Find plugins

by voitta-ai

Reverse-engineer a React Native Hermes-bytecode Android app off a stock non-rooted device: hermes-dec on unsupported versions, string-table flow tracing, the user-CA TLS wall, no-root BLE/HTTP capture.

by chock-core

trigger: finishing or committing a diff that touches code, build or CI config, dependencies or agent config; a plan adding a handler, parser, auth path, crypto or sink; an ask-tier gate finding. Self-review of the diff in twelve red-team techniques, triaged by references/triage.json, reported as findings with exploit scenarios. Advisory: refuses nothing, writes no waiver, lowers no gate.

by voitta-ai

Reviewer-side PR iteration loop. Re-reads issue + prior threads each round, reviews only the new diff or latest author response.

by river-review maintainers

Turn review into an organizational judgment asset. Review Judgment as Code for AI-assisted development, delivered as a capability pack for Codex: your team's review criteria as versioned, repo-owned skills (a Skill Registry), driven by a review agent that runs perspective-based reviewer roles (code, security, performance, architecture, testing, adversarial) and verifies findings against the diff so humans keep the high-risk judgment.

by ncaq

Rewrites `rm` (including trash-cli-compatible flags) to `trash` in Bash commands via PreToolUse hook.

by nuttaruj

Coordinated software-house team for AI coding CLIs — 15 specialist agents, Core 10 phase skills (1 router + 9 phase), 6-phase lifecycle. Pre-commit gates (S1-S5 simplicity / T1-T6 testing / F1-F5 failure-mode) catch bugs before ship. On Claude Code, ships as a pure marketplace plugin (agents / skills / hooks) — the always-on judgment core is delivered by a SessionStart hook, so install and uninstall touch no global config. See https://github.com/nuttaruj/rolepod.

by nuttaruj

Coordinated software-house team for AI coding CLIs — 15 specialist agents, Core 10 phase skills (1 router + 9 phase), 6-phase lifecycle. Pre-commit gates (S1-S5 simplicity / T1-T6 testing / F1-F5 failure-mode) catch bugs before ship. On Claude Code, ships as a pure marketplace plugin (agents / skills / hooks) — the always-on judgment core is delivered by a SessionStart hook, so install and uninstall touch no global config. See https://github.com/nuttaruj/rolepod.

by chock-core

rtk#1007. Destructive verdicts come from the chock_destructive table shared with block- destructive-commands: the same blocks (root/home deletes, force/delete/mirror pushes, reset --hard, clean -f, IaC destroy, cloud deletes, DB drops, lockouts) and asks (rm -rf off rtk's safe list, bare lease, stash drop, prunes, -auto-approve). Own rows block credential-file reads (.env, keys, ~/.ssh) and echo or inline *_API_KEY/_SECRET/_TOKEN. Skips file rows in container exec.

by John Kozaris

Rust code critique, architecture guidance, and idiomatic pattern enforcement

by voitta-ai

An RxJava test that asserts a side effect of `doFinally` (a released semaphore permit, a decremented in-flight gauge, a closed resource) immediately after `TestObserver.await()` / `blockingGet()` is racy BY CONSTRUCTION: the operator delivers the terminal event to the downstream observer FIRST and runs the finally action AFTER, so the awaiting thread can observe the pre-release state. Use when: (1) CI fails with something like "permits should be returned once the held requests complete ==> expected: <0.0> but was: <1.0>" while the same test passes locally and in other parameterizations, (2) deciding whether such a failure is a REAL resource leak or a test-harness race, (3) writing tests around `doFinally`-based cleanup and choosing between asserting immediately and polling, (4) tempted to claim "fixed locally, 5/5 green" for a race your machine never reproduced. Covers the RxJava source proof, the leak-vs-race differentiation signals, the polling-assert fix, and the control experiment that tells you whether local runs mean anything.

by ken2403

Command-free, skills + subagents plugin for fast single-feature development: digest a plan, get approval, isolate in a worktree, implement, and open a PR — Sonnet build / Opus review, with graded effort.

by chock-core

Warns (observe) when a change adds text a reader cannot see, or a URL that carries data out, to Markdown, HTML, SVG, XML, Word, agent instruction files, docs and templates: instruction-like or long comments, CSS-hidden, white or 1pt text, hidden Word runs, URLs with secret words, long queries, placeholders or encoded parts, remote embeds, camo runs, HTML data URIs. Runs: commit, agent write, turn's end. Waiver: a person's marker comment line above. Friction, not a boundary.

by chock-core

Asks a person before a change adds injection text to an agent instruction file (AGENTS.md, CLAUDE.md, GEMINI.md, Cursor/Windsurf/Cline/Roo/Kiro rules, Copilot instructions and prompts, SKILL.md, agent commands): rule overrides, secrecy, auto-approve, hook or review bypass, fetch-and-run, remote instructions, role swaps, fake system tags, removed guardrails. Refuses secret exfiltration and encoded payloads. Added text only; English phrases; friction, not a boundary.

by chock-core

Friction, not a security boundary: flags files that are secrets by name or content -- private keys and key stores, Google service-account/OAuth JSON, kubeconfig users, AWS, npm, PyPI, netrc, git, pgpass, docker, Composer, NuGet, Maven credentials, tfstate/tfvars, non-template .env, framework secret files, browser stores. Warns only (observe). Misses: renamed binary stores other than PKCS#12/JKS/DER, unlisted secret names, values split or encoded.

by chock-core

Blocks credentials: vendor tokens (AWS, GitHub, GitLab, Slack, OpenAI, HF, ...), JWTs, private-key and PGP blocks, named key/token/secret/password values (JSON, YAML, env, HCL, code), URI creds, Authorization literals, CLI password flags; files by path (.env*, keys). Misses: split or encoded values, quoted values with spaces, unlisted names, reference- or placeholder-like values. Runs: commit, agent write, turn end. Pragma same line; agent: only if in HEAD; MCP gateway: never.

by chock-core

Blocks credentials: vendor tokens (AWS, GitHub, GitLab, Slack, OpenAI, HF, ...), JWTs, private-key and PGP blocks, named key/token/secret/password values (JSON, YAML, env, HCL, code), URI creds, Authorization literals, CLI password flags; files by path (.env*, keys). Misses: split or encoded values, quoted values with spaces, unlisted names, reference- or placeholder-like values. Runs: commit, agent write, turn end. Pragma same line; agent: only if in HEAD; MCP gateway: never.

by chock-core

Friction, not a security boundary: flags secrets scan-secrets misses -- high-entropy values (16-150 chars) by secret-like keys, GitHub/npm tokens with valid checksums, Stripe test keys, Slack/AWS key-id shapes, Luhn-valid cards. Warns only (observe). Misses: values split across lines, over 150 chars, cut by # or & when unquoted, under other key names, written like code (a.b(), ALL_CAPS, words, URLs, paths), wrapped in a call, parens or concatenation, in XML, or padded with control characters.

by chock-core

Asks a person before a change adds a scanner suppression: inline ignore markers (bandit, gosec, ruff S codes, Sonar, Semgrep, ESLint security, Checkov, tfsec, Trivy, KICS, hadolint, cfn_nag, zizmor, gitleaks, detect-secrets, CodeQL, Java/C#/Rust security allows), scanner ignore files and skip keys, a CI scan set to pass on failure. Only added lines; prose skipped. Runs: commit, agent write, turn's end; CI annotates. Line-local, friction not a boundary.

by voitta-ai

Handle credentials during a coding-agent session without writing them into the transcript, tool-output cache, permission allowlist or logs. Fingerprint comparison, ask-the-service identification, and env-to-file transfer that never passes through the model. Ships an advisory PreToolUse hook that flags credentials in Bash commands before they run.

by voitta-ai

Prove nothing consumes an AWS Secrets Manager secret before a terraform plan destroys it: query CloudTrail per resource, classify GetSecretValue (a real consumer) against DescribeSecret/GetResourcePolicy (your own CLI and posture scanners), subtract your own terraform refresh, and check reversibility separately -- because a populated LastAccessedDate is not evidence of use.

by voitta-ai

Sweep every Claude Code session transcript on a machine for skill-worthy knowledge: root-caused bugs, non-obvious gotchas, painfully derived procedures - and for HOMELESS artifacts (skills written to ~/.claude/skills but never committed, skill edits stranded in worktrees, harvest PRs left open). Use when: (1) asked to "mine sessions", "harvest what we learned", or "sweep transcripts for skills", (2) daily/per-session harvesting has been running and you need the periodic catch-up pass that finds what it missed, (3) a skills repo looks behind what you know was learned recently, (4) you need to reconstruct what a lost or crashed session discovered. Method verified at scale: 50+ sessions condensed and mined by 8 parallel subagent miners in one sweep, yielding 22 shipped skill PRs.

by Liberty Nguyen

Shape Up SDLC harness for Claude Code: shaping, intake, orient, scope-mapping, building (T0-verified, sandboxed, scope-contracted), evaluation and QA skills orchestrated by a tech-lead.

by Nate Swenson

Scaffold a configurable dev/main branching, auto-merge, branch-cleanup, and release-tagging workflow into any repo

shipflow is an open-source Claude Code plugin indexed from GitHub. Review its manifest and source before installing.