claude

tracekit

Hooks that send each Claude Code tool call to a local Tracekit signer before it runs: allowed, denied with the rule that matched, or held until you approve it from another terminal. The signer signs every call, decision and result into a hash-chained record that `tracekit verify` checks offline. Needs the tracekit-ai Python package (`pip install tracekit-ai==1.6.0 && tracekit init --dev --v2 --no-hooks`). In that dev mode the signer runs as your own user; on Linux, system mode runs it as a separate user.

3,741 on GitHubby Cygnux Labsv1.6.0MITupdated 2 days agosecurity
/

Plugin tracekit from marketplace buildwithclaude in davepoon/buildwithclaude. Commands read from the repo's manifest — yesterday.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (3)

  • tracekit-graph

    Answer questions about what AI agents did across runs (which runs changed a file, who approved them, which hosts they reached, what a denied or held call was, what caused what) from Tracekit's graph.json, citing the signed record behind each answer, instead of reading agent logs or transcripts. Use

  • tracekit-holds

    What to do when Tracekit stops a tool call. Use whenever a tool call is refused with a message that starts with "[tracekit] HELD" (a person must answer it), "[tracekit] BLOCKED" (no one can approve it) or "[tracekit] NOT APPROVED", including when it shows as a hook error.

  • tracekit-setup

    Sets up Tracekit (open source, MIT; PyPI package tracekit-ai) for a coding agent, asking the operator before each step. Tracekit checks every tool call before it runs, holds risky ones until a person approves, and signs each call into a tamper-evident record that verifies offline. Use when the opera

Slash commands (3)

  • /tracekit:tracekit-pending

    List tool calls held for approval

  • /tracekit:tracekit-status

    Check Tracekit's signer setup

  • /tracekit:tracekit-verify

    Export this session's evidence bundle and verify it offline

Hooks (9)

  • PreToolUse

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" PreToolUse

  • PostToolUse

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" PostToolUse

  • PostToolUseFailure

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" PostToolUseFailure

  • UserPromptSubmit

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" UserPromptSubmit

  • Stop

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" Stop

  • SubagentStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" SubagentStart

  • SubagentStop

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" SubagentStop

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" SessionStart

  • SessionEnd

    "${CLAUDE_PLUGIN_ROOT}/scripts/tracekit-hook" SessionEnd

View source on GitHub buildwithclaude.com

More from davepoon/buildwithclaude

All 277 plugins →

all-skills

claude

Complete collection of ~110 Claude Code skills across document processing, development, automation, CRM, DevOps, and more

200 skills

3,741

all-commands

claude

Complete collection of 174 slash commands across 22 categories

177 commands

3,741

all-agents

claude

Complete collection of 117 specialized AI agents across 11 categories

117 agents

3,741

gsd

claude

Get Shit Done -- a structured workflow plugin for Claude Code that adds planning, execution, and verification commands with MCP-backed project state

83 skills · 33 agents · 1 MCP server

3,741

forge

claude

Full-lifecycle SDLC orchestrator: a 12-stage pipeline (SRS, architecture, spec, plan, build, eval, deploy, monitor, release) driven by specialized agents, persistent cross-session memory, auto-reflection, gate enforcement, and semantic skill mining that proposes new skills from recurring workflows.

45 skills · 27 agents · hooks

3,741

suede-skills

claudecodex

74 skills for Claude Code and Codex. A build DAG researches your repo, fans out disjoint lanes, and refutes its own review before anything lands. A blunt A-F ship grade blocks the bad merge instead of complimenting it. The same folder designs the page, writes the copy, and ships native iOS and Android builds.

70 skills · 1 MCP server

3,741

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

plugin-dev

claude

Comprehensive toolkit for developing Claude Code plugins. Includes 7 expert skills covering hooks, MCP integration, commands, agents, and best practices. AI-assisted plugin creation and validation.

7 skills · 1 command · 3 agents

anthropics/claude-code 155,476

CMEM Pro

claude

CMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents

3 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

mempalace

claudecodex

AI memory system — mine projects and conversations into a searchable palace. 47 MCP tools, auto-save hooks, guided setup.

3 skills · 6 commands · 1 MCP server · hooks

MemPalace/mempalace 60,536

pensyve

claude

Universal memory runtime for Claude Code with cross-session memory, entity-aware recall, lifecycle hooks, skills, commands, and memory-curator agents

7 skills · 7 commands · 2 agents · hooks

wshobson/agents 42,461

prowler

claude

Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.

1 skill · 1 MCP server

prowler-cloud/prowler 15,234

Maintain tracekit?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins277 plugins