
render-policy
Two skills for rendering agent output safely: replace innerHTML with render-policy's sanitize-into-a-fragment renderers for plain DOM, React and Angular, with image, link and host policies, streaming and ESLint rules; and lint the CSP and tool metadata an MCP App declares before you publish it.
- version
- 0.1.6
- GitHub stars
- 3.7K
Install
/plugin install render-policy@buildwithclaudeRun it inside Claude Code after adding the marketplace with /plugin marketplace add davepoon/buildwithclaude.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Details
- Marketplace
- davepoon/buildwithclaude
- Source
- plugins/render-policy
- Author
- shteynu
- Category
- Security
- License
- MIT
- Keywords
- security, xss, markdown, llm-output, mcp-apps, csp
More from davepoon/buildwithclaude
All 201- renhuav1.0.0
- sectionsightv0.4.0
- seo-tools-by-crakseov1.0.0
- shipwrightv1.0.0
- show-receiptsv0.3.4
- site-traffic-teardownv0.1.2
- skill-skillv1.2.0
- skyvernv1.0.0
- slopmopv1.1.0
- subagent-tunerv0.1.7
- suede-skillsv0.16.0
- symbiozav0.3.1
- testoptimv1.1.1
- ti-edgeai-skillsv0.1.0
- tlsradarv0.6.1
- tracekitv1.4.2
- traderspy-mcpv1.7.0
- travel-agent-skillv4.0.0
- ultracostv0.3.7
- ultramodv1.0.11
- usage-limitsv1.0.0
- usethisskillv1.2.0
- uxkinv1.3.0
- vibe-prospectingv0.1.56