heimdall

Plugin heimdall from marketplace work-workflow in thomfilg/ai-plugin-work. Commands read from the repo's manifest — 1 month ago.

Skills (9)

• audit

  Audit a project's secrets/conceal posture — config, file ownership/mode, broker presence, .mcp.json wiring, and whether the agent uid is actually denied. Use when the user says "audit secrets", "secrets status", "is my secrets safe set up", "check the conceal boundary", or asks whether the secrets a

• conceal

  Conceal a file or folder behind the Heimdall read-deny guard. Use when the user says \"conceal <path>\", \"hide <path> from the agent\", \"block agent reads of <path>\", \"make <path> unreadable\", or wants a path the agent cannot read OR write. Adds an anchored deny pattern to .workflow/heimdall-co

• configure

  Interactive env-var setup for the heimdall plugin. Use when the user says "configure heimdall", "set heimdall env vars", or when the session-start hook reports new/unset heimdall config vars. For a full multi-plugin .envrc generation use /work-workflow:configure instead.

• harden

  Harden a project's MCP secrets behind a setuid OS boundary (Layer 1). Use when the user says \"harden secrets\", \"set up the secrets safe\", \"lock my mcp secrets at the OS level\", \"install the setuid broker\", or asks for a real (not just hook-level) boundary around a credentials file. Creates/u

• install

  Configure Heimdall file/directory protection storage and scan for paths to protect. Use when the user says "install heimdall", "set up heimdall", "set up protection", "configure heimdall", "create lock store", "initialize heimdall", or asks to start guarding files. Picks local (./.workflow/heimdall)

• list

  List Heimdall lock blocks. Use when the user says "list locks", "show protected files", "what's protected", "what is heimdall guarding", "show heimdall config", "list protection", or asks to inspect or audit what's locked. Displays each store, its lock blocks, unlock phrases, and the resolved file/d

• protect

  Add a Heimdall lock block — protect files or directories behind an unlock phrase. Use when the user says \"protect X\", \"lock X\", \"guard this file/folder\", \"don't let me edit X without saying Y\", \"require a phrase to edit X\", or describes paths that should be write-protected. A lock block is

• unharden

  Undo the OS-level secrets boundary for a project — restore the secrets file/wrapper to the agent uid and remove the broker binary. Use when the user says "unharden", "revert the secrets safe", "remove the secrets boundary", "undo the secrets lock", or "uninstall the setuid broker". Does not delete t

• unprotect

  Remove a Heimdall lock block or specific protected paths. Use when the user says "unprotect X", "unlock X permanently", "stop guarding X", "remove protection from X", "delete the lock for X", or asks to drop a protected path. Removes the lock from config (this is permanent removal, not the temporary

Hooks (7)

• PreToolUse

  node "${CLAUDE_PLUGIN_ROOT}/hooks/heimdall.js"

• PreToolUse

  node "${CLAUDE_PLUGIN_ROOT}/hooks/heimdall.js"

• PreToolUse

  node "${CLAUDE_PLUGIN_ROOT}/hooks/heimdall.js"

• PreToolUse

  node "${CLAUDE_PLUGIN_ROOT}/hooks/heimdall-conceal.js"

• SessionStart

  node "${CLAUDE_PLUGIN_ROOT}/hooks/store-migrate.js"

• SessionStart

  node "${CLAUDE_PLUGIN_ROOT}/hooks/heimdall-secrets-reminder.js"

• SessionStart

  node "${CLAUDE_PLUGIN_ROOT}/hooks/config-detect.js"

Similar plugins