* feat(codex): add skill UI metadata
* Use official Trail of Bits logo
* fix: resolve code review findings for PR #175
Codex silently drops the icons as authored: its loader
(codex-rs/core-skills resolve_asset_path) requires icon paths
containing '..' to resolve under <plugin_root>/assets/, and the
repo-root .codex/assets location fails that containment check.
Verified empirically via codex app-server plugin/read: every
iconSmall/iconLarge came back null; only brand_color applied.
P1 fixed:
- Vendor trail-of-bits-mark.svg into plugins/<name>/assets/ for
all 38 plugins with skills and point every openai.yaml at
../../assets/trail-of-bits-mark.svg (the supported plugin-level
shared asset pattern). Icons now resolve for marketplace
installs too, since nothing escapes the plugin root.
- Drop the .codex/ additions: .codex/skills/gh-cli/agents/
openai.yaml resolved nowhere (.codex/skills is not a Codex
discovery root) and PR #173 removes the whole .codex/ tree
P2 fixed:
- Patch-bump all 38 touched plugins in plugin.json and
marketplace.json so installed clients pick up the metadata
Verified:
- Static check replicating Codex's resolution algorithm: all 73
yaml files resolve under their plugin assets/ and exist
- Live codex app-server probe: 71/72 loadable skills report
resolved iconSmall/iconLarge and brand_color #D83A34
(claude-in-chrome-troubleshooting fails to load on main due to
a pre-existing 64-char qualified-name limit, fixed by #173's
rename; zeroize-audit's manifest mcpServers object is likewise
a pre-existing Codex incompatibility fixed by #173)
- validate_codex_skills.py, validate_plugin_metadata.py, prek all
pass
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* fix(codex): use skill-local icon assets
---------
Co-authored-by: Dan Guido <dan@trailofbits.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* sync skill with claude-code-devcontainer repo
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* devcontainer-setup: apply ruff format and shfmt
The pre-commit hook was failing on these two files in CI: ruff joins
the multi-line f-strings in post_install.py, and shfmt with the repo's
'-i 2 -ci' flags adjusts case-body indentation in install.sh.
No behavior change.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Dan Guido <dan@trailofbits.com>
- Add initializeCommand to create ~/.gitconfig if missing (prevents bind mount failure)
- Add trailofbits/skills-curated marketplace plugin to Dockerfile
- Update SKILL.md to document the new marketplace plugin
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Add devcontainer-setup plugin for Claude Code development environments
Creates pre-configured devcontainers with Claude Code and language-specific
tooling. Supports Python, Node/TypeScript, Rust, and Go projects with
automatic detection and configuration.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* Add plugin to marketplace list
* Fix the post install command
* Fix YARN installation
* Install fzf from GitHub and add plugin marketplaces
- Install fzf from GitHub releases instead of apt (Ubuntu 24.04's apt
version lacks shell integration)
- Add Claude plugin marketplace setup for anthropics/skills and
trailofbits/skills in post_install.py
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* Fix linting issues in devcontainer-setup plugin
- Use contextlib.suppress instead of try-except-pass (SIM105)
- Fix case statement indentation in install.sh for shfmt
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* Exclude /home/vscode from hardcoded path check
Standard devcontainer user path should not be flagged as a
personal hardcoded path.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* Sync devcontainer-setup with upstream claude-code-devcontainer
Sync resources with https://github.com/trailofbits/claude-code-devcontainer:
- Add Python 3.13 via uv and Node 22 via fnm to base Dockerfile
- Add ast-grep for AST-based code search
- Include network isolation tools (iptables, ipset) by default
- Add Tailscale feature for secure networking
- Add NPM security settings (ignore-scripts, 24-hour release delay)
- Add init: true and updateRemoteUserUID: true to devcontainer.json
- Expand .zshrc with fnm integration, fzf config, and more aliases
- Update post_install.py to print to stderr and add ghostty terminal features
- Integrate delta config into .gitconfig.local
- Move marketplace plugin installation from post_install.py to Dockerfile
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* Sync devcontainer-setup resources with upstream
Align with https://github.com/trailofbits/claude-code-devcontainer:
- Move PATH env before Claude install
- Remove -p fzf from Oh My Zsh, download fzf shell integration separately
- Add FZF_VERSION arg for shell integration download
- Use uv run --no-project for post_install.py
- Add fzf sourcing to .zshrc
- Add symlink resolution and update command to install.sh
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* Address PR review comments and sync with upstream devcontainer
DarkaMaul's review comments:
- Restore SHA256 hash on base image for reproducibility
- Sort apt packages alphabetically within category groups
- Install fzf from GitHub releases (v0.67.0) instead of old apt package
- Remove Tailscale feature (not generic enough for template)
Upstream sync (3 new commits from claude-code-devcontainer):
- Add bubblewrap and socat for Claude Code sandboxing
- Add exec, upgrade, and mount commands to devc CLI
- Mount .devcontainer/ read-only to prevent container escape on rebuild
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* Harden devcontainer templates from multi-agent review findings
- Pin uv to 0.10.0 with SHA256 digest (supply chain security)
- Add SYS_ADMIN capability guard to install.sh (prevents defeating
read-only .devcontainer mount)
- Fix mount filter to use target paths instead of source prefixes
(was broken when PROJECT_SLUG was substituted)
- Fix temp file leak in extract_mounts_to_file
- Remove claude-yolo alias (unsafe pattern for a template)
- Remove dead POWERLEVEL9K_DISABLE_GITSTATUS and NODE_OPTIONS configs
- Remove unnecessary terminal profile definitions
- Default timezone to UTC instead of America/New_York
- Remove stale Tailscale reference from SKILL.md
- Fix line length violations throughout install.sh
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* Restore claude-yolo alias and POWERLEVEL9K_DISABLE_GITSTATUS
The claude-yolo alias is intentional for devcontainer use.
POWERLEVEL9K_DISABLE_GITSTATUS is needed because zsh-in-docker
installs Powerlevel10k, whose gitstatus can be slow in large repos.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* Restore NODE_OPTIONS, terminal profiles, and re-clone URL
NODE_OPTIONS 4GB heap is intentional for Claude Code in containers.
Terminal profiles are useful in VS Code dropdown. Re-clone message
needs the full URL to be actionable.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Dan Guido <dan@trailofbits.com>
Lixin2026