Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

From Guidelines to Toolchain: Rebuilding claude-docs in One Day

I maintain 20+ open-source packages. Every one of them needs documentation. And every time I start a new project, I solve the same problems — folder structure, linting rules, release notes, badge standards. claude-docs was supposed to fix …

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I maintain 20+ open-source packages. Every one of them needs documentation. And every time I start a new project, I solve the same problems — folder structure, linting rules, release notes, badge standards.



claude-docs was supposed to fix that. But until today, it was just a set of guidelines and a slash command. Helpful, not enough.



So I blocked out a day to turn it into a proper toolchain. 8 commits, 20 files changed, +2,083 / -449 lines. Here's the before and after.






Documentation Guidelines



Before: Abstract rules about how docs should look. You read them, nodded, then did your own thing anyway.



After: Rewritten from scratch with concrete examples for 5 project types — Laravel packages, APIs, full-stack apps, CLI tools, and SDKs. Numbered folder conventions, progressive detail structure, ADR support, MermaidJS diagrams. Over 700 lines changed in the first commit alone.



The goal: if you can't figure out how to structure your docs after reading the guidelines, that's a bug.






Markdown Linting



Before: markdownlint was configured, but you had to run it file by file. Most of the time, people just skipped it.



After: One script, one command. lint.sh finds all markdown files, auto-detects your config, and lints everything in one pass. Add --fix to auto-correct.




~/.claude/lint.sh           # lint everything
~/.claude/lint.sh --fix # lint & auto-fix






If linting takes effort, nobody lints. Now it doesn't.






Release Notes



Before: Manual. Copy commits from git log, reformat into markdown, paste into CHANGELOG. Every. Single. Time.



After: release-note.sh — a 300+ line script that parses your git log, categorizes commits by conventional prefixes, and generates structured markdown with summary tables and contributor lists.




~/.claude/release-note.sh                        # today's release note
~/.claude/release-note.sh --tldr # summary version
~/.claude/release-note.sh --since "1 week ago" # custom date range
~/.claude/release-note.sh --output CHANGELOG.md # write to file






This one went through three iterations in a single session — build, refactor, extend. The first version showed me what the second version needed. That's the natural rhythm for tooling work.






Badge Standards



Before: Some projects had badges, some didn't. No consistency.



After: Mandatory version and license badges for every project README. Copy-paste templates for 10 package registries (Packagist, npm, PyPI, crates.io, and more). Badge compliance tracked in the /docs health report.



Badges are the first thing people see on your repo. They signal you care. Making the standard easy to follow is what makes people actually follow it.






Project Auto-Detection



Before: PHP and Node only.



After: Supports Python, Ruby, Rust, Go, .NET, Java, Dart/Flutter, and Elixir. Run /docs scaffold <type> and get the right structure for your stack.






What /docs Can Do Now



After today's update, here's everything available under the /docs slash command in Claude Code:












































Command What It Does
/docs Create new documentation structure (auto-detects your project type)
/docs reorganize Reorganize existing docs into the numbered standard
/docs validate Validate against standards and report issues
/docs update-toc Update all README.md table of contents
/docs health Generate documentation health report with badge compliance
/docs scaffold <type> Scaffold from template: laravel, api, cli, sdk, fullstack
/docs release-note Generate full release note from today's git log
/docs release-note --tldr Generate summary release note


One command to rule them all. Pick what you need.






The Full Picture



One install command gets you everything:




curl -fsSL https://raw.githubusercontent.com/nasrulhazim/claude-docs/main/install.sh | bash



































What You Get What It Does
Guidelines Concrete examples for 5 project types
lint.sh Batch markdown linting with auto-fix
release-note.sh Git log → structured release notes

/docs command
Scaffold, validate, health report, auto-detect
Badge templates 10 registries, 13 project types





Why This Matters



I'm a solo founder running Cleanique Coders. No docs team, no technical writer. What I have is tooling that enforces standards so I don't have to remember them.



Every hour spent on this saves ten hours of "how did we do docs in that project?" across the next year. If you maintain multiple repos — especially alone — standardize the boring stuff first.



The repo is open source. Take it, use it, tell me what's missing.



👉 github.com/nasrulhazim/claude-docs

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - From Guidelines to Toolchain: Rebuilding claude-docs in One Day
id: 7878f815-a835-4931-ac44-555ca6582e88
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "From Guidelines to Toolchain: " ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("From Guidelines to Toolchain Rebuilding ")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*From Guidelines to Toolchain Rebuilding *"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "From Guidelines to Toolchain Rebuilding "
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich From Guidelines to Toolchain: Rebuilding.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten From Guidelines to Toolchain: Rebuilding claude-docs in One Day

Thematisch verwandte Begriffe: From, Guidelines, Toolchain, Rebuilding · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100620 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an ove…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag