Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. Calls are policy-gated before they run, and every call that runs gets a hash-chained receipt verifiable offline. Claude Code only.
Plugin protect-mcp from marketplace claude-code-workflows in shotcowboystyle/ag-skills. Commands read from the repo's manifest — 11 days ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
protect-mcp-setupConfigure Cedar policy enforcement and Ed25519 signed receipts for Claude Code tool calls. Use when setting up projects that need a signed audit trail, policy-gated tool execution, or evidence of which tools an agent ran.
/protect-mcp:audit-chainVerify every receipt and chain link in ./receipts/receipts.jsonl against the signer's public key. Detects tampered, malformed, deleted, or reordered receipts.
/protect-mcp:verify-receiptVerify a single Ed25519-signed receipt file against the signer's public key. Returns exit 0 if valid, 1 if tampered or the key is wrong, 2 if malformed or the key is missing.
policy-enforcerCedar policy author and reviewer for Claude Code tool calls. Writes, audits, and explains Cedar policies that govern Bash, Edit, Write, WebFetch, and other tools. Use when you need declarative, formally verifiable rules for what an AI agent can and cannot do in a project.
receipt-verifierVerifies protect-mcp Ed25519 signed receipts and receipt chains offline, and explains why verification failed. Use when you need to check receipt authenticity, audit a receipts file, or detect tampering.
"${CLAUDE_PLUGIN_ROOT}"/hooks/evaluate.sh
"${CLAUDE_PLUGIN_ROOT}"/hooks/sign.sh
UX/UI design ops — briefs, tokens, components, screens and pages graded against live Awwwards and Mobbin references, plus Material 3/Compose, React Native, and web component design. Absorbs the former ui-design plugin.
47 skills · 39 commands · 4 agents
Image editing, batch operations, format conversion (WebP, AVIF, JPEG XL, PDF), metadata, and library organization — bucket by resolution, aspect ratio, orientation, format, capture time, and camera; dedupe near-duplicates.
28 skills · 19 commands
Drive an AI-generated video project end to end — brief, model selection, characters, script, storyboard, generation pipelines (text-to-image, image-to-video, voice, lip-sync), GPU-aware assembly, ComfyUI import/export, budgets, export — plus a curated index of agent-callable video and audio tooling.
13 skills · 11 commands · 7 agents · 3 MCP servers
Chain-of-custody evidence handling — hash, timestamp, inspect metadata, append to an immutable custody register, package as BagIt, verify, and sync to WORM or S3 Object Lock storage.
14 skills · 12 commands
Modern Python development with Python 3.12+, Django, FastAPI, async patterns, and production best practices
16 skills · 1 command · 3 agents
Work out the real baggage allowance for every segment of an itinerary, inventory what is carried by weight, solve the pack against the binding limit, price excess-baggage options, rank a leave-behind list, and render a counter card and packing list with Typst.
9 skills · 10 commands
Security default for organizations: seated outermost, it keeps the organization's classic hooks, prompt content, settings, tool policy and pinned environment out of reach of the plugins a person installs, and adds no policy of its own; one managed option, allowManagedModsOnly, limits mods to the organization's.
Security review, dependency scanning, policy gates, and CVE monitoring
2 skills · 1 command · 1 agent
Government contracting research and capture workflows in Claude: opportunity and pipeline briefs, bid/no-bid and competitor analysis, price-to-win and proposal prep, powered by the GovTribe connector.
8 skills · 1 MCP server
Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin — decisions are policy-gated before they run and every decision produces a tamper-evident receipt verifiable offline.
1 skill · 2 commands · 2 agents · hooks
Streamline people operations — recruiting, onboarding, performance reviews, compensation analysis, and policy guidance. Maintain compliance and keep your team running smoothly.
9 skills · 5 MCP servers
Per-deal-and-packaging Commercial domain. v2.8.0 ships 8 skills: orchestrator + pricing-strategist (model picker + Van Westendorp WTP + packaging) + deal-desk (deal scorer + discount approval routing + redline) + partnerships-architect (5-tier classifier + joint GTM + revshare modeler) + channel-economics (cost-to-serve + ROI + mix optimizer) + commercial-policy (data-backed discount matrix + exception flow + linter) + rfp-responder (Shipley structured RFP/RFI/RFQ + win-theme + winrate predictor, context: fork) + commercial-forecaster (4Q-weighted bookings + cohort NRR/GRR + funnel-confidence with mandatory assumption disclosure). Hard rules: pricing outputs model+range (never a single number), deal outputs route to named human approver (never auto-approve), forecast outputs surface conversion assumption, RFP never invents claims for GAP requirements. 21 stdlib Python tools, 28+ reference docs. Distinct from business-growth (sales execution), c-level-advisor/cro-advisor (strategic), finance (close+report).
8 skills · 9 commands · 1 agent
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.