permission-guardian

Turn vague task ideas into well-structured Ralph Loop prompts. Generates completion criteria, suggests iteration limits, previews the full prompt, then launches the ralph-loop with safety nets. Requires the ralph-loop plugin.

1 skill · 1 command

Manage per-project skills, plugins, and MCP servers via a bullpen + symlink pattern. Vendor-neutral path (~/.agents/) works for both Claude Code and Codex.

1 skill · 1 command

Selects the best browser MCP tool for a given task based on requirements like cross-browser support, debugging depth, performance analysis, and login state needs.

1 skill

Prepare a private codebase for safe open-source release with secret scanning, license guidance, and standard repository documentation.

1 skill

Comprehensive 6-agent parallel security scanner for Claude Code. Detects malicious code, credential leaks, data exfiltration, supply chain risks, and prompt injection attacks.

1 command

Preview the images and markdown files of a conversation in Claude Code: hover cards, pasted-image thumbnails above the prompt, and a side pane that draws markdown as a preview does. Pictures show over ssh, and over mosh in block characters.

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

Install the "AAS Security Engineer" editorial skill bundle for Claude Code.

12 skills

Independent auditing for AI agents, open source. Claude discovers your setup, confirms the cost, and audits your agent against the one question other tools skip: is it doing the job it's supposed to do, given your business rules and org structure? Test any model (Anthropic, OpenAI, Gemini, Azure, Bedrock, …) graded by self, one independent judge, or a cross-vendor panel; each provider is billed to its own account via a key in your settings, never the command line. Results render as an interactive artifact (with a static-report fallback).

1 skill · hooks

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents