claude

agent-bom-guard

Blocks known-malicious and typosquatted package installs before Claude runs them, and warns on known advisories for an exact pinned version.

37 on GitHubby koda-ai-studiov0.114.0Apache-2.0updated todaysecurity
/

Plugin agent-bom-guard from marketplace agent-bom in koda-ai-studio/agent-bom. Commands read from the repo's manifest — today.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Hooks (1)

  • PreToolUse

    python3

View source on GitHub koda-ai-studio.github.io

More from koda-ai-studio/agent-bom

All 3 plugins →

agent-bom

claudecodex

Scan MCP servers, agents and packages for CVEs, supply-chain risk and exposed credentials; check a server before you add it; plan fixes.

9 skills · 2 MCP servers

37

Inventory and audit your AI estate: scan MCP servers, agents and packages for CVEs, supply-chain risk and exposed credentials; audit MCP configs and skills for injection and risky grants; check a server before you add it; plan fixes. Read-only by default and local.

9 skills · 2 MCP servers

37

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Comprehensive toolkit for developing Claude Code plugins. Includes 7 expert skills covering hooks, MCP integration, commands, agents, and best practices. AI-assisted plugin creation and validation.

7 skills · 1 command · 3 agents

anthropics/claude-code 155,476

CMEM Pro

claude

CMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents

3 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

Agentic QE (external: maintained in proffesor-for-testing/agentic-qe, pinned to v3.15.17): a quality-engineering fleet with 11 QE agents, 9 skills, 9 commands, the agentic-qe MCP server pinned to the plugin version, and the aqe-mod guard that refuses destructive operations on AQE learning data

9 skills · 9 commands · 11 agents · 1 MCP server

ruvnet/ruflo 81,589

headroom

claude

Headroom startup hooks for Claude Code and GitHub Copilot CLI.

hooks

headroomlabs-ai/headroom 79,508

mempalace

claudecodex

AI memory system — mine projects and conversations into a searchable palace. 47 MCP tools, auto-save hooks, guided setup.

3 skills · 6 commands · 1 MCP server · hooks

MemPalace/mempalace 60,536

Maintain agent-bom-guard?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins3 plugins