davidteren

Intent Engineering — Security skill for Claude Code

Security community

Enforce intent engineering: a Claude Code plugin with 5 review lenses (predictability, convention, simplicity, experience, architecture) for planning, plan validation, code review, and codebase audit.

How to install Intent Engineering

This entry records only its repository, not the path inside it, so there is no exact command to give. Open davidteren/intent-engineering and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Intent Engineering does

Enforce intent engineering: a Claude Code plugin with 5 review lenses (predictability, convention, simplicity, experience, architecture) for planning, plan validation, code review, and codebase audit.

Alternatives in Security

  • Pal — Multi-model AI integration — chat, debugging, code review, planning, security audit 11.3k ★
  • Deepsec — Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents 7.8k ★
  • MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★

README

intent-engineering

[![contracts](https://github.com/davidteren/intent-engineering/actions/workflows/contracts.yml/badge.svg)](https://github.com/davidteren/intent-engineering/actions/workflows/contracts.yml) [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE) [![Listed on ClaudePluginHub](https://www.claudepluginhub.com/badge/davidteren-intent-engineering-plugins-intent-engineering)](https://www.claudepluginhub.com/plugins/davidteren-intent-engineering-plugins-intent-engineering?ref=badge)

**Site:** [davidteren.github.io/intent-engineering](https://davidteren.github.io/intent-engineering/)

A Claude Code plugin that enforces **intent engineering**: software — and the experience around it — that behaves the way a reasonable developer or user already expects. It guards against *surprise* on both sides: hidden side effects and reinvented conventions in the **code**, and broken flows, weak interaction states, or dark patterns in the **UX**. It applies a set of well-established design principles — plus framework architecture analysis across six stacks (Rails, Python/FastAPI, Laravel, Express, Phoenix, React) — as review **lenses** that fan out as parallel agents and return scored, deduplicated findings with concrete fixes.

**What / Why / How (plain language)**

**What:** A toolkit you run against a plan, a pull request, your local changes, or a whole codebase. It checks whether the work follows time-tested principles of "least surprise" — does the code/UI behave the way people expect, follow conventions, stay simple, and feel coherent?

**Why:** Surprising software is expensive. Hidden side effects, reinvented conventions, needless complexity, and inconsistent UX cost reviewers, users, and future maintainers time. Most of it is caught late (in review) or never. This plugin makes the principles checkable and repeatable.

**How:** A small set of lenses (each grounded in a researched principle) run as parallel agents.