By jaskerv
Runs gitleaks after every file edit — detects leaked secrets and alerts Claude before they reach git
A curated collection of Claude Code plugins by @jaskerv — language servers, workflow tools, and developer experience improvements for Claude Code.
| Plugin | Description | Category |
|---|---|---|
| vtsls-lsp | TypeScript/JavaScript language server powered by VS Code's TypeScript engine | LSP |
| secret-scan-hook | Runs gitleaks after every file edit — detects leaked secrets and alerts Claude before they reach git | Hook |
| oxlint-hook | Runs oxlint after every file edit — auto-fixes violations and reports remaining issues to Claude | Hook |
claude plugins marketplace add jaskerv/awesome-claude-plugins
claude plugins install <plugin-name>@jaskerv-plugins
TypeScript and JavaScript language intelligence for Claude Code, powered by VTSLS — the same TypeScript engine that powers VS Code.
Gives Claude Code's built-in LSP tool access to go-to-definition, find references, hover types, document symbols, workspace symbol search, go-to-implementation, and call hierarchy — for .ts, .tsx, .js, .jsx, and ESM/CJS variants.
Why VTSLS over typescript-language-server? VTSLS uses VS Code's TypeScript extension under the hood. It handles complex projects — monorepos, path aliases, project references — more reliably than the alternative.
Full installation instructions →
Auto-lints JS/TS files as Claude edits them. After each write, it runs oxlint --fix to clean up fixable violations in place, then reports anything left to Claude as a system message so Claude can address it in the next turn.
Works with your project's existing .oxlintrc.json — no extra config needed in the plugin. Prefers the local node_modules/.bin/oxlint binary so it always uses the version your project specifies.
Full installation instructions →
Protects against leaked secrets in two layers. The async per-file scan warns Claude immediately after each write so secrets get caught early. The blocking commit gate intercepts git commit commands and hard-blocks any commit where staged files contain secrets — using gitleaks with 140+ detectors covering AWS, GitHub, Stripe, GCP, and more.
Respects .gitleaks.toml at the project root for custom rules and allowlists.
Full installation instructions →
Plugin ideas and PRs welcome. See the plugin structure for how to add a new one.
Executes bash commands
Hook triggers when Bash tool is used
Modifies files
Hook triggers on file write and edit operations
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub jaskerv/awesome-claude-plugins --plugin secret-scan-hookRuns oxlint after every file edit — auto-fixes violations and reports remaining issues to Claude
Scans for common credential formats across cloud, source control, payment, and collaboration providers
Security hook that blocks Claude from reading, writing, or accessing secret and sensitive files
Blocks secrets and PII before they reach the Anthropic API
Scan codebase for exposed secrets, API keys, passwords, and sensitive credentials
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
Protect secrets and credentials from Claude Code. Blocks writes to .env files, detects API keys in shell commands, prevents hardcoded tokens, and guards service account JSON files.