Find plugins

by voitta-ai

Make agent-to-agent traffic visible to the human watching: a structured SendMessage envelope (kind + direction + topic in the summary field, plus a one-line header that survives raw transcripts) paired with a cmux sidebar status pill per workspace showing whether a session is waiting on a peer or owes one an answer. Covers why spawned teams are cross-workspace traffic by construction (tmux-compat maps a window to a workspace), why the pill key must not collide with cmux's own claude_code key, and the stale-pill failure mode plus every exit that must clear it.

by voitta-ai

Keep cmux's Claude NODE_OPTIONS restore guard alive when it lives under $TMPDIR. Use when: (1) a long-lived cmux/Claude session suddenly has every node/claude invocation fail with a missing --require target, (2) NODE_OPTIONS points at a /var/folders/.../T/cmux-claude-node-options/restore-node-options.cjs path on a cmux build that predates manaflow-ai/cmux#3699, (3) reboot-surviving cmux sessions break after about three days idle. Root cause: macOS reaps $TMPDIR files untouched for about three days, so the required guard file vanishes while NODE_OPTIONS still references it. Covers the persistent-HOME-copy stopgap, the LaunchAgent that recreates and mtime-refreshes the $TMPDIR file daily, why a LaunchAgent resolves the same per-user temp base, and when to retire it.

by voitta-ai

Run a runbook step by step in a sibling cmux terminal tab with exit-code receipts; stage irreversible steps for a human Enter (scripts/cmux-step + YOLT rule).

by voitta-ai

Search all open cmux workspaces/tabs/panes - live scrollback (tree --all + read-screen) plus agent transcripts.

by voitta-ai

Diagnose what cmux actually restored after a relaunch and recover panes it silently dropped.

by voitta-ai

Determine which cmux workspace, tab and surface a session is actually running in, and map other live sessions to theirs. Never answer from CMUX_* env vars: the tab and workspace variables can carry the same id (so tab identity is not in the environment at all), and on a resumed session they are a stale launch-time snapshot that can name a workspace the session has left. Uses the bundled CLI -- identify for the caller's own refs (read caller, not focused), tree --all --id-format both to resolve refs to names, top --all --processes to map pids to surfaces. Matters because a session that cannot name its own tab cannot tell a human which tab to address. Also covers the case the first version missed: the CLI only answers processes descended from the app, so a spawned subagent gets a broken-pipe/access-denied refusal -- the normal case, not a fault -- and must fall back to the app's live state file, using the environment ids as lookup keys rather than as answers.

by voitta-ai

Enumerate, before installing, which tmux verbs a tmux-driving tool needs that cmux's tmux-compat shim lacks: grep the tool's source for subcommands and #{format} variables, diff against cmux's docs/cli-contract.md, probe read-only verbs live via cmux __tmux-compat. Explains 'Unsupported tmux compatibility command' and 'Workspace target not found' (sessions map to workspaces). Ships scripts/tmux-compat-probe.

by chock-core

trigger: secrets, eval/exec, unsanitized SQL, hallucinated dependencies. avoid: committing credentials, adding unverified packages, executing dynamic code. Install scan-secrets (commit, agent write) for secrets and verify-dependency-exists (opt-in; needs an allowlist) for dependencies. Advisory: eval/exec and SQL guidance; a gate decides only the non-literal slice (agentic-code-security code pack: Python eval/exec, SQL built from strings in Python and JS).

by chock-core

trigger: secrets, eval/exec, unsanitized SQL, hallucinated dependencies. avoid: committing credentials, adding unverified packages, executing dynamic code. Install scan-secrets (commit, agent write) for secrets and verify-dependency-exists (opt-in; needs an allowlist) for dependencies. Advisory: eval/exec and SQL guidance; a gate decides only the non-literal slice (agentic-code-security code pack: Python eval/exec, SQL built from strings in Python and JS).

by Harry Yep

First party local Codex CLI delegation for tasks, reviews, resumable threads, and durable background jobs.

by voitta-ai

Run an adversarial Codex review against a GitHub PR and post its findings as a single batched PR review (inline comments + summary body), instead of letting them die in stdout. Use when: (1) you want `/codex:adversarial-review` output to land ON a pull request where the author can act on it, (2) you are the reviewer role in an agent-team loop (skillz#87) and need the review to close the loop with the developer agent, (3) you want a deterministic, scriptable reviewer rather than an LLM hand-posting comments, (4) you need to sweep a whole PR backlog and post one review per PR. Encodes the codex-companion `--json` call, the finding->diff-line mapping, the GitHub gotchas: inline comments are rejected (422) on lines not in the PR diff (out-of-diff findings are rolled up into the body), self-review forbids APPROVE/REQUEST_CHANGES (default COMMENT), low-confidence findings are demoted to a collapsed section, and a `--dry-run` payload is byte-for-byte the POST body so it can be saved, edited, and posted later without a second Codex pass — plus the recurring false-positive shapes (type-strictness on coerced config, "missing attribution" demanding a refactor, stale-branch mass-deletion artifacts) and degenerate-output shapes (plan-only "zero findings", quiet background-launch failure) to judge before posting.

by voitta-ai

Read the Codex CLI hook contract out of the shipped native binary with strings rather than a live probe turn:

by Anh-Thi Dinh

Lean toolkit for disciplined engineering workflows with Claude Code

by Anh-Thi Dinh

Lean toolkit for disciplined engineering workflows with Codex CLI

by ncaq

Generate a commit message from staged changes, then let the user review before committing in manual mode or commit without confirmation in auto mode. Use when the user wants to commit changes or create a git commit.

by chock-core

Blocks adding a known-malicious package version (npm, PyPI, crates, Go, RubyGems, Packagist manifests and lockfiles), a re-pointed action ref, or an IOC file name, from a dated, sourced list (data/ioc.json, CI fails 120 days after as_of). Runs: commit, agent write, turn's end; only additions judged. Exact versions only: a range is not resolved. A snapshot, not a feed; friction, not a boundary. Adopt under rollout observe.

by Ricardo Albuquerque

English. The answer goes in the first sentence; cut preamble and process narration; keep every caveat that changes what the reader does. Governs chat replies, plans, decisions, commit messages, PR descriptions, cards, review comments and release notes — and the text written into code, from comments to screens. Forces its output style on while enabled, restates the style beside every prompt, and ships a SessionStart hook with self-update, a credit guard on the commands that publish text, fourteen commands — rewrite, pr, card, commit, comment, release, plan, decide, draw, status, handoff, audit, trim, woman — and an audit agent.

by voitta-ai

Create or update a Confluence Cloud page when the Atlassian Rovo connector is read-only - but check first that it still is, since the connector gets re-authorized and a...

by voitta-ai

Decide whether a new major of a security gate you consume is safe to adopt, when your product depends on a distinction the gate's own host does not -- a vendor's honest 'zero drift' can be true for their host and catastrophic for yours. Use when a dependency you gate on ships a major or a rule-set cut, when release notes quantify an improvement you cannot map onto your own semantics, or when writing the startup check that decides whether a dependency is usable. Covers replaying against your own boundary in both directions, the delegated-versus-unreadable collapse, verifying the tree a drift number was measured on, drawing the startup probe from the affected population rather than the survivors, and asking the vendor to report what the verdict depended on.

by Prompted LLC

Portable, harness-agnostic governance lifecycle for the Ubiquity substrate (this plugin is the Claude Code adapter). Captures lessons as CogPRs, preserves session continuity, routes proposals through human-gated review, and tracks recurring friction through the signal manifold.

by jinhongan

ContextGuard keeps AI coding-agent context lean, safe, and auditable with project-local setup, scans, large-read guards, output trimming/sanitizing, queryable log artifacts, budgeted context packs, tool/MCP schema pruning, statusline visibility, and usage audits.

by chock-core

trigger: context bloat, stale observations, resolved content inlined, noisy exploration. avoid: context rot and lost-in-the-middle failures.

by chock-core

trigger: context bloat, stale observations, resolved content inlined, noisy exploration. avoid: context rot and lost-in-the-middle failures.

by 777genius

Portable Agent Plugins package for Context7. Pull up-to-date, version-specific documentation and code examples directly from source repositories into agent context.