Data analyst — success metrics, KPIs, measurement strategies, business impact analysis, data-driven evaluation. USE WHEN metrics design, success criteria, impact analysis, data strategy.
Documentation specialist — README quality, API docs, developer experience, onboarding clarity. USE WHEN documentation review, README evaluation, developer experience assessment, onboarding analysis.
Forensic security analyst — PII detection, secret scanning, identity leak auditing across git history, staged changes, working tree, all branches, and cross-repo GitHub-wide audits. USE WHEN PII scan, leaked name, pre-publication audit, git history audit, secret scan, security review, forensic analysis, scan my github.
Product manager — requirements clarity, user goals, roadmap alignment, market fit, prioritization trade-offs. USE WHEN requirements review, feature scoping, roadmap decisions, product strategy.
Provenance and deployment integrity auditor -- validates SLSA sidecars, manifests, and drift across providers. USE WHEN check provenance, audit deployment, verify integrity, detect drift, stale files, manifest check.
Decompose a research question into sub-queries, spawn parallel WebResearcher agents per angle, synthesize findings with citations and explicit confidence. USE WHEN the user asks to research, investigate, look online, look up, dig into, find sources, gather evidence, or survey what's known about a topic. Single-pass; for multi-round adversarial research use ResearchCouncil in forge-council.
Commit-time secret scanning with gitleaks — prevent credentials from entering git history. USE WHEN scanning for leaked secrets, setting up pre-commit hooks, auditing repositories for credentials, configuring gitleaks allowlists, or encrypting user-specific module data with git-crypt.
Explain the intent behind source code by tracing it to the agent session transcript that created it. USE WHEN why does this function exist, what is this file for, why was this line added, explain this code's history, trace code to its originating conversation.
Continue work from another agent's session — auto-detect the most relevant saved session, read its transcript, summarize, and pick up the work. USE WHEN continue from another agent, hand off a session, pick up where codex or gemini left off, summarize a saved session or checkpoint, inspect recent sessions. Not for searching old work by topic — use SessionSearch for that.
Search past agent sessions and checkpoints — semantic + keyword recall across repos, branches, authors, and time windows. USE WHEN have we done this before, search past work, find the previous implementation, look for checkpoints about X, recover a prior prompt. Not for the current active session — use SessionHandoff for that.
Executes bash commands
Hook triggers when Bash tool is used
Modifies files
Hook triggers on file write and edit operations
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
A build system for AI instructions. Treats prompts the way software engineering treats source code: authored in version-controlled markdown, validated by schemas, assembled per target, deployed with provenance records.
Three artifact types map to how [Claude Code][CC] loads instructions:
This is not a plugin system. Plugins are deployed artifacts for end users (one-click install via [Cowork][COWORK]). forge is what happens before that: authoring, validating, assembling, and tracking instructions across teams, models, and providers.
See ARCHITECTURE.md for the structural overview. See CONTRIBUTING.md for how to contribute.
Deploys to Claude Code, Gemini CLI, Codex, and OpenCode:
make install # all providers
SCOPE=user make install # ~/.claude/skills/ (global)
SCOPE=workspace make install # ./.claude/skills/ (project-local)
Have your AI resolve the install instructions:
curl -s https://raw.githubusercontent.com/N4M3Z/forge-core/main/INSTALL.md | claude
Or manually:
git clone https://github.com/N4M3Z/forge-core.git
cd forge-core
make install # requires forge-cli (https://github.com/N4M3Z/forge-cli)
make install deploys skills to all providers and activates git pre-commit hooks. See INSTALL.md for the full agent-executable setup.
Skills teach AI coding tools new capabilities. Invoke them with /SkillName in Claude Code, or reference them in prompts for other providers. Rules enforce behavioral conventions automatically.
| Skill | What it does |
|---|---|
| BuildSkill | Create and validate skill definitions |
| BuildAgent | Scaffold, validate, and audit agent definitions |
| BuildModule | Design and validate forge modules |
| BuildHook | Hook registration, event handling, platform wiring |
| BuildPlugin | Create, validate, and publish Claude Code plugins |
| ArchitectureDecision | Find, create, validate, and capture ADRs with schema validation |
| VersionControl | Git conventions, repo governance, CODEOWNERS, worktrees |
| BashConventions | Bash pitfalls — BSD vs GNU, set -euo pipefail traps, subprocess env |
| MarkdownConventions | Markdown authoring and linting conventions |
| MarkdownSchema | Create, derive, and validate .mdschema files |
| PublishArtifact | Ship artifacts (rules, skills, agents) into downstream repos |
| RefinePrompt | Refine prompts (align, debrand, minimize, rescope, extract, adapt) |
| PromptAnalysis | Validate and minimize prompts |
| SettingsMaintenance | Audit and clean AI tool settings |
| SystemCheck | Ecosystem staleness and version drift checks |
| RTK | Token-optimized CLI proxy |
| HtmlPlayground | Generate single-file HTML demos comparing techniques |
| Brainstorming | Collaborative ideation before implementation |
| DesignSpec | Formal design spec from brainstorming output |
npx claudepluginhub n4m3z/forge-coreMulti-agent council orchestration via Claude Code agent teams.
Obsidian vault conventions. USE WHEN working with Obsidian vault files.
Developer discipline skills for the forge ecosystem
TLP file access control — RED/AMBER/GREEN/CLEAR classification, safe-read, blind-metadata. USE WHEN accessing protected files or configuring file access policies.
AI artifact engineering: prompts, skills, subagents, and output styles
Ultimate Claude Code skill creator. Design, scaffold, build, review, evolve, and publish production-grade AI agent skills following the Agent Skills open standard and 3-layer architecture.
Unified capability management center for Skills, Agents, and Commands.
Battle-tested configuration system for Claude Code agents: 28 architectural principles (incl. P-28 Feature-Layer Architecture for project-knowledge-as-a-navigable-tree), 19 safety hooks, 23 skills (incl. /layer-new + /feature-new for ULTRAPACK-style feature narratives), 16 alternative comparisons, 12 templates (incl. extended kb-skeleton with docs/layers/), diagnostic scripts (incl. build_kb_graph.py + validate_kb_links.py). Pairs with mclaude for multi-session coordination.
Open collection of AI agent skills — reusable, framework-agnostic SKILL.md packages
OSS Claude Code config: agents, skills, and hooks for professional AI-assisted development workflows