lk-secret-guard

See and steer your subagents: cards with cost, tokens, context and progress, tree and team views, spawn caps, permission waits, idle alerts and a Stop button.

Know when Claude needs you or finished something long: a desktop notification, a sound, a toast, a band and an /lk-attention inbox. Linux with GNOME.

Don't lose a session to the context limit: watches context fill, writes a handoff into .claude/brain/ before the limit, then clears and resumes from it.

PR and CI state for the current branch above the prompt, toasts on transitions, and a note to Claude when a check fails. Works through your gh sign-in.

A token budget for the session and each subagent that warns, refuses new subagents or stops tool calls, and a prompt-cache timer with an opt-in keep-warm.

One line above the prompt with the repo, branch and worktree, how dirty it is, and the account's usage windows and prompt cache, plus a /lk-where pane.

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

AgentDB (external: maintained in ruvnet/agentdb, pinned to commit 27678c3, plugin 3.6.0): agentdb's own standalone MCP server pinned to [email protected] (vector memory with get/list/update/delete for records, patterns and skills, hybrid keyword + vector episode search and an opt-in local cross-encoder, an opt-in aidefence injection guard on memory writes, reflexion, skills, outcome feedback, capabilities report), a memory-specialist agent, 3 skills, /agentdb-status, and the agentdb mod guard that keeps secrets out of memory and refuses delete/reset unless allowed. Complements ruflo-agentdb, which reaches AgentDB through ruflo's server

3 skills · 1 command · 1 agent · 1 MCP server

Install the "AAS Secure App Builder" editorial skill bundle for Claude Code.

12 skills

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents