W

whatishipped

selan-ai/whatishipped · v0.5.0 · Agent Skills

by selan-aiScan grade: GoodAwesome AI Plugins

A Claude Code skill that recreates a mobile app's UI as it ships: every screen, state, component and journey of an iOS or Android app, drawn from its code and checked against the app's own screenshots

InstallSourceClaim this plugin
Follow0
Trust Score75Security scan87Components1
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is whatishipped a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • Agent Skills
  • 1 skill

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is whatishipped?

whatishipped is a published agent skills plugin for AI coding agents that works with Claude Code and Agent Skills, developed by selan-ai and distributed through the HOL AI plugin registry. A Claude Code skill that recreates a mobile app's UI as it ships: every screen, state, component and journey of an iOS or Android app, drawn from its code and checked against the app's own screenshots.

Canonical slug
selan-ai/whatishipped
Version
v0.5.0 · updated Nov 10, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

75

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
40/100
MCP server setup
100/100
Plugin Security
87/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/selan-ai/whatishipped
Source commit
715d02f999fb…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
87
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-AhPABe / cisco-skill-scanner: failedcodex:hol-plugin-scanner-AhPABe / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

13/16

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

13/16

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSINGReported 2 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the whatishipped entry from the whatishipped marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall whatishipped@whatishipped.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "whatishipped",
  "description": "Your app's UI as it ships: a Claude Code skill that recreates every screen, state, component and journey of an iOS or Android app or a website (a web front end's routes and components) from its code, and checks each drawing against the app's own screenshots.",
  "version": "0.5.0",
  "author": {
    "name": "Selan",
    "url": "https://selan.ai"
  },
  "homepage": "https://github.com/selan-ai/whatishipped",
  "repository": "https://github.com/selan-ai/whatishipped",
  "license": "MIT",
  "keywords": [
    "design-system",
    "brandbook",
    "ios",
    "android",
    "swiftui",
    "jetpack-compose",
    "web",
    "playwright",
    "claude-code",
    "skill"
  ],
  "interface": {
    "displayName": "whatishipped",
    "developerName": "selan-ai"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/selan-ai/whatishipped
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • whatishipped

    skills/whatishipped/SKILL.md

    Use when asked for a brandbook, design board, design-system inventory or a catalogue of the screens, states, components or user journeys of a native mobile app (iOS SwiftUI or UIKit, Android Jetpack Compose or XML views) or a web front end (routed pages, Playwright tests); to recreate an app's UI as it ships, on one platform or across iOS and Android repos; or to add screens, flows, screenshots or a platform to such a brandbook.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

