audit
On-demand security audit — OWASP, secrets, dependencies, IaC security
Initialize Shipyard project settings and directory structure
> /plugin marketplace add lgbarn/shipyard > /plugin install shipyard@shipyard
How it fires
How this command gets triggered: by you, by Claude, or both.
/initContext preview
What this command does when you run it.
Initialize Shipyard project settings and directory structure
description: "Initialize Shipyard project settings and directory structure" disable-model-invocation: true argument-hint: "[--fresh] — start over with a fresh .shipyard/ directory"
You are executing the Shipyard initialization workflow. Follow these steps precisely and in order.
<prerequisites>
Check if a `.shipyard/` directory already exists in the current project root.
Determine whether this is a **brownfield** (existing source code) or **greenfield** (empty/new project) by checking for source files and package manifests (e.g., `package.json`, `go.mod`, `Cargo.toml`, `requirements.txt`, `*.py`, `*.ts`, `*.go`, `*.rs`, etc.).
Also check if `docs/codebase/` exists and contains `.md` files. If it does, this means a previous `/shipyard:map` was run and committed — store this as `detected_codebase_path = "docs/codebase"` for use in Step 4.
This is used to tailor next-steps guidance in Step 5 and to set a smart default for `codebase_docs_path` — no codebase mapping or analysis is performed.
</prerequisites>
<execution>
Collect workflow preferences from the user using three `AskUserQuestion` calls. Each call stays within the 4-question limit. Wait for the user's answers before proceeding to the next batch.
Use `AskUserQuestion` with these 3 questions:
1. **Interaction style** — "Do you prefer interactive mode or autonomous mode?"
2. **Git tracking** — "How should Shipyard create commits?"
3. **Review depth** — "How thorough should review gates be?"
Use `AskUserQuestion` with these 4 questions:
4. **Security auditing** — "Should Shipyard run a security audit after each phase build?"
5. **Code simplification** — "Should Shipyard check for duplication and complexity after each phase?"
6. **IaC validation** — "Should Shipyard validate infrastructure-as-code files (Terraform, Ansible, Docker)?"
7. **Documentation generation** — "Should Shipyard generate documentation after each phase build?"
Use `AskUserQuestion` with these 3 questions:
8. **Codebase docs location** — "Where should Shipyard store codebase analysis docs?"
If a `docs/codebase/` directory with `.md` files was detected in Step 2, note this to the user and default to `docs/codebase`.
9. **Model routing** — "Which model routing strategy should Shipyard use for its agents?"
10. **Context loading** — "How much project context should Shipyard load at session start?"
After collecting all answers, write the following files:
Write `.shipyard/config.json` with the user's choices. Map answers to config keys:
A Claude Code plugin for structured project execution. Plan work in phases, build with parallel agents and TDD, review with security audits and quality gates, and ship with confidence.
Repo: lgbarn/shipyard
On-demand security audit — OWASP, secrets, dependencies, IaC security
Explore requirements through Socratic dialogue and capture project definition
Execute plans using fresh subagents with review gates
Investigate bugs and failures with systematic root-cause analysis