不仅仅是代码助手：用 Plugins 将 Claude Code 打造成你的专属工具链 (1/4)

张三：“Claude，帮我分析 PROJ-1234 这个支付超时问题的根因。”
AI 助手：1. [自动查询 JIRA] 获取问题描述和用户反馈2. [自动搜索 GitLab] 定位支付模块最近的代码变更3. [自动查询 Grafana] 获取问题时间段的性能指标4. [自动检索 Confluence] 查找相关技术文档
综合分析结果：问题根因：上周三的提交 a3f9c2b 将支付网关超时配置从 5s 改为 3s，在高并发场景下导致偶发超时。同时监控显示该时段第三方支付接口P99 延迟达到 3.2s，超过了新的超时阈值。
建议方案：1. 将超时配置回退到 5s 或调整为 8s2. 添加重试机制和降级策略3. 与第三方支付确认其 SLA 保障
需要我帮你创建修复 PR 吗？

# 代码审查/review-pr→ 自动分析当前分支的变更，对比团队编码规范，生成审查报告
# 日志分析/query-logs "payment error" --last 1h→ 搜索生产环境日志，筛选支付相关错误，按时间聚合
# 工单创建/create-ticket "API 超时问题" --priority high→ 在 JIRA 创建工单，自动填充当前上下文信息

---name: review-prdescription: Automated Pull Request reviewtags: [code-review, git]---
# Pull Request Review Instructions
You are helping review a Pull Request. Follow these steps:
1. **Analyze Changes**   - Read the git diff   - Identify modified files and functions
2. **Check Standards**   - Compare against style guide: ./docs/CODE_STYLE.md   - Verify test coverage requirements
3. **Security Scan**   - Check for hardcoded credentials   - Identify potential SQL injection risks
4. **Generate Report**   Format findings as:   ✅ Passed checks   ⚠️ Warnings   ❌ Must fix before merge

# security-reviewer subagent 的专业化配置{  "name": "security-reviewer",  "system_prompt": """    You are a security expert specializing in code vulnerability detection.
    Focus areas:    - SQL injection and XSS vulnerabilities    - Authentication and authorization flaws    - Sensitive data exposure    - Insecure dependencies
    Always provide:    1. Severity level (Critical/High/Medium/Low)    2. Affected code location    3. Remediation steps    4. CWE reference if applicable  """,  "tools": [    "static_analysis_scanner",    "dependency_checker",    "secret_detector"  ]}

开发者："审查这段代码的安全性"
[security-reviewer subagent 接手]
🔴 Critical: SQL Injection VulnerabilityLocation: src/api/users.py:45Code: f"SELECT * FROM users WHERE id = {user_id}"CWE: CWE-89
Remediation:Use parameterized queries:cursor.execute("SELECT * FROM users WHERE id = ?", (user_id,))
🟡 Medium: Hardcoded Secret DetectedLocation: src/config.py:12Code: API_KEY = "sk_live_abc123..."Recommendation: Use environment variables or secret management services

{  "mcpServers": {    "analytics-db": {      "command": "python",      "args": ["${CLAUDE_PLUGIN_ROOT}/servers/db_server.py"],      "env": {        "DB_URL": "${ANALYTICS_DB_URL}",        "READ_ONLY": "true",        "ALLOWED_TABLES": "users,orders,events"      }    }  }}

开发者："昨天通过小程序渠道注册的新用户有多少？"
Claude Code：1. [调用 analytics-db MCP Server]2. [NL to SQL] 将自然语言转为查询：   SELECT COUNT(*) FROM users   WHERE registration_channel = 'miniprogram'   AND created_at >= '2025-10-09 00:00:00'3. [执行查询] 在只读副本上安全执行4. [返回结果] "昨天新增 1,247 名小程序用户"

{  "mcpServers": {    "k8s-cluster": {      "command": "npx",      "args": ["-y", "@company/mcp-k8s-server"],      "env": {        "KUBE_CONFIG": "${HOME}/.kube/config",        "CLUSTER": "production"      }    }  }}

开发者："payment-service 的 Pod 状态如何？"
Claude Code：[调用 k8s-cluster MCP Server]
当前状态：- Total Pods: 5- Running: 3- CrashLoopBackOff: 2 ⚠️
异常 Pods：1. payment-service-7d9f8-x4k2j   Restart count: 12   Last error: "Database connection timeout"
2. payment-service-7d9f8-p8m1q   Restart count: 8   Last error: "OOMKilled (memory limit exceeded)"
建议：需要检查数据库连接配置和内存限制设置

{  "hooks": {    "PostToolUse": [      {        "matcher": "Write.*\\.py$",        "hooks": [          {            "type": "command",            "command": "pytest tests/ -v",            "description": "Running unit tests..."          }        ],        "onFailure": "warn",        "failureMessage": "⚠️ Tests failed. Review changes before committing."      }    ]  }}

1. Claude 修改 Python 文件（例如 src/api/payment.py）2. [触发 PostToolUse Hook]3. 自动运行 pytest tests/4. 如果测试失败 → 警告提示，但不阻止操作5. 如果测试通过 → 静默继续

{  "hooks": {    "PostToolUse": [      {        "matcher": "Write|Edit",        "hooks": [          {            "type": "command",            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/audit_log.sh",            "async": true          }        ]      }    ]  }}

{  "timestamp": "2025-10-10T14:32:15Z",  "user": "[email protected]",  "action": "file_write",  "file": "src/payment/processor.py",  "changes": {    "lines_added": 12,    "lines_removed": 3  },  "compliance_tags": ["PCI-DSS", "SOC2"]}

开发者：/create-app "待办事项应用"

"Claude, check the status of ticket PROJ-123 on JIRA."

# 这是一份教 Claude 如何使用内部 Git 服务的工具定义文件openapi: 3.0.1
info:  # 基础元数据  title: Internal GitLab Service Plugin  description: A plugin for interacting with company's private GitLab repository  version: 1.0.0
servers:  # API 基础 URL  - url: https://gitlab.internal.company.com/api/v4
paths:  # 定义所有可用端点  /projects/{project_id}/repository/commits:    get:      # Claude 用这个理解工具功能      summary: Get recent commits for a project      description: Retrieves a list of the most recent commits from a specified project repository      operationId: getRecentCommits
      parameters:        # 所有输入参数        - name: project_id          in: path # URL 路径参数          required: true          description: The ID of the project          schema:            type: string            example: '42'
        - name: ref_name          in: query # URL 查询参数 (?ref_name=main)          required: false          description: The name of a branch or tag          schema:            type: string            default: 'main'
        - name: per_page          in: query          required: false          description: Number of commits to return          schema:            type: integer            minimum: 1            maximum: 100            default: 20
      responses:        # 描述可能的响应结果        '200':          description: A successful response with a list of commits          content:            application/json:              schema:                type: array                items:                  type: object                  properties:                    id:                      type: string                      description: Commit SHA                      example: 'a3f9c2b1d5e8...'                    message:                      type: string                      description: Commit message                      example: 'feat: add payment integration'                    author_name:                      type: string                      description: Author of the commit                      example: 'Alice Wang'                    created_at:                      type: string                      format: date-time                      description: Commit timestamp
        '404':          description: Project not found          content:            application/json:              schema:                type: object                properties:                  error:                    type: string                    example: 'Project not found'
        '401':          description: Unauthorized - invalid or missing credentials

info:  title: Internal GitLab Service Plugin  description: A plugin for interacting with company's private GitLab repository  version: 1.0.0

servers:  - url: https://gitlab.internal.company.com/api/v4

paths:  /projects/{project_id}/repository/commits:    get:      summary: Get recent commits for a project      operationId: getRecentCommits

parameters:  - name: project_id    in: path # 参数位置：path/query/header/cookie    required: true # 是否必需    schema:      type: string # 数据类型      example: '42' # 示例值

responses:  '200':    description: A successful response    content:      application/json:        schema:          type: array          items:            properties:              id: { type: string }              message: { type: string }

用户："Show me the last 5 commits on the payment-gateway project"
Claude 内部处理：1. [匹配 operationId] getRecentCommits2. [提取参数]   - project_id: "payment-gateway"（需要通过项目名查找 ID）   - per_page: 5   - ref_name: "main"（使用默认值）3. [构造 API 调用]   GET https://gitlab.internal.company.com/api/v4/projects/{id}/repository/commits?per_page=54. [解析响应] 根据 schema 理解返回的 JSON 结构5. [生成回复] 将数据转换为自然语言

最近 5 次提交记录：
1. a3f9c2b - feat: add payment integration (2025-10-09)   作者：Alice Wang
2. b7e4d1a - fix: resolve timeout issue (2025-10-08)   作者：Bob Chen
3. c9f2e5b - refactor: improve error handling (2025-10-08)   作者：Alice Wang
4. d1a8c3f - docs: update API documentation (2025-10-07)   作者：Carol Liu
5. e5b9d2a - test: add integration tests (2025-10-07)   作者：Bob Chen

# 添加 Anthropic 官方市场/plugin marketplace add anthropics/claude-code-plugins
# 浏览可用插件/plugin
# 输出示例：📦 Available Plugins (anthropics/claude-code-plugins)
🔧 Development Tools  - github-integration (v2.1.0)    Connect to GitHub repos, PRs, and issues    ⭐ 4.8/5.0 | 12.5k installs
  - gitlab-integration (v1.8.3)    GitLab repository management    ⭐ 4.6/5.0 | 8.2k installs
☁️ Cloud Services  - aws-toolkit (v3.0.1)    Manage AWS resources (EC2, S3, Lambda)    ⭐ 4.9/5.0 | 15.1k installs
  - gcp-helper (v2.5.0)    Google Cloud Platform integration    ⭐ 4.7/5.0 | 9.8k installs
🔒 Security  - security-scanner (v1.5.2)    Static code analysis and vulnerability detection    ⭐ 4.8/5.0 | 11.3k installs

# 方式 1：GitHub 仓库（最常用）/plugin marketplace add anthropics/claude-code-plugins

/plugin
# 启动插件浏览器界面：┌─────────────────────────────────────────┐│ Plugin Browser                          │├─────────────────────────────────────────┤│ Marketplaces: ▼                         ││ ☑ anthropics/claude-code-plugins        ││ ☑ company-internal                      ││                                         ││ Categories:                             ││ → Development Tools (24)                ││   Cloud Services (18)                   ││   Security (12)                         ││   Data & Analytics (9)                  ││                                         ││ Search: [payment________]  [Search]     ││                                         ││ Results:                                ││ 📦 payment-gateway-plugin               ││    Integrate with Stripe, PayPal        ││    ⭐ 4.7 | company-internal            ││    [Install] [More Info]                │└─────────────────────────────────────────┘

# 从指定市场安装/plugin install payment-gateway@company-internal
# 安装特定版本/plugin install [email protected]
# 安装最新版/plugin install security-scanner@anthropics

{  "name": "my-plugin",  "version": "2.3.1"  //          │ │ └─ Patch: 向后兼容的 bug 修复  //          │ └─── Minor: 向后兼容的新功能  //          └───── Major: 破坏性变更（不兼容旧版）}

# 精确版本/plugin install my-plugin@2.3.1
# 最新的 2.x 版本（未来可能支持）/plugin install my-plugin@^2.0.0
# 最新版本/plugin install my-plugin@latest

# 刷新市场插件列表/plugin marketplace update <marketplace-name>
# 更新所有市场/plugin marketplace update --all
# 重新安装插件（获取最新版本）/plugin uninstall <plugin-name>/plugin install <plugin-name>@latest

{  "name": "internal-db-query",  "version": "1.0.0",  "description": "Safe database query interface",
  "permissions": ["database:read:users", "database:read:orders", "network:internal:10.0.0.0/8"],
  "denied_permissions": ["database:write", "database:delete", "filesystem:write", "network:external"],
  "security": {    "data_retention": "none",    "audit_logging": true,    "encryption_required": true  },
  "compliance": {    "certifications": ["SOC2", "ISO27001"],    "data_classification": "confidential"  }}

📦 Installing: internal-db-query v1.0.0
⚠️ This plugin requires the following permissions:
✅ Read access to:   - users table   - orders table
✅ Network access:   - Internal network only (10.0.0.0/8)
🔒 Security features:   - No data retention   - Audit logging enabled   - Encrypted connections required
❌ Denied permissions:   - Cannot write to database   - Cannot delete records   - Cannot write to filesystem   - Cannot access external network
Do you want to proceed? [y/N]

📦 devops-automation   - 80+ 预配置的 DevOps 工具   - CI/CD 集成（Jenkins、GitLab CI、GitHub Actions）   - 监控集成（Prometheus、Grafana、Datadog）   - 日志分析（ELK、Loki）   ⭐ 4.9/5.0 | 企业级采用

📦 expert-agents-collection   - 80+ 领域专业 subagents   - 分类：安全、性能、文档、测试、架构   - 每个 agent 针对特定任务深度优化   ⭐ 4.8/5.0 | 社区推荐

Slash Commands  → 快捷操作入口，用户主动触发Subagents       → 专业任务代理，复杂任务分工MCP Servers     → 外部工具连接，数据与服务集成Hooks           → 自动化触发器，工作流关键节点