あり → Claude Code 本体が string を書き換え、shell には実値が渡る → log に実値

事前置換なし → string そのまま shell に渡る、single-quote で shell expansion 抑止 → log に literal ${...}

期待結果（v2.1.146 推測）：

tier

SESSION_ID

PROJECT_DIR

SKILL_DIR

user_config.KEY

plugin-level

✅

frontmatter

—

body

✅

step 1: body tier の事前置換を観測 + 直近 log を表示

proj="${CLAUDE_PROJECT_DIR:-$PWD}" ver="${VERIFIER_VERSION_DIR:-v-unknown}" out_dir="$proj/findings/$ver/probe-22" mkdir -p "$out_dir" # body tier — single-quote isolation echo '[BODY] USER_CONFIG_HELLO=${user_config.hello_message}' >> "$out_dir/subst.log" echo '[BODY] USER_CONFIG_API=${user_config.api_secret}' >> "$out_dir/subst.log" echo '[BODY] SESSION_ID=${CLAUDE_SESSION_ID}' >> "$out_dir/subst.log" echo '[BODY] PROJECT_DIR=${CLAUDE_PROJECT_DIR}' >> "$out_dir/subst.log" echo '[BODY] SKILL_DIR=${CLAUDE_SKILL_DIR}' >> "$out_dir/subst.log" # show all results echo "=== subst.log (tier=plugin: SessionStart 経路, tier=fm: 自スキル frontmatter 経路, tier=body: 直前 echo) ===" cat "$out_dir/subst.log"

判定ロジック

各行を見て：

値が UUID (例: 9307ae27-...) → 事前置換 ✅

値が絶対パス (例: /home/...) → 事前置換 ✅

値が空 → 事前置換 ✅ だが値が unset

値が literal ${CLAUDE_SESSION_ID} 等 → 事前置換 ❌

完了したら exit。