forge-security

Dev Forge

Personal plugin marketplace for Claude Code. Curated collection of independent plugins — install all or pick what you need.

Quick start

# Add marketplace (once per machine)
/plugin marketplace add dmedina-dev/dev-forge

# Install all working plugins at once
/plugin install forge-init
/forge-init:install-all

# Or install individually
/plugin install forge-keeper        # context maintenance (recommended always-on)
/plugin install forge-superpowers   # TDD, debugging, collaboration patterns
/plugin install forge-extended-dev  # discovery → design → deep review → PR review
/plugin install forge-brainstorming # teammate-driven full lifecycle (requires forge-superpowers)
/plugin install forge-security      # security reminder hooks
/plugin install forge-commit        # commit/PR commands
/plugin install forge-hookify       # custom hook rules engine
/plugin install forge-ralph         # persistent loop technique
/plugin install forge-frontend-design # distinctive UI/UX design
/plugin install forge-channels-telegram # Telegram channel bridge (requires Bun)

Working plugins

Always-on plugins for daily development.

Native

Plugin	Purpose	Commands
forge-keeper	Context maintenance + PreCompact hook	/sync, /status, /recall, /segment-doc

forge-keeper commands:

• /sync — analyze changes, propose CLAUDE.md + rules + exemplars updates
• /status — context health report with drift detection
• /recall — search session log for past decisions
• /segment-doc — split monolithic .md into focused pieces for better context loading

Core workflow

Plugin	Purpose	Commands
forge-superpowers	TDD, debugging, parallel agents, code review, worktrees, plans	Skills-based (auto-triggered)
forge-extended-dev	4-phase development workflow (requires forge-superpowers)	/feature-dev, /deep-review, /pr-review
forge-brainstorming	Teammate-driven full lifecycle with 5 persistent agents (requires forge-superpowers)	/brainstorming

Utility

Plugin	Purpose	Commands
forge-commit	Git commit and PR workflow	/commit, /commit-push-pr, /clean-gone, /release
forge-security	Security reminder hooks (XSS, injection, eval, etc.)	Passive — hooks on Edit/Write
forge-hookify	Custom hook rules engine with .local.md rules	/hookify, /hookify-list, /hookify-configure, /hookify-help
forge-ralph	Persistent loop: Claude keeps working across stop events	/ralph-loop, /cancel-ralph, /ralph-help
forge-frontend-design	Distinctive, production-grade UI/UX design	Skill-based (auto-triggered)
forge-ui-expert	UI/UX design intelligence: 67 styles, 96 palettes, 57 font pairings, 13 stacks	Skill-based (auto-triggered)
forge-profiles	Plugin profile manager — switch plugins + MCP servers per work mode	/profile-create, /profile-list, /profile-change

Channels

Plugin	Purpose	Commands
forge-channels-telegram	Telegram bridge — push messages into running session, reply from Claude	Skills: telegram:configure, telegram:access (auto-triggered)

Configuration plugins

Install when needed, uninstall after. Don't consume context when not in use.

Plugin	Purpose	When to install
forge-init	Project bootstrapper + install-all + AGENTS.md generation	New project: /forge-init:init then /forge-init:install-all then uninstall
forge-plugin-dev	Plugin development toolkit (7 skills, 3 agents)	Developing plugins: /create-plugin then uninstall
forge-context-mcp	MCP server setup guide (Context7, Serena, XRAY)	Setting up codebase intelligence: configure servers then uninstall

Plugin independence

• Every plugin works standalone — test with claude --plugin-dir plugins/<name>
• Hard dependencies: forge-extended-dev and forge-brainstorming both require forge-superpowers
• Dependencies documented in docs/dependencies.md
• Remove any plugin to free context window space

Attribution

Curated plugins retain their original authorship. No claim of original authorship is made for curated content.

obra/superpowers

Original author: Jesse Vincent (@obra)

Plugin	Upstream	Version
forge-superpowers	superpowers	v5.0.6

anthropics/claude-code