Find plugins

by Marek Stancl

AID — AI Development Orchestrator. 6-state bash FSM, Fast Mode (<2 min overhead), 87% token reduction. Takes a task or EPIC, generates a Plan, dispatches role-based agents, enforces quality gates, and produces auditable evidence.

by voitta-ai

Recognize and fix the trap where supplying a custom security group to an AWS Load Balancer Controller ingress (annotation alb.ingress.kubernetes.io/security-groups) delivers NO security narrowing, because the controller's shared backend SG stays attached and security groups are additive. Use when: (1) a "narrow the ALB's security groups" change applied clean but the ALB still carries a controller-managed SG (tag elbv2.k8s.aws/resource=backend-sg) with all-protocol 0.0.0.0/0 egress, (2) you are reviewing a diff that adds a custom SG to an ingress while alb.ingress.kubernetes.io/manage-backend-security-group-rules is "true", (3) after doing the narrowing properly, new backends go "unhealthy: Target.Timeout" because the health-check port was never opened, (4) a terraform apply that flips the annotation and adds replacement node-SG rules could race and close the front door mid-apply. Core facts: effective SG posture is the UNION of attached SGs - adding a narrow SG beside a broad one changes nothing; the real fix is to stop the controller attaching/managing the backend SG and author the node-side rules yourself, with explicit depends_on ordering; measure the live SGs before and after, never trust the diff.

by voitta-ai

Determine which caller sends traffic to which ALB listener rule, and how much, before flipping or retiring that rule. Use when: (1) you need to prove a listener rule is safe to change and are looking for a CloudWatch metric per rule — there isn't one, (2) you grouped ALB access logs by `matched_rule_priority` and the numbers look wrong or a single endpoint appears under two priorities, (3) several services share one credential so the ALB cannot tell them apart, (4) you must identify an unknown HTTP client seen only as a User-Agent in access logs, (5) `SHOW PARTITIONS` on an ALB-logs Athena table returns nothing, (6) a windowed total looks low, or the "same" query returns different counts on different days — the log bucket's S3 lifecycle expiry (often 3 days) silently truncates any longer window, so a "weekly" total is really a retention-window total. Core trap: `matched_rule_priority` is a POSITION, not an identity — inserting a listener rule renumbers every rule below it, so the same priority means different rules on either side of that deploy, and a query spanning the change silently mislabels everything. Attribute by `request_url` + `user_agent` instead, quote per-day rates, and report the window the data has (min/max date), not the one the WHERE clause asked for.

by voitta-ai

Verify an Android change on a device or emulator when the project has no test suite. Covers the build-install-drive-read loop, verifying the release build rather than only debug because R8 breaks reflection-driven code, tapping by element label instead of remembered coordinates, reading app-private state back with run-as, and mocking location. Its core discipline is calibration: a check that cannot observe anything reports the same thing as a check that observed nothing, so an unplugged cable, a stale uiautomator dump, a single-quoted attribute, or a pattern that can never match all read as a passing assertion. Ships scripts/adb-ui.sh with text, has, tap, tap-nth and type.

by voitta-ai

Find and fix an Android app whose microphone use tears down Bluetooth A2DP in a car: read the profile timeline from dumpsys bluetooth_manager, name the app from appops, and pin capture to the built-in microphone with setCommunicationDevice.

antarx-dev-skills is an open-source Claude Code plugin indexed from GitHub. Review its manifest and source before installing.

by APAC Equity Desk

Read-only APAC equity topic discovery, market colour, wraps, earnings, catalyst and research-ledger workflows.

by Nate Swenson

Find the Apple TVs on your network, pair with one, and control it from chat — and never say a command landed until the TV's own state says so.

by voitta-ai

Reach archive.today when automation is refused, cite it reproducibly, and send a truthful user agent.

by nathawu

confirm-first: restate the request and wait for explicit confirmation

by nathawu

confirm-first: restate the request's key points, and allow tool use only after explicit confirmation

by Artience

Cognitive orchestration framework with dual-process routing, lifelong learning, expert agent teams, and workflow automation for Claude Code

by Artience

Cowork-optimized build of Artibot — marketing, content, data, design, CRO/SEO, long-form writing, Claude Design, Routines, Ultraplan, Monitor, and swarm intelligence for knowledge workers

by voitta-ai

Host an unmodified HTTP server (incl.

by wheakerd

Think before AI thinks. Includes 8 skills.

by babs

Daily-driver toolkit: spec-driven feature flow (spec → ship → review → commit), project init standards (FastAPI+PostgreSQL+React full-stack, Python, Go, Dockerfile), review workflows (iterative, swarm, full-project), conventional-commit flow, sharing utilities, and an optional quota-aware status line.

by beorn

Batch rename, refactor, and migrate across files — TypeScript symbols, file renames, text/markdown updates, API migrations

by Sungjun Lee

법순이 — 한국 법령/판례 조사, 계약서 검토, 컴플라이언스 체크를 돕는 법무 어시스턴트

by Nate Swenson

Turn a Bible verse or chapter into a researched, one-page Bible study for a group.

by chock-core

Best-effort guard on parsed commands: refuses a download wired into a shell or interpreter (sh..fish, python, perl, ruby, node, php, lua, pwsh, deno, bun, busybox, su, $SHELL, source, eval, iex) by pipe, substitution, here-string or process substitution, also inside bash -c/ssh/docker exec bodies, or downloaded and run in one command with no checksum or signature step. nc/socat/one-liner reads ask. Misses: aliases, functions, outside variables, encoded text, renamed downloads. Friction only.

by chock-core

Best-effort guard against piping a download into a shell or interpreter: curl, wget, lynx, aria2c, iwr/irm and similar fetchers piped into sh/bash/zsh/dash/ksh/fish/python/perl/ruby/node, bare, path-qualified or quoted, in a subshell group or behind sudo/exec/env/xargs/nohup/timeout; also bash -c "$(curl ...)", bash <(curl ...) and PowerShell `| iex`. Saving to a file, or piping into jq/tar/grep, is allowed. Bypasses: aliases, variables, obfuscation. Friction only.

by chock-core

Best-effort, on parsed commands (echo ignored); verdicts come from the chock_destructive table shared with rtk-dangerous-actions-blocker. Blocks recursive deletes of root, home or abs paths; mv/chmod/chown -R of system dirs; dd to devices, mkfs; account lockouts; force, delete and mirror pushes; history rewrites; IaC destroy; listed cloud and platform deletes; DB drops. Asks: rm -rf off a safe list, bare lease, stash drop, -auto-approve, drain, prunes, API deletes. Pre-push: no non-ff.

by chock-core

Best-effort, on parsed commands (echo ignored). Blocks rm -rf on absolute, ~, $HOME, . or .. paths; recursive Remove-Item/rd/del on drive paths; git push --force or +refspec, reset --hard, clean -f, checkout .; kubectl delete; terraform destroy; aws s3 rm --recursive/rb --force; dropdb; helm uninstall; docker volume rm/prune, system prune; find -delete/-exec rm; shred; truncate; wipefs -a/-o; gcloud with any `delete` operand. branch -D asks. Pre-push hook refuses non-fast-forward pushes.

by chock-core

Warns (observe rollout) when a line added to a script, Dockerfile, Makefile, CI workflow or package.json wires a download into a code runner: curl/wget/aria2c/lynx/iwr/irm piped into a shell, python/perl/ruby/node/php/lua on stdin, pwsh or iex; bash -c, eval, source or a here-string of a $(...) or <(...) download; Dockerfile ADD of a URL without --checksum. One line at a time: continuation lines, variables, unicode-escaped JSON, split or quoted command names, a download saved to a file and run on a later step, and interpreters or fetchers outside the lists are missed. Never refuses. Friction only.