Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

21-cowork-connected-folder

Estrellas0

Forks0

Actualizado26 de mayo de 2026 a las 03:02

§2.9. Cowork sandbox limits write/edit/bash to outputs/ by default; plugin dir is read-only; request_cowork_directory grants RW to arbitrary host folders.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

kazukinagata

kazukinagata/analyzing-claude-plugin

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de garantía de calidad de software y probadoresOcupaciones informáticas y matemáticas·SOC 15-1253

SKILL.md

readonly

name	21-cowork-connected-folder
description	§2.9. Cowork sandbox limits write/edit/bash to outputs/ by default; plugin dir is read-only; request_cowork_directory grants RW to arbitrary host folders.
user-invocable	true

21-cowork-connected-folder

§2.9 — 接続フォルダの権限境界。

step 1: alive-check と write 試行

proj="${CLAUDE_PROJECT_DIR:-$PWD}"
ver="${VERIFIER_VERSION_DIR:-v-unknown}"
sid="${CLAUDE_SESSION_ID:-no-sid}"
out_dir="$proj/findings/$ver/$sid"
mkdir -p "$out_dir"
{
  printf '[21-BODY %s] tag=alive-check\n' "$(date -Iseconds)"
  printf '[21-BODY] CLAUDE_PROJECT_DIR=[%s]\n' "${CLAUDE_PROJECT_DIR-(unset)}"
  printf '[21-BODY] CLAUDE_PLUGIN_ROOT=[%s]\n' "${CLAUDE_PLUGIN_ROOT-(unset)}"
} | tee -a "$out_dir/probe.log"
mkdir -p "${CLAUDE_PROJECT_DIR}/outputs" 2>/dev/null
echo
echo "=== Write trial: outputs/ (expected OK on Cowork) ===" | tee -a "$out_dir/probe.log"
{ echo "test-21-outputs" > "${CLAUDE_PROJECT_DIR}/outputs/canary-21.txt" 2>&1 && echo "outputs write: OK" || echo "outputs write: FAIL"; } | tee -a "$out_dir/probe.log"
echo
echo "=== Write trial: plugin dir (expected FAIL on Cowork) ===" | tee -a "$out_dir/probe.log"
{ echo "test-21-plugin" > "${CLAUDE_PLUGIN_ROOT}/canary-21.txt" 2>&1 && echo "plugin-dir write: OK" || echo "plugin-dir write: FAIL"; } | tee -a "$out_dir/probe.log"

step 2: Cowork で request_cowork_directory tool 試行（あれば）

Claude にお願いしてください：「~ への request_cowork_directory を実行して、承認したら ~/canary-21-host.txt に書き込みテストして」（Cowork 環境でのみ動作）。

完了して exit、./scripts/assert.sh 21。

Más de este repositorio

mismo repositorio

data-persist

kazukinagata/analyzing-claude-plugin

Mac Cowork で、plugin-level SessionStart hook(host 側)から $CLAUDE_PLUGIN_DATA に書いた値が「別の chat session を跨いで」残るかを検証する probe。書き込み＆読み戻しは hook(persist.sh)側で行い、その結果は SessionStart の stdout として context に出る。この skill body は対比用に「VM Bash 側から DATA が見えるか／hook が書いたファイルを読めるか」を確認する。

2026-06-010

show-upe

kazukinagata/analyzing-claude-plugin

Surfaces UPE_PROBE_* marker lines to test whether the plugin-level UserPromptExpansion hook fires on Cowork. Invoking this skill via slash is itself the trigger; compares against UserPromptSubmit and SessionStart controls.

2026-05-300

run-pretooluse-probe

kazukinagata/analyzing-claude-plugin

Triggers the plugin-level PreToolUse hooks by running a sentinel bash command, to test (via session export) whether Cowork runs PreToolUse hook commands through cmd.exe or a POSIX shell, and whether the inline block pattern actually blocks the bash tool.

2026-05-300

show-exec-form

kazukinagata/analyzing-claude-plugin

Surfaces the EXEC_* marker lines emitted by the plugin-level SessionStart hooks, which run hook commands in EXEC FORM (args present). Used to test whether exec form resolves ${CLAUDE_PLUGIN_ROOT} to a real path and exports it as an env var on Cowork, where shell form (§2.1/§2.2) failed both.

2026-05-290

bodypath

kazukinagata/analyzing-claude-plugin

Shows what skill-body CLAUDE_PLUGIN_ROOT and friends substitute to on Mac Cowork, whether the VM Bash tool can use that path, and whether the Read tool can read a bundled file at that host path.

2026-05-290

fm-bashblock

kazukinagata/analyzing-claude-plugin

Proves whether a skill frontmatter PreToolUse Bash hook fires on Cowork by emitting only a block decision (no echo). A marked bash should be blocked even though no frontmatter stdout surfaces.

2026-05-290

name	21-cowork-connected-folder
description	§2.9. Cowork sandbox limits write/edit/bash to outputs/ by default; plugin dir is read-only; request_cowork_directory grants RW to arbitrary host folders.
user-invocable	true

21-cowork-connected-folder

§2.9 — 接続フォルダの権限境界。

step 1: alive-check と write 試行

proj="${CLAUDE_PROJECT_DIR:-$PWD}"
ver="${VERIFIER_VERSION_DIR:-v-unknown}"
sid="${CLAUDE_SESSION_ID:-no-sid}"
out_dir="$proj/findings/$ver/$sid"
mkdir -p "$out_dir"
{
  printf '[21-BODY %s] tag=alive-check\n' "$(date -Iseconds)"
  printf '[21-BODY] CLAUDE_PROJECT_DIR=[%s]\n' "${CLAUDE_PROJECT_DIR-(unset)}"
  printf '[21-BODY] CLAUDE_PLUGIN_ROOT=[%s]\n' "${CLAUDE_PLUGIN_ROOT-(unset)}"
} | tee -a "$out_dir/probe.log"
mkdir -p "${CLAUDE_PROJECT_DIR}/outputs" 2>/dev/null
echo
echo "=== Write trial: outputs/ (expected OK on Cowork) ===" | tee -a "$out_dir/probe.log"
{ echo "test-21-outputs" > "${CLAUDE_PROJECT_DIR}/outputs/canary-21.txt" 2>&1 && echo "outputs write: OK" || echo "outputs write: FAIL"; } | tee -a "$out_dir/probe.log"
echo
echo "=== Write trial: plugin dir (expected FAIL on Cowork) ===" | tee -a "$out_dir/probe.log"
{ echo "test-21-plugin" > "${CLAUDE_PLUGIN_ROOT}/canary-21.txt" 2>&1 && echo "plugin-dir write: OK" || echo "plugin-dir write: FAIL"; } | tee -a "$out_dir/probe.log"

step 2: Cowork で request_cowork_directory tool 試行（あれば）

完了して exit、./scripts/assert.sh 21。