Two skills for rendering agent output safely: replace innerHTML with render-policy's sanitize-into-a-fragment renderers for plain DOM, React and Angular, with image, link and host policies, streaming and ESLint rules; and lint the CSP and tool metadata an MCP App declares before you publish it.

version
0.1.6
GitHub stars
3.7K

Install

/plugin install render-policy@buildwithclaude

Run it inside Claude Code after adding the marketplace with /plugin marketplace add davepoon/buildwithclaude.

Contents

Discovered from source

Skills 2

Sponsors

Details

Marketplace
davepoon/buildwithclaude
Source
plugins/render-policy
Author
shteynu
Category
security
License
MIT
Keywords
security, xss, markdown, llm-output, mcp-apps, csp

More from davepoon/buildwithclaude

All 172