Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

I built a Claude Code plugin for brand building in a weekend. Here's what I shipped and what I learned.

I've been writing code for 27 years. I picked up Claude Code the day it launched and haven't looked back. Last weekend I built a plugin that does something I've wanted for a while: brand positioning, messaging, voice, and visual identity…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I've been writing code for 27 years. I picked up Claude Code the day it launched and haven't looked back. Last weekend I built a plugin that does something I've wanted for a while: brand positioning, messaging, voice, and visual identity using real expert frameworks, not "generate a brand strategy" vibes.



Here's what I shipped and what surprised me along the way.






The problem



Every time I've used AI for branding work, the output is the same. "Innovative solutions that empower teams." Stuff that could belong to literally any company on earth. The issue isn't that AI is bad at branding. It's that nobody tells it what good branding actually looks like.



So I packaged the actual methodologies into Claude Code skills:





  • Positioning: April Dunford's 5-component framework from Obviously Awesome


  • Messaging: Donald Miller's StoryBrand BrandScript


  • Voice: NN/g's brand voice dimensions + Aaker personality model


  • Visual identity: Chris Do's stylescape method



Each skill follows the real framework. The positioning skill works through Dunford's five components in order because the order matters. It's not "AI interprets the concept of positioning." It's "AI follows a specific methodology and checks its own output."






The anti-slop system



This is the part I'm most proud of. Every skill runs its output through quality checks before showing it to you:



Swap test: Could a competitor claim this? If your value proposition is "we provide innovative solutions that empower teams," that fails. Every software company on earth could say that. The skill flags it and helps you find what's actually specific to you.



Specificity test: Catches banned generic words (innovative, cutting-edge, leverage, empower, seamless, revolutionary, synergy) and replaces them with the concrete thing they were hiding.



Business-type test: Would this positioning work for both a lawn care company and a SaaS? If yes, it's too generic.






How the pieces connect



All 10 skills share state through a single brand-brief.md file with YAML frontmatter. Positioning fills in fields. Messaging reads those fields and fills in more. Voice reads messaging. Visual identity reads all of it.



Each component gets a confidence score: validated (backed by real customer data), researched (desk research), or assumed (educated guess). Downstream skills flag when they're building on assumptions. They don't stop you, they just make sure you know what's solid and what's still a guess.






What surprised me



The plugin system is more powerful than I expected. Claude Code plugins are just directories with structured markdown. No compiled code, no API calls, no build step. A skill is a markdown file with instructions that Claude follows. You can package entire methodologies into installable tools that anyone can clone and use.



Anti-slop checks actually work. I ran the toolkit on my own brand and it caught two of four tagline candidates as too generic. The discipline of checking your own output against real criteria matters more than I thought.



Adaptive interactivity solves the "blank page" problem. The positioning skill detects how much you know and picks one of three modes: research-assisted (you know nothing), guided (you know some things), or fast validation (you know your market). People at different stages get different experiences from the same tool.






Try it






git clone https://github.com/jgerton/brand-toolkit.git
claude --plugin-dir ./brand-toolkit






Run /brand-toolkit:start and it figures out where you are.



MIT licensed. Full getting started guide here.



I'm building more tools like this and sharing everything in my community. If you're into Claude Code beyond the basics, or you want to build your own plugins, come hang out.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
1 Warnungen
title: Detect Exploitation - I built a Claude Code plugin for brand building in a weekend. Here's what I shipped and what I learned.
id: 3c5bf70a-995e-404c-984b-4921880aebc5
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "I built a Claude Code plugin f" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("I built a Claude Code plugin for brand b")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*I built a Claude Code plugin for brand b*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "I built a Claude Code plugin for brand b"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I built a Claude Code plugin for brand b.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I built a Claude Code plugin for brand building in a weekend. Here's what I shipped and what I learned.

Thematisch verwandte Begriffe: built, Claude, Code, plugin · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100620 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an ove…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag