Claude Code Team Commander
Description
Blueprint for building a shared Claude Code configuration for your team — personas, commands, plugin catalog, MCP servers, security, and onboarding
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
Claude Code Team Blueprint
**A complete playbook for building a shared Claude Code configuration for your company.**
The Problem
When you give your team Claude Code, everyone sets it up differently. Different plugins, different prompts, no shared standards, API keys scattered everywhere, and no way to control what tools are available. New hires spend hours figuring out the setup instead of doing work.
What We Built
At [OIT, LLC](https://oit.co), we run a VoIP business with a Salesforce org, internal knowledge base, VoIP platform APIs, Microsoft 365, and a growing team. We needed Claude Code to work the same way for everyone — with our SOPs, our quality standards, and our integrations baked in — while keeping secrets secure and giving admins control over what tools the team can use.
We built a single GitHub repo that does all of this:
- 5-minute onboarding — one script installs everything and prompts for API keys
- AI personas that know our workflows — case quality scoring, Salesforce automation, documentation standards, support ticket handling, full-stack development
- 18 slash commands that trigger specific workflows —
/stan-review 222448scores a case against 8 quality dimensions,/flow-review Lead_Assignmentaudits a Salesforce flow for governor limits - Admin-controlled catalog of plugins and MCP servers — nothing enters the toolkit without a PR approval
- Auto-discovery — any team repo can propose a new MCP server by adding a
.claude-catalog-entry.jsonfile; a weekly GitHub Action scans for these and creates a PR for admin review - Announcement system — admins post one-time messages that display the next time a team member syncs
- Security by default — API keys never committed, secret scanning with push protection, branch protection requiring PR approval, TruffleHog CI on every push
How It Works
1. Team member clones the config repo
2. Runs setup.sh in their project directory
3. Script copies personas/c
Related Skills
Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Google Workspace Alert Center
Manage security alerts
Security Related Agents
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,
Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | -