config-guard

Prices your repo's TODO/FIXME/HACK debt as aging XP bounties, injects the top 3 as opportunistic side quests, and verifies + pays out bounties you genuinely clear.

1 skill · hooks

The comeback price of a cold prompt cache, shown before you pay it: a UserPromptSubmit guard that warns (or refuses once) when your next message re-writes a lapsed 1-hour cache at up to 80x the read rate, a SessionStart hook that prices a stale resume, and a one-line status line segment with minutes left and the cold-comeback cost.

1 skill · hooks

Per-file context-cost leaderboard: attributes every tool result's tokens to the files it loaded, so you know which files cost you the most.

1 skill · hooks

Remembers approaches you tried and reverted (with reason and estimated token cost) and warns before you retry them, via a prompt-submit card and an ask-before-edit guard.

1 skill · hooks

CLAUDE.md compliance scorecard: tallies which rules Claude actually follows vs ignores as you edit, and flags chronically-ignored rules to promote into a deterministic hook.

1 skill · hooks

A personal flight recorder for Claude Code quality: records your own per-session failure rate, edit churn, and tokens/task by model version, and flags real shifts when a model changes.

1 skill · hooks

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

Install the "AAS Security Engineer" editorial skill bundle for Claude Code.

12 skills

Independent auditing for AI agents, open source. Claude discovers your setup, confirms the cost, and audits your agent against the one question other tools skip: is it doing the job it's supposed to do, given your business rules and org structure? Test any model (Anthropic, OpenAI, Gemini, Azure, Bedrock, …) graded by self, one independent judge, or a cross-vendor panel; each provider is billed to its own account via a key in your settings, never the command line. Results render as an interactive artifact (with a static-report fallback).

1 skill · hooks

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents