audit
On-demand security audit — OWASP, secrets, dependencies, IaC security
View or update Shipyard workflow settings
> /plugin marketplace add lgbarn/shipyard > /plugin install shipyard@shipyard
How it fires
How this command gets triggered: by you, by Claude, or both.
/settingsContext preview
What this command does when you run it.
View or update Shipyard workflow settings
description: "View or update Shipyard workflow settings" disable-model-invocation: true argument-hint: "[action] — list, or a key name to view/set (default: interactive)"
You are executing the Shipyard settings workflow. Follow these steps precisely.
<prerequisites>
Verify `.shipyard/config.json` exists. If not, tell the user: > "No Shipyard project found. Run `/shipyard:init` first to create a project and configure settings."
Then stop.
Read `.shipyard/config.json` and parse all fields.
Check if the user provided arguments:
</prerequisites>
<execution>
Display current settings as a readable summary:
Shipyard Settings (.shipyard/config.json)
Workflow:
Interaction mode: {interaction_mode}
Git strategy: {git_strategy}
Review depth: {review_depth}
Quality Gates:
Security audit: {security_audit}
Simplification review: {simplification_review}
IaC validation: {iac_validation}
Documentation: {documentation_generation}
Model Routing:
Architecture: {model_routing.architecture}
Building: {model_routing.building}
Review: {model_routing.review}
Planning: {model_routing.planning}
Validation: {model_routing.validation}
Security audit: {model_routing.security_audit}
Simplification: {model_routing.simplification}
Documentation: {model_routing.documentation}
Mapping: {model_routing.mapping}
Debugging: {model_routing.debugging}
Context:
Context tier: {context_tier}
Codebase docs path: {codebase_docs_path}Then use `AskUserQuestion` to ask: "Which settings category would you like to change?"
Based on the user's choice, present the relevant questions using `AskUserQuestion`:
Use `AskUserQuestion` with 3 questions (show current value in each question text):
1. **Interaction style** (currently: {interaction_mode}) — "Do you prefer interactive mode or autonomous mode?"
2. **Git tracking** (currently: {git_strategy}) — "How should Shipyard create commits?"
3. **Review depth** (currently: {review_depth}) — "How thorough should review gates be?"
Use `AskUserQuestion` with 4 questions (show current value in each question text):
1. **Security auditing** (currently: {security_audit}) — "Run security audit after each phase?"
2. **Code simplification** (currently: {simplification_review}) — "Check for duplication and complexity?"
3. **IaC validation** (currently: {iac_validation}) — "Validate infrastructure-as-code files?"
4. **Documentation** (currently: {documentation_generation}) — "Generate docs after each phase?"
Use `AskUserQuestion` with 1 question:
1. **Routing strategy** — "Which model routing strategy?"
If the user chooses `Custom`, use `AskUserQuestion` to ask about each agent role in batches of 4:
**Batch A** (4 questions): architecture, building, review, planning — each with options: haiku, sonnet, opus, keep current.
**Batch B** (4 questions): validation, security_audit, simplification, documentation — each with options: haiku, sonnet, opus, keep current.
**Batch C** (2 questions): mapping, debugging — each with options: haiku, sonnet, opus, keep current.
Use `AskUserQuestion` with 2 questions (show current value in each question text):
1. **Context tier** (currently: {context_tier}) — "How much context to load at session start?"
2. **Codebase docs path** (currently: {codebase_docs_path}) — "Where should codebase docs be stored?"
After collecting answers
A Claude Code plugin for structured project execution. Plan work in phases, build with parallel agents and TDD, review with security audits and quality gates, and ship with confidence.
Repo: lgbarn/shipyard
On-demand security audit — OWASP, secrets, dependencies, IaC security
Explore requirements through Socratic dialogue and capture project definition
Execute plans using fresh subagents with review gates
Investigate bugs and failures with systematic root-cause analysis