482 bytes

7e908387eafba8f1…

.claude-plugin/plugin.json

file

721 bytes

b5c16d03ec680659…

.codex-plugin/plugin.json

plugin-manifest

761 bytes

18a5c92c408feb90…

LICENSE

file

1,416 bytes

785a6a2e8b2cb93a…

README.md

file

6,306 bytes

e28fcba6e52b3d5c…

skills/whatishipped/area-brief.md

skill

9,095 bytes

31b61309eb118458…

skills/whatishipped/real-app.md

skill

8,524 bytes

6eaefb516b3bbf52…

skills/whatishipped/SKILL.md

skill

22,035 bytes

f88fd11ebe8912dc…

skills/whatishipped/template/app/board.css

skill

30,734 bytes

0f7fde58e374ff70…

skills/whatishipped/template/app/frame.css

skill

4,888 bytes

9532cf03fe026723…

skills/whatishipped/template/app/frame.js

skill

5,961 bytes

72ad8670a9248674…

skills/whatishipped/template/app/icons.js

skill

1,585 bytes

8528f126e5a6d133…

skills/whatishipped/template/app/index.html

skill

704 bytes

d5fd468cc2d4e252…

skills/whatishipped/template/app/model.ts

skill

4,797 bytes

baa281a925ac3f09…

skills/whatishipped/template/app/pages/components.ts

skill

6,064 bytes

967bbe2a771459e1…

skills/whatishipped/template/app/pages/foundations.ts

skill

4,968 bytes

74e702cad1a3ed67…

skills/whatishipped/template/app/pages/home.ts

skill

5,836 bytes

7f27e804e51d6d96…

skills/whatishipped/template/app/pages/journeys.ts

skill

3,897 bytes

8866fe3cb3bbcec1…

skills/whatishipped/template/app/pages/navigation.ts

skill

6,808 bytes

326d8e5a90d2eb8e…

skills/whatishipped/template/app/pages/page.ts

skill

222 bytes

b2e86d7e63d6856a…

skills/whatishipped/template/app/pages/screens.ts

skill

8,414 bytes

15087b44a96bbdc2…

skills/whatishipped/template/app/search.ts

skill

4,077 bytes

ab66eb12b463e384…

skills/whatishipped/template/app/shell.ts

skill

16,378 bytes

14f5207bedba1b69…

skills/whatishipped/template/app/types.ts

skill

5,062 bytes

6f58c4e8f4335452…

skills/whatishipped/template/app/ui.ts

skill

8,856 bytes

15cb71c6de4f8c76…

skills/whatishipped/template/brandbook.json

skill

432 bytes

e45b816cff4981c1…

skills/whatishipped/template/package.json

skill

576 bytes

97f7db04488e6203…

skills/whatishipped/template/platform/areas.js

skill

174 bytes

4723dd8087ae2830…

skills/whatishipped/template/platform/components.css

skill

117 bytes

50f94d5e65593104…

skills/whatishipped/template/platform/components.js

skill

212 bytes

85b67bbd7369b6a1…

skills/whatishipped/template/platform/foundations.js

skill

2,109 bytes

e79e19ead6b112da…

skills/whatishipped/template/platform/icons.js

skill

490 bytes

af815e896b873729…

skills/whatishipped/template/platform/journeys.js

skill

831 bytes

ab96d7e1224a2759…

skills/whatishipped/template/platform/tokens.css

skill

1,035 bytes

c19cf6ba3196733f…

skills/whatishipped/template/README.md

skill

5,834 bytes

5fda55a509c82ab1…

skills/whatishipped/template/server.ts

skill

2,554 bytes

a4b5dcae632151bb…

skills/whatishipped/template/server/board.ts

skill

15,332 bytes

d6b38dbcd564fd67…

skills/whatishipped/template/server/build.ts

skill

5,267 bytes

bb0d42e405438a34…

skills/whatishipped/template/server/capture.ts

skill

11,548 bytes

99c7aa66f97e6758…

skills/whatishipped/template/server/check.ts

skill

20,772 bytes

a08004b8341d7cd0…

skills/whatishipped/template/server/match.ts

skill

7,031 bytes

bbadc0ea9cf36b51…

skills/whatishipped/template/server/png.ts

skill

4,784 bytes

c8b358983771529b…

skills/whatishipped/template/server/viewport.ts

skill

2,838 bytes

0d26b66101892e7a…

skills/whatishipped/template/server/webp.ts

skill

14,746 bytes

a9389b118cca45a4…

whatishipped — Frequently asked questions

What is whatishipped?
whatishipped is an AI plugin in the HOL registry. A Claude Code skill that recreates a mobile app's UI as it ships: every screen, state, component and journey of an iOS or Android app, drawn from its code and checked against the app's own screenshots.
How do I install whatishipped?
Install whatishipped in your harness: Claude Code — /plugin marketplace add selan-ai/whatishipped; Any agent — npx [email protected] add selan-ai/whatishipped. Full step-by-step guidance is on the HOL plugin page.
How do I install whatishipped in HOL Guard?
To install whatishipped in HOL Guard, start with hol-guard plugin install selan-ai/whatishipped --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install whatishipped in Claude Code?
To install whatishipped in Claude Code, start with /plugin marketplace add selan-ai/whatishipped. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for whatishipped computed?
whatishipped has a HOL Trust Score of 75 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/selan-ai%2Fwhatishipped/trust
Who publishes whatishipped?
whatishipped is published by selan-ai and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from whatishipped.

Alternatives in Agent Skills

See all Agent Skills plugins

Reviews and similar plugins