task-tracker
claudeLightweight task/ticket tracker using TSV files and shell scripts, with a guard-rail hook against Claude sessions hand-editing the index
1 skill · 5 commands · hooks
0
claude
hardening-dev-environment
Hardens Claude Code dev environments: pnpm supply-chain config + npx-to-pnpm-dlx migration; mode-agnostic .claude/settings.json deny/ask rules and v2.1.83+ auto-mode overlay (defaultMode + classifier backstops); PreToolUse hooks (credential reads, package.json scripts tampering); PostToolUse trust-boundary reminder for non-vendor WebFetch results
/
Plugin hardening-dev-environment from marketplace khaym-claude-plugins in khaym/Claude-Code-Plugins. Commands read from the repo's manifest — 6 days ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
What it installs
Skills (5)
hardening-claude-permissionsWrites acceptEdits-tuned permission rules into .claude/settings.json — deny on config writes, credential reads, outbound and privilege-escalation Bash; ask on plugin-author paths; safe-bash allow baseline. Use when you hear "harden claude permissions" or "lock down claude code".
hardening-overviewAudits a project's hardening-dev-environment defense layers and recommends a setup order to apply them. Use when you hear "harden dev environment", "set up hardening", "hardening overview", "audit claude code hardening".
hardening-pnpm-configHardens pnpm 10.26+ config to reduce npm supply chain risk. Writes baseline settings into pnpm-workspace.yaml and package.json, and migrates npx invocations to pinned pnpm dlx. Use when you hear "harden pnpm config", "pnpm supply chain hardening", "replace npx with pnpm dlx".
hardening-untrusted-contentReinforces the trust boundary that fetched content is data, not instructions. Bundles a PostToolUse hook that injects a reminder after every non-vendor WebFetch. Use when you hear "harden webfetch handling", "treat fetched content as untrusted", "indirect prompt injection from webfetch".
hardening-uv-configHardens uv-managed Python projects against PyPI supply chain risk. Migrates legacy pip / setup.py projects to a uv-native shape, writes baseline `[tool.uv]` settings into pyproject.toml, and replaces `pip install` / `pipx run` invocations with pinned `uv add` / `uvx`. Use when you hear "harden uv co
Hooks (4)
- PreToolUse
${CLAUDE_PLUGIN_ROOT}/hooks/scripts/sensitive-bash-guard.py
- PreToolUse
${CLAUDE_PLUGIN_ROOT}/hooks/scripts/package-json-scripts-guard.py
- PreToolUse
${CLAUDE_PLUGIN_ROOT}/hooks/scripts/pyproject-buildsystem-guard.py
- PostToolUse
${CLAUDE_PLUGIN_ROOT}/hooks/scripts/untrusted-content-reminder.py
More from khaym/Claude-Code-Plugins
All 12 plugins →gnome-loop
claudeDevelopment pipeline plugin. The dev-cycle skill carries the six-stage development method any session follows from ticket filing to close; the gnome-loop skill runs autonomous laps over loop-ready tickets (worktree implementation, review, evidence, merge queue) with a bundled implementer agent for novel-lane work; the onboarding skill wires a new host project in one conversation.
3 skills
0
wsl-notify
claudeWindows desktop notifications and sleep inhibition for Claude Code via wsl-relay — alerts on task completion and permission prompts, keeps the host awake while tasks run
2 commands · hooks
0
decision-queue
claudeKeeps the decisions awaiting the user always visible in the statusline — one queue file per session, updated by Claude as items arise and resolve, surviving plugin updates via a self-healing stable path
1 skill · hooks
0
coding-guideline
claudeKeeps a story's implementation on its purpose and changeable: tests, code, and comments built from what the design documents or the ticket decided, by correspondence rules that keep the purpose and a Data-Oriented Programming method that turns the design's contract into records and operations, leaving the structure rules that keep changeability in the code, with the means left to the author
1 skill
0
design-doc-authoring
claudeGuides writing the three design documents (Design Doc, Data Dictionary, Business Rules) from the purpose down to decided rules, one judged stage at a time, so a vague goal is settled in prose before implementation starts, and reviews a written design as its implementer would with a read-only review agent
1 skill
0
Similar plugins
ecc
claudecodexHarness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
affaan-m/ECC 302,088
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
ruflo-federation
claudeCross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
sickn33/agentic-awesome-skills 49,620
duende-skills
claudecodexDuende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
anthropics/claude-plugins-official 47,076
security-scanning
claudecodexSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
Maintain hardening-dev-environment?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins12 plugins