不仅仅是代码助手：用 Plugins 将 Claude Code 打造成你的专属工具链 - 概念篇(1/4)

张三：“Claude，帮我分析 PROJ-1234 这个支付超时问题的根因。”

AI 助手：
1. [自动查询 JIRA] 获取问题描述和用户反馈
2. [自动搜索 GitLab] 定位支付模块最近的代码变更
3. [自动查询 Grafana] 获取问题时间段的性能指标
4. [自动检索 Confluence] 查找相关技术文档

综合分析结果：
问题根因：上周三的提交 a3f9c2b 将支付网关超时配置从 5s 改为 3s，
在高并发场景下导致偶发超时。同时监控显示该时段第三方支付接口
P99 延迟达到 3.2s，超过了新的超时阈值。

建议方案：
1. 将超时配置回退到 5s 或调整为 8s
2. 添加重试机制和降级策略
3. 与第三方支付确认其 SLA 保障

需要我帮你创建修复 PR 吗？

---
name: review-pr
description: Automated Pull Request review
tags: [code-review, git]
---

# Pull Request Review Instructions

You are helping review a Pull Request. Follow these steps:

1. **Analyze Changes**
   - Read the git diff
   - Identify modified files and functions

2. **Check Standards**
   - Compare against style guide: ./docs/CODE_STYLE.md
   - Verify test coverage requirements

3. **Security Scan**
   - Check for hardcoded credentials
   - Identify potential SQL injection risks

4. **Generate Report**
   Format findings as:
   ✅ Passed checks
   ⚠️ Warnings
   ❌ Must fix before merge

# security-reviewer subagent 的专业化配置
{
  "name": "security-reviewer",
  "system_prompt": """
    You are a security expert specializing in code vulnerability detection.

    Focus areas:
    - SQL injection and XSS vulnerabilities
    - Authentication and authorization flaws
    - Sensitive data exposure
    - Insecure dependencies

    Always provide:
    1. Severity level (Critical/High/Medium/Low)
    2. Affected code location
    3. Remediation steps
    4. CWE reference if applicable
  """,
  "tools": [
    "static_analysis_scanner",
    "dependency_checker",
    "secret_detector"
  ]
}

开发者："审查这段代码的安全性"

[security-reviewer subagent 接手]

🔴 Critical: SQL Injection Vulnerability
Location: src/api/users.py:45
Code: f"SELECT * FROM users WHERE id = {user_id}"
CWE: CWE-89

Remediation:
Use parameterized queries:
cursor.execute("SELECT * FROM users WHERE id = ?", (user_id,))

🟡 Medium: Hardcoded Secret Detected
Location: src/config.py:12
Code: API_KEY = "sk_live_abc123..."
Recommendation: Use environment variables or secret management services

{
  "mcpServers": {
    "analytics-db": {
      "command": "python",
      "args": ["${CLAUDE_PLUGIN_ROOT}/servers/db_server.py"],
      "env": {
        "DB_URL": "${ANALYTICS_DB_URL}",
        "READ_ONLY": "true",
        "ALLOWED_TABLES": "users,orders,events"
      }
    }
  }
}

开发者："昨天通过小程序渠道注册的新用户有多少？"

Claude Code：
1. [调用 analytics-db MCP Server]
2. [NL to SQL] 将自然语言转为查询：
   SELECT COUNT(*) FROM users
   WHERE registration_channel = 'miniprogram'
   AND created_at >= '2025-10-09 00:00:00'
3. [执行查询] 在只读副本上安全执行
4. [返回结果] "昨天新增 1,247 名小程序用户"

{
  "mcpServers": {
    "k8s-cluster": {
      "command": "npx",
      "args": ["-y", "@company/mcp-k8s-server"],
      "env": {
        "KUBE_CONFIG": "${HOME}/.kube/config",
        "CLUSTER": "production"
      }
    }
  }
}

开发者："payment-service 的 Pod 状态如何？"

Claude Code：
[调用 k8s-cluster MCP Server]

当前状态：
- Total Pods: 5
- Running: 3
- CrashLoopBackOff: 2 ⚠️

异常 Pods：
1. payment-service-7d9f8-x4k2j
   Restart count: 12
   Last error: "Database connection timeout"

2. payment-service-7d9f8-p8m1q
   Restart count: 8
   Last error: "OOMKilled (memory limit exceeded)"

建议：需要检查数据库连接配置和内存限制设置

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write.*\\.py$",
        "hooks": [
          {
            "type": "command",
            "command": "pytest tests/ -v",
            "description": "Running unit tests..."
          }
        ],
        "onFailure": "warn",
        "failureMessage": "⚠️ Tests failed. Review changes before committing."
      }
    ]
  }
}

1. Claude 修改 Python 文件（例如 src/api/payment.py）
2. [触发 PostToolUse Hook]
3. 自动运行 pytest tests/
4. 如果测试失败 → 警告提示，但不阻止操作
5. 如果测试通过 → 静默继续

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/audit_log.sh",
            "async": true
          }
        ]
      }
    ]
  }
}

{
  "timestamp": "2025-10-10T14:32:15Z",
  "user": "[email protected]",
  "action": "file_write",
  "file": "src/payment/processor.py",
  "changes": {
    "lines_added": 12,
    "lines_removed": 3
  },
  "compliance_tags": ["PCI-DSS", "SOC2"]
}

开发者：/create-app "待办事项应用"

"Claude, check the status of ticket PROJ-123 on JIRA."

# 这是一份教 Claude 如何使用内部 Git 服务的工具定义文件
openapi: 3.0.1

info:
  # 基础元数据
  title: Internal GitLab Service Plugin
  description: A plugin for interacting with company's private GitLab repository
  version: 1.0.0

servers:
  # API 基础 URL
  - url: https://gitlab.internal.company.com/api/v4

paths:
  # 定义所有可用端点
  /projects/{project_id}/repository/commits:
    get:
      # Claude 用这个理解工具功能
      summary: Get recent commits for a project
      description: Retrieves a list of the most recent commits from a specified project repository
      operationId: getRecentCommits

      parameters:
        # 所有输入参数
        - name: project_id
          in: path # URL 路径参数
          required: true
          description: The ID of the project
          schema:
            type: string
            example: '42'

        - name: ref_name
          in: query # URL 查询参数 (?ref_name=main)
          required: false
          description: The name of a branch or tag
          schema:
            type: string
            default: 'main'

        - name: per_page
          in: query
          required: false
          description: Number of commits to return
          schema:
            type: integer
            minimum: 1
            maximum: 100
            default: 20

      responses:
        # 描述可能的响应结果
        '200':
          description: A successful response with a list of commits
          content:
            application/json:
              schema:
                type: array
                items:
                  type: object
                  properties:
                    id:
                      type: string
                      description: Commit SHA
                      example: 'a3f9c2b1d5e8...'
                    message:
                      type: string
                      description: Commit message
                      example: 'feat: add payment integration'
                    author_name:
                      type: string
                      description: Author of the commit
                      example: 'Alice Wang'
                    created_at:
                      type: string
                      format: date-time
                      description: Commit timestamp

        '404':
          description: Project not found
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: 'Project not found'

        '401':
          description: Unauthorized - invalid or missing credentials

info:
  title: Internal GitLab Service Plugin
  description: A plugin for interacting with company's private GitLab repository
  version: 1.0.0

servers:
  - url: https://gitlab.internal.company.com/api/v4

paths:
  /projects/{project_id}/repository/commits:
    get:
      summary: Get recent commits for a project
      operationId: getRecentCommits

parameters:
  - name: project_id
    in: path # 参数位置：path/query/header/cookie
    required: true # 是否必需
    schema:
      type: string # 数据类型
      example: '42' # 示例值

responses:
  '200':
    description: A successful response
    content:
      application/json:
        schema:
          type: array
          items:
            properties:
              id: { type: string }
              message: { type: string }

用户："Show me the last 5 commits on the payment-gateway project"

Claude 内部处理：
1. [匹配 operationId] getRecentCommits
2. [提取参数]
   - project_id: "payment-gateway"（需要通过项目名查找 ID）
   - per_page: 5
   - ref_name: "main"（使用默认值）
3. [构造 API 调用]
   GET https://gitlab.internal.company.com/api/v4/projects/{id}/repository/commits?per_page=5
4. [解析响应] 根据 schema 理解返回的 JSON 结构
5. [生成回复] 将数据转换为自然语言

最近 5 次提交记录：

1. a3f9c2b - feat: add payment integration (2025-10-09)
   作者：Alice Wang

2. b7e4d1a - fix: resolve timeout issue (2025-10-08)
   作者：Bob Chen

3. c9f2e5b - refactor: improve error handling (2025-10-08)
   作者：Alice Wang

4. d1a8c3f - docs: update API documentation (2025-10-07)
   作者：Carol Liu

5. e5b9d2a - test: add integration tests (2025-10-07)
   作者：Bob Chen

{
  "name": "my-plugin",
  "version": "2.3.1"
  //          │ │ └─ Patch: 向后兼容的 bug 修复
  //          │ └─── Minor: 向后兼容的新功能
  //          └───── Major: 破坏性变更（不兼容旧版）
}

{
  "name": "internal-db-query",
  "version": "1.0.0",
  "description": "Safe database query interface",

  "permissions": ["database:read:users", "database:read:orders", "network:internal:10.0.0.0/8"],

  "denied_permissions": ["database:write", "database:delete", "filesystem:write", "network:external"],

  "security": {
    "data_retention": "none",
    "audit_logging": true,
    "encryption_required": true
  },

  "compliance": {
    "certifications": ["SOC2", "ISO27001"],
    "data_classification": "confidential"
  }
}

📦 Installing: internal-db-query v1.0.0

⚠️ This plugin requires the following permissions:

✅ Read access to:
   - users table
   - orders table

✅ Network access:
   - Internal network only (10.0.0.0/8)

🔒 Security features:
   - No data retention
   - Audit logging enabled
   - Encrypted connections required

❌ Denied permissions:
   - Cannot write to database
   - Cannot delete records
   - Cannot write to filesystem
   - Cannot access external network

Do you want to proceed? [y/N]

📦 devops-automation
   - 80+ 预配置的 DevOps 工具
   - CI/CD 集成（Jenkins、GitLab CI、GitHub Actions）
   - 监控集成（Prometheus、Grafana、Datadog）
   - 日志分析（ELK、Loki）
   ⭐ 4.9/5.0 | 企业级采用

📦 expert-agents-collection
   - 80+ 领域专业 subagents
   - 分类：安全、性能、文档、测试、架构
   - 每个 agent 针对特定任务深度优化
   ⭐ 4.8/5.0 | 社区推荐

Slash Commands  → 快捷操作入口，用户主动触发
Subagents       → 专业任务代理，复杂任务分工
MCP Servers     → 外部工具连接，数据与服务集成
Hooks           → 自动化触发器，工作流关键节点