corrected built in skills instead of plugin

CHANGELOG.md

@@ -6,6 +6,24 @@ Format follows [Keep a Changelog](https://keepachangelog.com/).
 
 ## [Unreleased]
 
+## [3.3.0] — 2026-04-08
+
+### Breaking
+- `security-guidance` removed — never existed as a marketplace plugin (`anthropic/claude-plugins-official` is a non-existent repo). RTK covers security hooks.
+- `pr-review-toolkit` removed — same non-existent marketplace. No replacement available.
+- `frontend-design` reclassified from TOGGLE plugin to **built-in Claude Code skill** (`/mnt/skills/public/frontend-design/`). Always available, 0 token cost, not toggleable.
+- `skill-creator` reclassified from TOGGLE plugin to **built-in Claude Code skill** (`/mnt/skills/examples/skill-creator/`). Always available, 0 token cost, not toggleable.
+- `anthropic/claude-plugins-official` marketplace reference removed from `install-plugins.sh` — this GitHub repo does not exist.
+
+### Changed
+- `install-plugins.sh`: fake marketplace block replaced with built-in skill notes; install summary updated
+- `lib/detect-plugins.sh`: `detect_frontend_design()` removed (built-in skill, always available); notes added for all removed plugins
+- `hooks/session-start.sh`: `frontend_design` removed from toggle loop; `security-guidance` removed from always-on display; new `🔵 BUILT-IN` line shows `frontend-design skill-creator`; token cost estimate no longer counts frontend-design
+- `agents/plugin-advisor.md`: decision table, compatibility matrix, recommended sets, conditional rules all updated — frontend-design and skill-creator marked as built-in (0t, not toggleable); security-guidance and pr-review-toolkit removed; passive cost estimates recalculated
+- `README.md`: plugin reference table split into installable plugins + built-in skills; compatibility matrix updated; recommended sets recalculated; removed pr-review-toolkit from slash commands; added "Removed plugins" note explaining what happened
+- `USAGE.md`: all references updated — quick reference, case studies, session-start boxes, signal→plugin table
+- `version.txt`: 3.2.1 → 3.3.0
+
 ## [3.2.1] — 2026-04-07
 
 ### Fixed

README.md

@@ -223,7 +223,6 @@ gsd          # then inside the session:
 
 | Command | Plugin | Description |
 |---|---|---|
-| `/pr-review-toolkit:review-pr` | pr-review-toolkit | Multi-agent PR review (6 specialized agents) |
 | `/context7:docs <lib>` | context7 | Manual doc lookup for a specific library |
 
 ---
@@ -369,7 +368,6 @@ Warns if ruflo is active with no multi-agent signal, or if GSD v2 CLI is not ins
 
 | Pair | Relation | Notes |
 |---|---|---|
-| frontend-design ↔ ui-ux-pro-max | ⚠️ Overlap | Keep both for design-heavy. Drop ui-ux-pro-max for simple UI. |
 | gstack ↔ gsd v2 | ✅ Complementary | Different scopes — CC workflow vs CLI orchestration |
 | gstack ↔ ruflo | ⚠️ Overlap | Both orchestrate multi-step work. Use one or the other. ~3250-4250t combined. |
 | gsd v2 ↔ ruflo | ⚠️ Overlap | Sequential (GSD) vs parallel swarm (ruflo). Pick based on need. |
@@ -377,21 +375,25 @@ Warns if ruflo is active with no multi-agent signal, or if GSD v2 CLI is not ins
 | superpowers ↔ gstack | ✅ Complementary | Used together by orchestrators |
 | context7 ↔ any | ✅ Independent | Doc lookup MCP — always safe to combine |
 
+> **Built-in skills** (always available, 0 tokens, not toggleable):
+> `frontend-design` and `skill-creator` are built-in Claude Code skills. They complement all plugins without conflict.
+
 ### Recommended sets by project type
 
 | Project type | Plugins ON | OFF | Passive cost |
 |---|---|---|---|
-| Backend API / microservice | superpowers, context7* | frontend-design, ui-ux-pro-max, gstack, ruflo | ~800t |
-| Frontend SPA / SSR | superpowers, frontend-design, ui-ux-pro-max, context7 | gstack, ruflo | ~1600t |
-| Full-stack SaaS | superpowers, gstack, frontend-design, ui-ux-pro-max, context7 | ruflo | ~4400t |
+| Backend API / microservice | superpowers, context7* | ui-ux-pro-max, gstack, ruflo | ~800t |
+| Frontend SPA / SSR | superpowers, ui-ux-pro-max, context7 | gstack, ruflo | ~1400t |
+| Full-stack SaaS | superpowers, gstack, ui-ux-pro-max, context7 | ruflo | ~4150t |
 | CLI tool / library | superpowers | all toggles | ~800t |
 | Multi-session large feature | superpowers + gsd v2 CLI (external) | ruflo | ~800t CC |
 | Quick fix / hotfix | superpowers | all toggles | ~800t |
-| Design system / component lib | superpowers, frontend-design, ui-ux-pro-max | gstack, ruflo, gsd | ~1600t |
+| Design system / component lib | superpowers, ui-ux-pro-max | gstack, ruflo, gsd | ~1200t |
 | Enterprise multi-agent | superpowers, ruflo + gsd v2 CLI (external) | others | ~2300t CC |
 
 > *context7 only if using fast-evolving libs (Next.js, React 18+, Prisma, Supabase)
-> security-guidance and rtk are ALWAYS ON (0 tokens) — omitted from estimates
+> rtk is ALWAYS ON (0 tokens) — omitted from estimates
+> frontend-design and skill-creator are built-in Claude Code skills (0 tokens, always available) — omitted from recommendations
 
 ---
 
@@ -410,18 +412,28 @@ Run `/plugin-check` anytime to get a recommendation for the current project type
 
 | Plugin | Status | Passive cost | When to use | Installed by |
 |---|---|---|---|---|
-| **security-guidance** | ✅ ALWAYS ON | 0 tokens (hook only) | — | marketplace |
 | **RTK** | ✅ ALWAYS ON | 0 tokens (hook only) | — | cargo (pinned in plugins.lock.json) |
 | **Superpowers** | ✅ REQUIRED | ~600–1000 tokens | — required by orchestrators | marketplace |
 | **GStack** | 🔄 TOGGLE | ~2500–3000 tokens | Full-product: UI + design + deploy + browser QA | git submodule |
 | **GSD v2** | 🖥️ CLI | 0 tokens (external CLI) | Multi-day features, crash recovery, cost tracking, parallel workers | npm (pinned in plugins.lock.json) |
 | **ruflo** | 🔄 TOGGLE | ~500–1500 tokens | Enterprise multi-agent swarm (5+ concurrent agents) | npm + MCP manual |
-| **skill-creator** | 🔄 TOGGLE | ~100 tokens | Creating or editing custom skills | marketplace |
-| **pr-review-toolkit** | 🔄 TOGGLE | ~300 tokens | PR review sessions | marketplace |
-| **frontend-design** | 🔄 TOGGLE | ~200 tokens | Any project with a UI | marketplace |
 | **ui-ux-pro-max** | 🔄 TOGGLE | ~400 tokens | Design system, color/typography choices | marketplace |
 | **Context7 MCP** | 🔄 TOGGLE | ~200 tokens | Fast-evolving libs (Next.js, React, Prisma…) | MCP manual |
 
+**Built-in Claude Code skills (always available, 0 tokens, no install needed):**
+
+| Skill | Location | Description |
+|---|---|---|
+| **frontend-design** | `/mnt/skills/public/frontend-design/` | UI design guidance — loaded on demand when relevant |
+| **skill-creator** | `/mnt/skills/examples/skill-creator/` | Create custom skills from conversation — loaded on demand |
+
+These built-in skills are always available and cannot be toggled on/off. They have zero passive token cost
+(loaded on demand only). Use them naturally — Claude Code activates them when the context matches.
+
+> **Removed plugins** (previously listed but never existed as installable plugins):
+> - `security-guidance` — was listed as a marketplace plugin but the marketplace `anthropic/claude-plugins-official` does not exist. RTK covers security hooks.
+> - `pr-review-toolkit` — same non-existent marketplace. No replacement available.
+
 **Rule:** toggle plugins are OFF by default. `/plugin-check` signals when to enable them.
 If you use `/init-project` or `/ship-feature`, plugin-check runs automatically as STEP 0
 and **blocks if Superpowers is not active**.

USAGE.md

@@ -96,9 +96,10 @@ Tu veux...
 ## Les plugins — décision rapide
 
 ```
-Toujours actifs (0 token) : security-guidance, rtk
+Toujours actifs (0 token) : rtk
+Built-in (toujours disponible, 0 token) : frontend-design, skill-creator
 
-Projet avec interface     → frontend-design ON
+Projet avec interface     → frontend-design déjà disponible (built-in)
 Design élaboré/system     → ui-ux-pro-max ON
 Deploy + QA browser       → gstack ON
 Next.js/React/Prisma      → context7 ON (WARN si absent, pas BLOCK)
@@ -223,7 +224,7 @@ cd mon-projet-existant/
 /plugin-check "App mobile React Native Expo liste de courses, offline-first, SQLite, notifications push"
 
 → SIGNALS: frontend (mobile), fast-libs (Expo SDK)
-→ ENABLE: frontend-design (composants RN)
+→ NOTE: frontend-design available (built-in, 0t)
 → WARN: context7 si Expo SDK 51+ utilisé (fast-libs)
 → OFF: gstack (mobile, pas de browser QA), ui-ux-pro-max (optionnel)
 → BLOCKING: none
@@ -301,7 +302,7 @@ gsd
 /plugin-check "Site vitrine Next.js 14 studio photo, design élaboré, animations Framer Motion, galerie, dark mode, SEO"
 
 → SIGNALS: frontend, design-system, fast-libs(Next.js)
-→ ENABLE: frontend-design (~200t)
+→ NOTE: frontend-design available (built-in, 0t)
 → ENABLE: ui-ux-pro-max (~400t) — "design élaboré" signal fort
 → WARN: context7 non configuré → taper "force" pour continuer (ou configurer avant)
 → OFF: gstack (vitrine statique, pas de deploy complexe)
@@ -355,7 +356,8 @@ Sans ui-ux-pro-max : "Tailwind avec palette neutre, Inter". La différence est v
 /plugin-check "Jeu de puzzle web React + FastAPI + PostgreSQL. Auth JWT, collection de cartes, boutique in-app, leaderboard. Multi-session, dev sur plusieurs semaines."
 
 → SIGNALS: frontend, fast-libs(React), deploy, multi-session
-→ ENABLE: frontend-design, context7
+→ NOTE: frontend-design available (built-in, 0t)
+→ ENABLE: context7
 → ENABLE: ui-ux-pro-max (cartes visuelles, cohérence design)
 → CLI: gsd v2 RECOMMANDÉ (multi-session détecté)
 → OPTIONAL: gstack si deploy CI + browser QA prévus
@@ -454,7 +456,7 @@ ONBOARD COMPLETE: mycli
 /plugin-check "Rust CLI, pas de frontend, pas de deploy"
 
 → SIGNALS: none (CLI pur)
-→ DISABLE: frontend-design, ui-ux-pro-max, gstack, context7
+→ DISABLE: ui-ux-pro-max, gstack, context7
 → KEEP: superpowers
 → COST: ~800t (minimal)
 → ACTION REQUIRED? NO
@@ -519,7 +521,7 @@ DO NOT TOUCH:
 
 → SIGNALS: none (CLI pur, pas de deploy, pas de frontend)
 → KEEP: superpowers
-→ DISABLE: frontend-design, ui-ux-pro-max, gstack, context7, ruflo
+→ DISABLE: ui-ux-pro-max, gstack, context7, ruflo
 → COST: ~800t (base seulement)
 → ACTION REQUIRED? NO
 ```
@@ -801,7 +803,7 @@ OPTIONS:
 SIGNALS: mobile (React Native + Expo détectés)
 
 RECOMMENDATIONS:
-  ⚡ ENABLE  : frontend-design — composants React Native (~200t)
+  ℹ️  NOTE    : frontend-design available (built-in, 0t)
   ⚠️  DISABLE : gstack — mobile, pas de browser QA ni deploy web
   ℹ️  OPTIONAL: ui-ux-pro-max — uniquement si design system complexe
   ℹ️  NOTE    : Docker N/A pour les apps mobiles
@@ -845,7 +847,7 @@ COST: ~800t
 
 RECOMMENDATIONS:
   ✅ KEEP   : superpowers
-  ⚠️ DISABLE: frontend-design, ui-ux-pro-max, gstack, context7, ruflo
+  ⚠️ DISABLE: ui-ux-pro-max, gstack, context7, ruflo
 BLOCKING: none → "proceed"
 
 → Scaffolder: cargo check comme verify (pas cargo build)
@@ -935,7 +937,7 @@ SIGNALS: monorepo, frontend(apps/web/), fast-libs(Next.js), deploy(apps/api/)
 
 RECOMMENDATIONS:
   OK KEEP   : superpowers
-  ENABLE    : frontend-design — apps/web/ uniquement (~200t)
+  NOTE      : frontend-design available (built-in, 0t)
   WARN      : context7 — Next.js detecte dans apps/web/
   DISABLE   : gstack — apps/api/ n'a pas de browser-qa
               (NOTE: gstack aurait ete recommande si browser-qa present)
@@ -973,13 +975,13 @@ L'utilisateur voit exactement ce qui manque et la commande pour corriger.
 
 ### Cas J — session-start : box ne deborde pas avec 5 plugins actifs
 
-**Avant v2.3.0 :** avec `gstack frontend-design ui-ux-pro-max context7 ruflo` tous actifs, la ligne `ON` depassait la largeur de la box.
+**Avant v2.3.0 :** avec `gstack ui-ux-pro-max context7 ruflo` tous actifs, la ligne `ON` depassait la largeur de la box.
 
 **Avec v2.3.0 :**
 ```
 ┌─ Claude Code config ──────────────────────────────────┐
-│  ✅ ON  : security-guidance rtk superpowers            │
-│  🟢 ON  : gstack frontend-design ui-ux-pro-ma...      │  <- tronque a 37+...
+│  ✅ ON  : rtk superpowers            │
+│  🟢 ON  : gstack ui-ux-pro-max context7...      │  <- tronque a 37+...
 │  ⚫ OFF : none                                         │
 │  💰 ~5350t passif (48% budget)                        │
 │  📦 v2.3.0                                            │
@@ -1032,7 +1034,7 @@ PROJECT STATUS
 
 CONFIG
   Version   : v2.4.0
-  Plugins ON: superpowers, frontend-design, context7 (~1200t)
+  Plugins ON: superpowers, context7 (~1000t)
   GSD v2    : installed (2.64.0)
 
 PROJECT
@@ -1078,7 +1080,7 @@ SIGNALS: monorepo (upstream), frontend, fast-libs(Next.js)
 NOTE: dans apps/web/ d'un monorepo (détecté via parent dir)
 
 RECOMMENDATIONS:
-  ENABLE: frontend-design — apps/web/ uniquement
+  NOTE: frontend-design available (built-in, 0t) — apps/web/ uniquement
   WARN: context7 — Next.js détecté
   DISABLE: gstack — pas de browser-qa dans ce package
 ```
@@ -1112,13 +1114,13 @@ Le compteur `5/6 OK` indique exactement le problème sans lire toutes les lignes
 
 ### Cas O — session-start avec 5 toggles actifs
 
-**Avant v2.4.0 :** avec gstack + frontend-design + ui-ux-pro-max + context7 + ruflo actifs, la ligne débordait la box.
+**Avant v2.4.0 :** avec gstack + ui-ux-pro-max + context7 + ruflo actifs, la ligne débordait la box.
 
 **Avec v2.4.0 :**
 ```
 ┌─ Claude Code config ──────────────────────────────────┐
-│  ✅ ON  : security-guidance rtk superpowers            │
-│  🟢 ON  : gstack frontend-design +3 more              │
+│  ✅ ON  : rtk superpowers            │
+│  🟢 ON  : gstack ui-ux-pro-max +2 more              │
 │  ⚫ OFF : none                                         │
 │  💰 ~5350t passif (48% budget)                        │
 │  📦 v2.4.0                                            │
@@ -1147,7 +1149,7 @@ PROJECT STATUS
 
 CONFIG
   Version   : v2.5.0
-  Plugins ON: superpowers, frontend-design, context7 (~1200t)
+  Plugins ON: superpowers, context7 (~1000t)
   GSD v2    : installed (2.64.0)
 
 PROJECT
@@ -1328,14 +1330,14 @@ Sans ce check : `/status` chargerait un agent inexistant → erreur cryptique.
 
 ### Cas T — session-start avec 6 plugins actifs (tous affichés)
 
-**Avant v2.5.0 :** `gstack frontend-design +4 more` — 4 plugins masqués.
+**Avant v2.5.0 :** `gstack ui-ux-pro-max +3 more` — 4 plugins masqués.
 
 **Avec v2.5.0 :**
 ```
 ┌─ Claude Code config ──────────────────────────────────┐
-│  ✅ ON  : security-guidance rtk superpowers            │
-│  🟢 ON  : gstack frontend-design ui-ux-pro-max context7│
-│         + ruflo skill-creator                          │
+│  ✅ ON  : rtk superpowers            │
+│  🟢 ON  : gstack ui-ux-pro-max context7│
+│         + ruflo                          │
 │  ⚫ OFF : none                                         │
 │  💰 ~5750t passif (52% budget)                        │
 │  📦 v2.5.0                                            │
@@ -1382,7 +1384,7 @@ COST: ~800t (superpowers seul)
 
 RECOMMENDATIONS:
   OK KEEP   : superpowers (peut être utile pour brainstorm initial)
-  DISABLE   : frontend-design, ui-ux-pro-max, gstack, context7, ruflo
+  DISABLE   : ui-ux-pro-max, gstack, context7, ruflo
   NOTE      : Pour un firmware vraiment simple (hotfix, modification ciblée),
               même superpowers peut être désactivé → ~0t passif
 ```
@@ -1502,9 +1504,9 @@ Developer se réoriente instantanément — pas de risque d'implémenter sur la
 
 ```
 ┌─ Claude Code config ──────────────────────────────────┐
-│  ✅ ON  : security-guidance rtk superpowers            │
-│  🟢 ON  : gstack frontend-design ui-ux-pro-max context7│
-│             ruflo skill-creator                        │
+│  ✅ ON  : rtk superpowers            │
+│  🟢 ON  : gstack ui-ux-pro-max context7│
+│             ruflo                        │
 │  ⚫ OFF : none                                         │
 │  💰 ~5750t passif (52% budget)                        │
 │  📦 v2.6.0                                            │
@@ -1613,19 +1615,9 @@ Si `lib/` n'est pas un symlink vers le repo, `detect-plugins.sh` sourcé est la
 
 ---
 
-### Cas Z5 — plugin-advisor warn sur skill-creator inactif
+### Cas Z5 — ~~plugin-advisor warn sur skill-creator inactif~~ (obsolète depuis v3.3.0)
 
-**Contexte :** projet React SaaS, `skill-creator` resté actif par oubli.
-
-```
-/plugin-check "React SaaS avec FastAPI"
-
-SIGNALS: frontend, deploy, fast-libs(React)
-
-WARN: skill-creator ON — aucun signal skill-creation détecté
-      → ~100t économisés si désactivé
-      → Activer uniquement quand vous créez des skills custom
-```
+> **Obsolète :** `skill-creator` est désormais un skill built-in de Claude Code (toujours disponible, 0 token). Il n'est plus toggleable et n'apparaît plus dans les recommandations enable/disable du plugin-advisor.
 
 ---
 
@@ -1637,7 +1629,7 @@ WARN: skill-creator ON — aucun signal skill-creation détecté
 SIGNALS: simple, embedded
 COST: ~800t (superpowers seul)
 
-DISABLE: frontend-design, ui-ux-pro-max, gstack, context7, ruflo, skill-creator
+DISABLE: ui-ux-pro-max, gstack, context7, ruflo
 NOTE: Pour hotfix ultra-ciblé, superpowers aussi optionnel
 ```
 
@@ -1697,7 +1689,7 @@ NOTE: embedded project detected — minimal plugin footprint
 
 RECOMMENDATIONS:
   superpowers OPTIONAL
-  DISABLE: tout le reste (frontend-design, gstack, context7, ruflo, skill-creator)
+  DISABLE: tout le reste (gstack, context7, ruflo)
   gsd v2: NOT recommended
 
 Workflow: /analyze src/wifi_driver.c → /ship-feature si multi-fichiers
@@ -1754,7 +1746,7 @@ SIGNALS: embedded (platformio.ini)
 NOTE: embedded project detected — minimal plugin footprint
 
 KEEP   : superpowers (optional)
-DISABLE: frontend-design, ui-ux-pro-max, gstack, context7, ruflo, skill-creator
+DISABLE: ui-ux-pro-max, gstack, context7, ruflo
 gsd v2 : NOT recommended (sessions courtes, tâches atomiques)
 ```
 
@@ -2008,7 +2000,7 @@ Budget Pro note:
 ```
 Description contient...    →  Plugin
 ─────────────────────────────────────────────────────
-React / Vue / Svelte       →  frontend-design ON
+React / Vue / Svelte       →  frontend-design (built-in)
 Next.js 13+ / App Router   →  context7 WARN
 Prisma / Supabase          →  context7 ON
 "design élaboré" / tokens  →  ui-ux-pro-max ON
@@ -2016,6 +2008,6 @@ Docker + QA browser        →  gstack ON
 "plusieurs semaines"       →  gsd v2 CLI
 "5+ agents parallèles"     →  ruflo ON
 Rust / Python / Go / C     →  tout OFF sauf superpowers
-Mobile / Flutter / RN      →  frontend-design ON, gstack OFF
+Mobile / Flutter / RN      →  frontend-design (built-in), gstack OFF
 Hotfix / script rapide     →  tout OFF sauf superpowers
 ```

agents/plugin-advisor.md

@@ -29,6 +29,12 @@ command -v gsd &>/dev/null && gsd --version 2>/dev/null | head -1 || echo "gsd-n
 command -v rtk &>/dev/null && rtk --version 2>/dev/null | head -1 || echo "rtk-not-installed"
 command -v ruflo &>/dev/null && ruflo --version 2>/dev/null | head -1 || echo "ruflo-cli-not-in-path"
 
+# Built-in Claude Code skills (always available, 0 tokens, NOT toggleable):
+# - frontend-design: /mnt/skills/public/frontend-design/ — UI design guidance
+# - skill-creator: /mnt/skills/examples/skill-creator/ — create custom skills
+# Do NOT recommend enabling/disabling these — they are always present.
+# Do NOT count them in passive token cost.
+
 # Project signals (run from project root)
 ls package.json pyproject.toml Cargo.toml go.mod 2>/dev/null | head -5
 grep -rl "next\|react\|vue\|prisma\|supabase" package.json 2>/dev/null | head -3 || true
@@ -98,17 +104,17 @@ ACTION REQUIRED? YES / NO
 
 | Signal | Enable / Use | Disable / Skip | Notes |
 |---|---|---|---|
-| `frontend` | frontend-design, ui-ux-pro-max | — | Both complement each other |
-| `mobile` (React Native/Expo/Flutter) | frontend-design | gstack (no browser QA), Docker N/A | ui-ux-pro-max optional |
+| `frontend` | ui-ux-pro-max | — | frontend-design is built-in (always available) |
+| `mobile` (React Native/Expo/Flutter) | — | gstack (no browser QA), Docker N/A | frontend-design built-in; ui-ux-pro-max optional |
 | `monorepo` | per-package plugin recommendations | avoid recommending gstack for whole repo if only one package has browser QA | Specify which plugin applies to which package |
-| `design-system` | frontend-design, ui-ux-pro-max | — | High overlap but both useful |
+| `design-system` | ui-ux-pro-max | — | frontend-design built-in; ui-ux-pro-max adds design system depth |
 | `deploy` + `browser-qa` | gstack | — | Full-product workflow |
 | `multi-session` | gsd v2 CLI | — | Run `gsd` in terminal, not CC plugin |
 | `fast-libs` | context7 | — | Doc freshness critical |
 | `multi-agent` + `complex-arch` | ruflo (MCP) | — | Only if genuine swarm needed |
 | `simple` / single-session | — | gsd, gstack, ruflo, ui-ux-pro-max | Saves ~3000-5000t |
 | `embedded` / firmware | — | all toggles; superpowers optional | workflow: /analyze → edit or /ship-feature |
-| backend/lib/CLI only | — | frontend-design, ui-ux-pro-max, gstack | ~3100t saved |
+| backend/lib/CLI only | — | ui-ux-pro-max, gstack | frontend-design built-in (0t) |
 | small project / hotfix | — | gstack, ruflo, gsd | Overhead exceeds value |
 
 **GSD v2 note:** `gsd-pi` is a standalone CLI (Pi SDK), not a Claude Code plugin. Zero passive token cost in CC sessions. Recommend when: feature > 1 day, multiple isolated context windows needed, crash recovery, cost tracking, or parallel workers. Usage: `gsd` in terminal → `/gsd auto`.
@@ -123,7 +129,6 @@ ACTION REQUIRED? YES / NO
 
 | Pair | Relation | Verdict |
 |---|---|---|
-| frontend-design ↔ ui-ux-pro-max | ⚠️ Overlap | Both do UI styling. Keep both for design-heavy projects; drop ui-ux-pro-max for simple UIs. ~600t combined. |
 | gstack ↔ gsd v2 | ✅ Complementary | GStack = full-product CC workflow. GSD v2 = multi-session CLI. Different scopes, no conflict. |
 | gstack ↔ ruflo | ⚠️ Overlap | Both orchestrate multi-step workflows. GStack is CC-native; ruflo is MCP swarm. High combined overhead (~3250-4250t). Use one or the other. |
 | gsd v2 ↔ ruflo | ⚠️ Overlap | GSD v2 = sequential session pipeline. Ruflo = parallel agent swarm. Pick one per project; ruflo only if genuinely parallel work needed. |
@@ -131,33 +136,35 @@ ACTION REQUIRED? YES / NO
 | superpowers ↔ gstack | ✅ Complementary | Used together in /init-project and /ship-feature. Superpowers = engine, GStack = full-product skills. |
 | superpowers ↔ ruflo | ⚠️ Overlap | Both can orchestrate agent sub-tasks. Together only for advanced hybrid setups. |
 | context7 ↔ any | ✅ Independent | Doc lookup MCP, no workflow overlap. Always safe to combine. |
-| skill-creator ↔ superpowers | ⚠️ Minor overlap | Superpowers can create skills too. Keep skill-creator only when actively building new skills. |
-| frontend-design ↔ gstack | ✅ Complementary | GStack = deploy/QA layer; frontend-design = UI quality layer. Different concerns. |
-| pr-review-toolkit ↔ superpowers | ✅ Complementary | superpowers:requesting-code-review and /pr-review-toolkit:review-pr cover different review styles. |
 | rtk ↔ any | ✅ Independent | Hook-only token compression. Zero interaction with any plugin. |
-| security-guidance ↔ any | ✅ Independent | Hook-only security rules. Zero interaction. |
+
+> **Built-in skills (always available, 0 tokens, not toggleable):**
+> - `frontend-design` — UI design guidance, always loaded on demand
+> - `skill-creator` — create custom skills from conversation, always loaded on demand
+> These do NOT appear in enable/disable recommendations. They complement all plugins without conflict.
 
 ### Recommended sets by project type
 
 | Project type | Plugins ON | OFF | Passive cost |
 |---|---|---|---|
-| Backend API / microservice | superpowers, context7 (if fast libs) | frontend-design, ui-ux-pro-max, gstack, ruflo | ~800t |
-| Frontend SPA / SSR | superpowers, frontend-design, ui-ux-pro-max, context7 | gstack, ruflo | ~1600t |
-| Full-stack SaaS | superpowers, gstack, frontend-design, ui-ux-pro-max, context7 | ruflo | ~4400t |
+| Backend API / microservice | superpowers, context7 (if fast libs) | ui-ux-pro-max, gstack, ruflo | ~800t |
+| Frontend SPA / SSR | superpowers, ui-ux-pro-max, context7 | gstack, ruflo | ~1400t |
+| Full-stack SaaS | superpowers, gstack, ui-ux-pro-max, context7 | ruflo | ~4150t |
 | CLI tool / library | superpowers | all toggles | ~800t |
 | Multi-session large feature | superpowers + gsd v2 CLI (external) | ruflo (unless parallel) | ~800t CC |
 | Quick fix / hotfix | superpowers | all toggles | ~800t |
-| Design system / component lib | superpowers, frontend-design, ui-ux-pro-max | gstack, ruflo, gsd | ~1600t |
-| Fast-evolving libs (Next.js etc.) | superpowers, context7, frontend-design | ruflo | ~1200t |
-| Enterprise multi-agent orchestration | superpowers, ruflo + gsd v2 (external) | skill-creator, pr-review-toolkit | ~2300t CC |
+| Design system / component lib | superpowers, ui-ux-pro-max | gstack, ruflo, gsd | ~1200t |
+| Fast-evolving libs (Next.js etc.) | superpowers, context7 | ruflo | ~1000t |
+| Enterprise multi-agent orchestration | superpowers, ruflo + gsd v2 (external) | — | ~2300t CC |
 
-> security-guidance and rtk are ALWAYS ON (0 tokens) — omitted from cost estimates for clarity.
+> rtk is ALWAYS ON (0 tokens) — omitted from cost estimates.
+> frontend-design and skill-creator are built-in (0 tokens) — always available, omitted from recommendations.
 
 ### Conditional rules
 
 ```
 RULE: IF "mobile" signal (React Native/Expo/Flutter detected):
-  → frontend-design ON (~200t) — mobile UI components
+  → frontend-design available (built-in, 0t)
   → gstack OFF — no browser QA on mobile
   → Docker NOT relevant — no server-side containerization for mobile
   → ui-ux-pro-max OPTIONAL (~400t) — only if design system complexity is high
@@ -165,13 +172,12 @@ RULE: IF "mobile" signal (React Native/Expo/Flutter detected):
 RULE: IF "monorepo" signal detected:
   → scan each top-level package individually for frontend/deploy/fast-libs signals
   → recommend plugins per-package, NOT for the whole repo
-  → if only apps/web/ has frontend: enable frontend-design for web package only
   → if only apps/api/ has deploy: gstack only if apps/api/ has browser QA too
   → NOTE in output: "Plugin X recommended for apps/web/ — disable for apps/api/"
   → passive cost estimate = highest-cost package profile (other packages add nothing)
 
 RULE: IF "frontend" signal OR .tsx/.jsx count > 0:
-  → frontend-design ON (~200t)
+  → frontend-design available (built-in, 0t) — no action needed
   → ui-ux-pro-max ON if "design-system" signal (~400t additional)
 
 RULE: IF "deploy" AND "browser-qa" signals:
@@ -192,7 +198,7 @@ RULE: IF "simple" OR "hotfix":
   → Disable all toggles. ~800t base only.
 
 RULE: IF "embedded" signal (firmware, bare-metal, microcontroller, or Makefile+C without Node/Rust/Go):
-  → Disable ALL toggles including gstack, context7, ruflo, skill-creator
+  → Disable ALL toggles including gstack, context7, ruflo
   → superpowers OPTIONAL: useful for initial design brainstorm on complex drivers,
     but unnecessary for single-function patches — user decides
   → GSD v2 CLI: not recommended (sessions are short, tasks are atomic)
@@ -203,12 +209,8 @@ RULE: IF gstack ON AND ruflo ON:
   → WARN: functional overlap on multi-step orchestration
   → Suggest: gstack for CC-native workflow, ruflo only if parallel swarm needed
 
-RULE: IF skill-creator ON AND no `skill-creation` signal detected:
-  → WARN: skill-creator active but no skill-creation signal (~100t saved if disabled)
-  → Disable unless you're actively building or editing custom skills
-
 RULE: IF `skill-creation` signal:
-  → skill-creator ON (~100t)
+  → skill-creator is built-in (always available, 0t) — no action needed
   → superpowers ON — required for skill scaffolding
 
 RULE: IF `browser-qa` signal (e2e tests, Playwright/Cypress/Puppeteer in deps):
@@ -216,9 +218,9 @@ RULE: IF `browser-qa` signal (e2e tests, Playwright/Cypress/Puppeteer in deps):
   → context7 OPTIONAL (depends on framework version)
 
 RULE: IF `design-system` signal (tokens, theme files, Storybook present):
-  → frontend-design ON (~200t)
+  → frontend-design available (built-in, 0t)
   → ui-ux-pro-max ON (~400t)
-  → WARN if both are OFF with this signal: significant design gap
+  → WARN if ui-ux-pro-max OFF with this signal: design system depth may suffer
 
 RULE: IF `complex-arch` signal (multiple services, event bus, distributed system):
   → ruflo MCP ON (~500-1500t)
@@ -231,7 +233,7 @@ RULE: IF `complex-arch` signal (multiple services, event bus, distributed system
 ## BLOCK if
 
 - Superpowers not active → install: `claude plugin marketplace add obra/superpowers-marketplace && claude plugin install --scope user superpowers@superpowers-marketplace`
-- Significant frontend signal + frontend-design AND ui-ux-pro-max both off
+- Significant frontend signal + ui-ux-pro-max off (for design-heavy projects)
 - Full-product (UI+deploy+QA) + gstack not installed
 
 ## WARN (no block)

hooks/session-start.sh

@@ -48,11 +48,10 @@ unset _lib
 TOGGLE_ACTIVE=()
 TOGGLE_INACTIVE=()
 
-for plugin in gstack uiux_pro_max frontend_design context7 ruflo; do
+for plugin in gstack uiux_pro_max context7 ruflo; do
   # Map function name to display name
   case "$plugin" in
     uiux_pro_max)    display="ui-ux-pro-max" ;;
-    frontend_design) display="frontend-design" ;;
     *)               display="$plugin" ;;
   esac
 
@@ -88,7 +87,6 @@ unset _claude_real _repo_dir
 _passive_t=0
 detect_superpowers 2>/dev/null && _passive_t=$((_passive_t + 800))
 detect_gstack      2>/dev/null && _passive_t=$((_passive_t + 2750))
-detect_frontend_design 2>/dev/null && _passive_t=$((_passive_t + 200))
 detect_uiux_pro_max    2>/dev/null && _passive_t=$((_passive_t + 400))
 detect_context7    2>/dev/null && _passive_t=$((_passive_t + 200))
 detect_ruflo       2>/dev/null && _passive_t=$((_passive_t + 1000))
@@ -104,7 +102,8 @@ unset _passive_t _budget_pct
 
 echo ""
 echo "┌─ Claude Code config ──────────────────────────────────┐"
-printf "│  ✅ ON  : %-40s│\n" "security-guidance rtk superpowers"
+printf "│  ✅ ON  : %-40s│\n" "rtk superpowers"
+printf "│  🔵 BUILT-IN: %-35s│\n" "frontend-design skill-creator"
 # Plugin display — all plugins shown, split across 2 lines if >4
 _active_count=${#TOGGLE_ACTIVE[@]}
 _inactive_count=${#TOGGLE_INACTIVE[@]}

install-plugins.sh

@@ -322,16 +322,11 @@ install_plugin() {
   fi
 }
 
-# Official Anthropic (always on)=
-
-# pr-review-toolkit — installer depuis le vrai repo si nécessaire
-if ! claude plugin list 2>/dev/null | grep -qi "pr-review"; then
-  info "Installing pr-review-toolkit from GitHub..."
-  claude plugin install --scope user https://github.com/anthropic-community/pr-review-toolkit 2>/dev/null \
-    || warn "pr-review-toolkit — not available as plugin, use as slash command or skill instead"
-else
-  ok "pr-review-toolkit (already installed)"
-fi
+# Built-in Claude Code skills (no install needed)
+ok "frontend-design — built-in Claude Code skill (always available)"
+ok "skill-creator — built-in Claude Code skill (always available)"
+ok "security-guidance — covered by RTK hook (no separate plugin exists)"
+warn "pr-review-toolkit — no marketplace plugin exists; removed from install"
 
 echo ""
 
@@ -376,16 +371,16 @@ echo "║                     Install Summary                     ║"
 echo "╚══════════════════════════════════════════════════════════╝"
 echo ""
 echo "  ALWAYS ON (installed at user scope):"
-echo "    ✅ security-guidance   — PreToolUse security hook (0 tokens)"
 echo "    ✅ rtk                 — token compression hook (0 tokens)"
 echo "    ✅ superpowers         — brainstorm/plan/implement/debug workflow"
 echo ""
+echo "  BUILT-IN (Claude Code skills — always available, no install needed):"
+echo "    🔵 frontend-design     — /mnt/skills/public/frontend-design/"
+echo "    🔵 skill-creator       — /mnt/skills/examples/skill-creator/"
+echo ""
 echo "  TOGGLE (installed but start OFF — /plugin-check recommends when needed):"
 echo "    🔄 gstack              — ~/.claude/skills/gstack/ (→ submodule)"
 echo "    🔄 gsd v2              — standalone CLI 'gsd' (gsd-pi, not a Claude Code plugin)"
-echo "    🔄 skill-creator       — create skills from conversation (~100 tokens)"
-echo "    🔄 pr-review-toolkit   — /pr-review-toolkit:review-pr (~300 tokens)"
-echo "    🔄 frontend-design     — user scope (~200 tokens)"
 echo "    🔄 ui-ux-pro-max       — user scope (~400 tokens)"
 echo "    🔄 context7 MCP        — see Step 7 above (~200 tokens)"
 echo "    🔄 ruflo MCP           — see Step 5 above (~500-1500 tokens, enterprise only)"

lib/detect-plugins.sh

@@ -37,10 +37,12 @@ detect_gsd() {
   command -v gsd &>/dev/null
 }
 
-detect_frontend_design() {
-  local cache_dir="$HOME/.claude/plugins/cache"
-  [ -d "$cache_dir" ] && ls "$cache_dir" 2>/dev/null | grep -qi "frontend-design"
-}
+# NOTE: frontend-design is a built-in Claude Code skill (/mnt/skills/public/frontend-design/).
+# It is always available and does not need detection. No detect_frontend_design() function needed.
+# NOTE: skill-creator is a built-in Claude Code skill (/mnt/skills/examples/skill-creator/).
+# It is always available and does not need detection. No detect_skill_creator() function needed.
+# NOTE: security-guidance does not exist as a plugin. RTK covers security hooks.
+# NOTE: pr-review-toolkit does not exist as a marketplace plugin.
 
 detect_uiux_pro_max() {
   local cache_dir="$HOME/.claude/plugins/cache"

version.txt

@@ -1 +1 @@
-3.2.1
+3.3.0