governance plugins

by tonone-ai

Legal team — 10 agents: Brief, Clause, Bind, Frame, Shield, Scope, Audit, Cite, Lodge, Terms

by tonone-ai

Legal team — 10 agents: Brief, Clause, Bind, Frame, Shield, Scope, Audit, Cite, Lodge, Terms

by AxonFlow

Policy enforcement, PII detection, and audit trails for OpenAI Codex. Hybrid governance — enforces policies on terminal commands (exec_command) via hooks, provides advisory governance for other tools via implicit-activation skills, and records compliance-grade audit trails. Self-hosted via Docker — all data stays on your infrastructure.

by FlowStudio

Debug, build, manage, and govern Power Automate cloud flows via FlowStudio MCP. Five skills for diagnostics, deployment, tenant-wide monitoring, and compliance metadata.

by Microsoft

Azure cost analysis, estimation, optimization, and governance workflows backed by Azure Resource Manager MCP.

by arbiterForge

Orchestration layer for Claude Code. Routes every intent through gated skills and reviewer agents, drives spec-driven TDD, mechanically enforces the commit and audit-trail gates, decides via SMARTS, and keeps an append-only audit trail. Requires Python 3 on PATH. Dormant until you opt a repo in; run /ca:init to activate.

by arbiterForge

Governance kernel for OpenAI Codex CLI: the generated codeArbiter governance surface plus enforcement hooks (persona injection, blocking pre-exec and pre-write gates, append-only audit trail), sharing one .codearbiter/ store with the Claude Code sibling plugin. Standalone: opt a repo in with ca-init; enforcement stays dormant until .codearbiter/CONTEXT.md carries 'arbiter: enabled'. Requires Python 3 and Codex >= 0.143.0. CI continuously verifies, through a real Codex host at 0.143.0 and 0.145.0, that the plugin installs, reads back enabled, and ships every hook script it declares; an advisory lane tracks npm latest for upstream drift. Hook FIRING - live persona injection and live blocks inside a turn - is verified by hand per release against docs/codex-parity-testing.md, because a turn needs a model and a provider credential cannot gate fork pull requests.

by DevBrother

DevBrother agent skills for clarifying requirements, generating AGENTS.md governance systems, verifying-then-applying PR review feedback, consulting a stronger advisor model at decision points, and designing polished self-contained HTML deliverables.

by Flow Studio

Debug, build, manage, and govern Power Automate cloud flows via FlowStudio MCP. Five skills for diagnostics, deployment, tenant-wide monitoring, and compliance metadata.

by Baelfyre

An installable AI workflow plugin that routes complex software tasks through focused specialist skills for architecture, UI/UX, documentation, diagrams, databases, QA, security, and gated resilience review.

by Matt Corbett

Open-source maintenance team — agents (oss-maintainer-strategist, release-and-versioning-engineer) for running a public project people can contribute to: license choice (permissive vs copyleft, dependency compatibility, CLA vs DCO), governance & community-health (CONTRIBUTING / CODE_OF_CONDUCT / GOVERNANCE / SECURITY.md, issue & PR triage + SLAs, the contributor funnel, bus factor, funding), semver + changelogs (Keep a Changelog / Conventional Commits), release automation (release-please / semantic-release / Changesets), deprecation windows, coordinated security releases (private report -> CVE/GHSA -> disclosure), and supply-chain provenance (SLSA, Sigstore). skills, a knowledge bank with two Mermaid decision trees + a dated 2026 tooling map, best-practices, templates, an advisory hook. Seams: release pipelines -> devops-cicd; vuln analysis -> security-engineering; community growth -> developer-relations; docs -> technical-writing-docs. Requires ravenclaude-core@>=0.7.0.

by Rayyan Aquino

Persistent AI governance for Claude Code — council deliberation, P10 pre-execution planning, and a local vault that survives session resets.

by Synapti AI

Fourteen opinionated skills that guide founders and leaders through designing, deploying, adopting, and evolving organizations where agents handle coordination and execution while humans own specification and judgment. Diagnose coordination overhead, encode organizational identity, write agent-ready specifications, convert approvals into quality gates, validate gates against hidden holdout scenarios, architect governance ecosystems, redesign roles around value flows, navigate political dynamics, operationalize designs into agent-consumable primers, run post-deployment evolution audits, generate role-specific agent configurations, build per-role AI maturity matrices, design structured adoption sprints, and write human-facing AI usage policies with risk model reasoning.

by AxonFlow

Policy enforcement, PII detection, and audit trails for Claude Code. Govern tool execution, scan outputs for sensitive data, and maintain compliance-grade records of every action.

by JadeYingWah

Delivery-discipline behavior overlay for AI agents: a pre-implementation gate, resource survey, evidence discipline, and hands-on acceptance. Model-agnostic; it disciplines process, it does not raise the reasoning ceiling.

by Prompted LLC

Portable, harness-agnostic governance lifecycle for the Ubiquity substrate (this plugin is the Claude Code adapter). Captures lessons as CogPRs, preserves session continuity, routes proposals through human-gated review, and tracks recurring friction through the signal manifold.

by wasikarn

A Claude Code harness that composes mattpocock-skills instead of duplicating it. Seven computational deny/ask gates (irrecoverable commands, subagent git guard, subagent spawn guard, task-complete separation, test integrity, config-write guard, codex-setup guard) plus a SubagentStop verdict-check gate, a 4 KB METHODOLOGY injected at SessionStart, and memory-lint for the auto-memory store.

by Eric Le

Automated governance, versioning, and discovery tools for Claude Code.

Управление библиотекой архитектурных правил Spine: каталог из 20 готовых fitness-функций для CONSTRAINTS.yaml, фильтр включения из пяти форм правила, три волны внедрения (механизируемое → обязательное извне → смысловое), шаблон карточки дистилляции источника в правило, 9 антипаттернов расширения библиотеки и карта 15 блоков источников (решения, риск, описание, NFR, устойчивость, интеграции, API, границы, данные, безопасность, поставка, наблюдаемость, стоимость, миграции, ИИ-системы).

by Ivan-WG

Destructive-command prevention: a PreToolUse hook that classifies every Bash (and MCP shell/SQL) command before it runs — denying irreversible data loss (migrate:fresh, db:wipe, DROP DATABASE, rm -rf /, git clean -fdx, docker compose down -v, terraform destroy, cloud deletes) and prompting on scoped-but-destructive ones (git reset --hard, rm -rf ./dir, kubectl delete pod). Reads through quotes, wrappers and heredocs; skips read-only commands; fail-open. Ships /command-guard:check and a user-owned allow-file the agent cannot edit.

by Dtwo

Manage Dtwo gateways, policies, and Rego with the Dtwo MCP server.

by Lukas Sliwka

Governed, spec-driven delivery for agent-built software: spec → operator authorization → governed build → an honestly-tiered merge floor → certification against the running app → human sign-off.

by peterwangze

AI coding delivery trust layer for governance-aware coding agents. Tracks goals, evidence, risks, quality budgets, and release readiness without making broad runtime claims.

by John Osumi

Unified collaboration package with semantic agent actions, source-grounded context, and a verified plugin-relative direct native runtime.