By jaeyeom
Analyze semgrep findings, fix real issues, and suppress false positives with proper nosemgrep comments
A curated marketplace of Claude Code plugins for building a reliable AI-assisted development workflow.
claude-toolbox is opinionated about a few things:
These plugins work together to create a reliable development workflow:
┌─────────────────────────────────────────────────────────┐
│ gabyx-githooks-setup │
│ Shared Git hooks run automatically on commit and push │
│ │ │
│ ▼ │
│ makefile-workflow │
│ Hooks call `make check` - format, lint, test, build │
│ │ │ │
│ ▼ ▼ │
│ *-dev (e.g. go-dev) ci-workflow │
│ Language-specific CI calls the same │
│ conventions the Makefile targets │
│ checks enforce via GitHub Actions │
└─────────────────────────────────────────────────────────┘
Add the task-management layer on top:
next-action finds the next item worth doing.todo tracks local work.gh-issue-resolver can take an issue from investigation through commit.Install the marketplace and a practical starter bundle:
/plugin marketplace add jaeyeom/claude-toolbox
/plugin install git-guardrails
/plugin install next-action
/plugin install go-dev
/plugin install makefile-workflow
/plugin install gabyx-githooks-setup
/plugin install ci-workflow
That gives you:
Start here based on the question you are trying to answer:
Workflow:
Task management:
Jira:
Safety and security:
Other:
Each plugin directory contains its own README.md, which is the source of truth
for installation details, configuration, and examples.
The docs/claude/ directory mirrors Claude Code reference material used by this
repo:
MIT
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub jaeyeom/claude-toolbox --plugin semgrep-reviewGo development skill with idiomatic patterns, testing, and build system detection
Resolve GitHub issues using the gh CLI with dependency checking, self-assignment, codebase investigation, and automatic commits
Create language-specific development skills by mining PR reviews, codebase conventions, and team documentation
Makefile workflow skill for consistent build, lint, test, and check targets across projects
Set up shared Git hooks using gabyx/Githooks manager in any repository
Automated code review, security scanning, and quality enforcement
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
Runs code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on uncommitted changes, branch diffs, or specific commits. Bundles Codex's built-in MCP server for direct tool access.
Perform security audit on codebase
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.