gadriel

Plugin gadriel from marketplace gadriel in Gadriel-ai/gadriel-claude-plugin. Commands read from the repo's manifest — 12 days ago.

Skills (17)

• gadriel-a2a-contracts

  Agent-to-agent contract patterns — ack/timeout, idempotency keys, message versioning, signed envelopes. Auto-invoke for findings tagged `teamwork`, `a2a`, `agent-contract`, or rule IDs `CODE-W1-AI-6**` where the AST shows agent-to-agent message passing.

• gadriel-ai-config-security

  LangChain, CrewAI, MCP, and direct-SDK configuration security — temperature/top_p sanity, system-prompt leak prevention, tool-exposure review. Auto-invoke for findings tagged `ai-config`, `model-config`, or rule IDs `CODE-W1-CONFIG-*`, and when the user asks about "safe defaults", "system prompt pro

• gadriel-ai-secrets-catalog

  AI-native secrets catalog — API key, token, and credential patterns for every major model provider and vector-DB. Auto-invoke for findings tagged `secret-leak`, `hardcoded-credential`, or rule IDs `CODE-W1-L1-*` when the leaked material is an LLM/AI provider key.

• gadriel-api-security-patterns

  REST, GraphQL, gRPC, and OpenAPI security patterns — authn, authz, rate limits, schema validation, mass assignment. Auto-invoke for findings tagged `api-security` or rule IDs `CODE-W1-API-*`, and when the user asks about "API hardening", "GraphQL query depth", "rate limit", "OpenAPI security".

• gadriel-bayesian-calibration

  Bayesian calibration for Gadriel verdicts — interpreting the {{bayes_prior}} prompt slot, reliability diagrams, ECE, post-hoc calibration (Platt, isotonic, temperature scaling). Auto-invokes for ALL agents on every finding; this is the cross-cutting skill shared by every pillar.

• gadriel-deadlock-resolution

  Multi-agent deadlock patterns — circular waits, supervisor-loop starvation, tool-contention. Auto-invoke for findings tagged `teamwork`, `deadlock`, `livelock`, `starvation`, or rule IDs `CODE-W1-AI-6**` where the graph contains cycles or shared mutexes.

• gadriel-dockerfile-best-practices

  Container security and efficiency patterns — CIS Docker Benchmark, root user, latest tag, secret-bake, image-bloat. Auto-invoke for findings tagged `container`, `dockerfile`, or rule IDs `CODE-W1-CONTAINER-*`, and when the user asks about "Dockerfile review", "Kubernetes hardening", "image scan".

• gadriel-eu-ai-act-mapper

  EU AI Act article-by-article mapping — translate Gadriel findings into the obligations they trigger (Art. 9 risk-mgmt, Art. 10 data governance, Art. 13 transparency, Art. 14 human oversight, Art. 15 accuracy/robustness/cybersec). Auto-invoke for compliance findings or when the user asks about "EU AI

• gadriel-graph-attack-patterns

  Multi-agent graph-attack catalog — prompt injection across hand-offs, cross-agent context smuggling, tool-chain hijack. Auto-invoke for findings tagged `graph-attack`, `cross-agent`, or rule IDs `CODE-W1-AI-6**` when the AST shows agent-to-agent edges (CrewAI Task→Agent, LangGraph nodes, Anthropic A

• gadriel-hitl-patterns

  Human-in-the-loop gate patterns — autonomy boundaries, approval gates, audit trails for high-impact actions. Auto-invoke for findings tagged `safety`, `autonomy-gate`, `hitl`, or rule IDs `CODE-W1-AI-6**` where the agent has high-impact tools (shell, financial, deletion).

• gadriel-license-compatibility

  Open-source license compatibility matrix — copyleft propagation, viral GPL detection, license-incompatible imports. Auto-invoke for findings tagged `license`, `license-incompat`, or rule IDs `CODE-W1-L2-*` when the matched dep has a flagged license.

• gadriel-nist-ai-rmf-mapper

  NIST AI Risk Management Framework (AI RMF 1.0) function-by-function mapping — Govern, Map, Measure, Manage. Auto-invoke for compliance findings, or when the user asks about "NIST AI RMF", "AI governance", "AI risk assessment".

• gadriel-output-schema-library

  JSON Schema patterns for structured LLM output — strict schemas, refusal handling, retry-on-parse-fail, common gotchas. Auto-invoke for findings tagged `coherence`, `schema`, `structured-output`, or rule IDs `CODE-W1-AI-6**` where the agent emits machine-parsable output.

• gadriel-owasp-llm-top10

  OWASP LLM Top 10 (2025) catalog with detection patterns and remediations. Auto-invoke for findings tagged `owasp-llm-*`, `prompt-injection`, `insecure-output-handling`, or rule IDs `CODE-W1-AI-*`, when the user asks about "LLM vulnerabilities", "prompt injection", or "model security".

