token-tally

Local deterministic pattern bridge for new file content. Not the official Claude Security plugin and not a data-flow scanner.

Appends architecture rules as Claude-only context on every prompt, and drops prompts that explicitly tell Claude to ignore or bypass security rules.

Default-closed eval gate. External Promptfoo runs in CI are the real gate; this mod is defence in depth only.

Short-lived credential gate. Fetches a token from a configured broker only; it never invents a token and never falls back to a long-lived credential.

Redacts secret patterns from prompts, shell commands and shell output, blocks writes that contain secrets, and denies reads and mentions of secret files.

Local deterministic guard for dangerous Bash and PowerShell commands. Not the Rulebricks product; no network calls.

Token usage tracking, model cost attribution per agent, budget alerts, and optimization recommendations

24 skills · 1 command · 1 agent · hooks

Skill: add headroom-ai compress() to a Python or TypeScript app to cut LLM input tokens (tool outputs, logs, JSON, chat history). No API key.

1 skill

Cross-session memory and token savings for coding agents.

6 skills · 1 agent · 1 MCP server · hooks

Query Trackio projects, runs, and metrics using the `trackio` CLI. Use when the user needs to list projects/runs/metrics, get summaries, or retrieve metric values from local Trackio databases. Supports both human-readable and JSON output formats. Covers project discovery, run inspection, metric querying, and system metrics. Designed for LLM agents and automation scripts.

1 skill

Transform Claude into an Azure expert. This plugin integrates the Azure MCP server and specialized Azure skills to move beyond generic advice. It enables Claude to perform real-world tasks: listing resources, validating deployments, diagnosing infrastructure issues, and optimizing costs across 50+ Azure services.

44 skills · 1 MCP server

Independent auditing for AI agents, open source. Claude discovers your setup, confirms the cost, and audits your agent against the one question other tools skip: is it doing the job it's supposed to do, given your business rules and org structure? Test any model (Anthropic, OpenAI, Gemini, Azure, Bedrock, …) graded by self, one independent judge, or a cross-vendor panel; each provider is billed to its own account via a key in your settings, never the command line. Results render as an interactive artifact (with a static-report fallback).

1 skill · hooks