• gadriel-owasp-web-top10

  OWASP Web Top 10 (A01-A10, 2021) detection patterns and language-specific remediations. Auto-invoke for findings tagged `owasp-web-*` or rule IDs `CODE-W1-L3-*` (injection/auth/access-control), and when the user asks about "SQL injection", "broken access control", "XSS", or general web vulnerabiliti

• gadriel-sbom-guidance

  SBOM generation guidance — SPDX vs CycloneDX, when each is required, common gotchas (transitive deps, base-image layers, AIBOM). Auto-invoke for compliance findings tagged `sbom`, supply-chain findings, or when the user asks about "SBOM", "SPDX", "CycloneDX", "AIBOM", "Executive Order 14028".

• gadriel-token-cost-estimator

  Token-cost math, per-call pricing, ceiling enforcement, model-tier selection. Auto-invoke for findings tagged `finops`, `cost-anomaly`, `token-budget`, or rule IDs `CODE-W1-COST-*`, and when the user asks about "token cost", "pricing", "context-window optimization", "model tier".

Slash commands (5)

• /gadriel:fix

  Propose and apply a remediation for one Gadriel finding by ID

• /gadriel:reports

  Generate Gadriel's compliance reports (PDF) for every pillar

• /gadriel:scan

  Scan the repo (or one path) with Gadriel - SAST, secrets, dependencies, containers, config

• /gadriel:status

  Show the open Gadriel findings from the last scan

• /gadriel:watch

  Start Gadriel's watch mode for on-save scanning in the background

Subagents (8)

• gadriel-bias-reviewer

  Reviews code for fairness-gate omissions, demographic-parity violations, dataset-bias risk, Bayesian-calibration drift, and disparate-impact patterns in AI-driven decisions. Delegate to this agent when the user asks about fairness audits, demographic handling, calibration drift, dataset bias, or any

• gadriel-coherence-reviewer

  Reviews code for output-schema validation gaps, prompt-template drift, JSON-parse failures, structured-output contract integrity, and determinism issues in LLM responses. Delegate to this agent when the user asks about schema mismatches, structured-output drift, parser failures, prompt-template vers

• gadriel-compliance-reviewer

  Reviews code and configuration for EU AI Act, NIST AI RMF, GDPR, HIPAA, SOC2, and SBOM/license obligations. Delegate to this agent when the user asks about regulatory mapping, audit-grade language, Article 13 transparency, GPAI obligations, data residency, license violations, or any CODE-W2-* findin

• gadriel-finops-reviewer

  Reviews code for token-cost ceilings, model-pricing tier mismatches, retry-budget overruns, unbounded loops, and dependency or container bloat that drives spend. Delegate to this agent when the user asks about LLM cost, token usage, expensive models on cheap tasks, runaway retry loops, or any CODE-W

• gadriel-operational-reviewer

  Reviews code for SBOM hygiene, license compatibility, dependency health, container best practices, error handling, and build reproducibility. Delegate to this agent when the user asks about license conflicts, vulnerable transitive deps, missing SBOM, Dockerfile inefficiency, error-handling gaps, or

• gadriel-safety-reviewer

  Reviews code for HITL gate violations, autonomy-boundary overruns, prompt-injection guardrails, and agent-config safety (LangChain, CrewAI, MCP, AutoGen). Delegate to this agent when the user mentions agent safety, human-in-the-loop, autonomous loops, model temperature or safety params, or any CODE-

• gadriel-security-reviewer

  Reviews code for OWASP Top 10, CWE-class vulnerabilities, SAST findings, hardcoded secrets, container hardening, and API surface risks. Delegate to this agent when the user mentions security findings, vulnerability remediation, SQL injection, XSS, secrets, Dockerfile issues, or any CODE-W1-* finding

• gadriel-teamwork-reviewer

  Reviews code for agent-to-agent (A2A) contract gaps, deadlock patterns, missing ack timeouts, broken handoff protocols, and circular-wait risks in multi-agent systems. Delegate to this agent when the user asks about agent coordination, A2A protocols, deadlocks, handoff contracts, or any CODE-W7-* fi

MCP servers (1)

• gadriel

  runs: ${CLAUDE_PLUGIN_ROOT}/bin/gadriel code mcp

Hooks (10)

• PreToolUse

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" pre-bash

• PostToolUse

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" post-edit

• UserPromptSubmit

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" route

• SessionStart

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" session-restore

• SessionStart

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" snapshot-load

• SessionEnd

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" session-end

• Stop

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" sync

• PreCompact

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" compact-manual

• PreCompact

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" compact-auto

• SubagentStop

  sh "${CLAUDE_PLUGIN_ROOT}/scripts/gadriel-hook.sh" post-task

Similar plugins