By swannysec
Development workflow automation, review orchestration, and productivity tools
[DEPRECATED] Bootstrap a new project with Claude Code best practices - sets up context management, skills directory, and initial documentation
Check dependency health before adding to project - verifies npm/CDN versions, bundle size, maintenance status, and known issues
Clean up git branches - removes merged branches, warns about stale branches, syncs with remote
Safe commit workflow - runs build, tests, and checks before allowing commit
Orchestrate a comprehensive post-implementation review with multiple phases (architecture, code, tests, security, docs)
Staff-level Rust code review specialist. Use PROACTIVELY after significant code changes for security, reliability, and accessibility reviews. Expert in planning implementations and documenting changes.
Verify that operations are idempotent by running them twice and comparing results. Use for sync operations, data migrations, API calls, or any operation that should produce the same outcome when repeated.
Generate operational documentation (troubleshooting, performance, deployment) by analyzing actual codebase patterns. Use when you need to create or update ops docs that reflect real implementation.
Coordinate multi-phase code reviews by delegating to specialized review agents and managing the branch/PR workflow. Use when conducting comprehensive reviews that require architecture, code quality, test coverage, and security analysis.
Three-layer Stop hook that detects and blocks work-skipping rationalizations by Claude Code agents. Prevents agents from unilaterally deciding to skip assigned work, bypass mandatory processes, or cite unverified context constraints as justification for shortcuts. Layer 1: Deterministic regex detection of known laziness phrases (Tiers 1-2) Layer 2: Haiku-evaluated intent detection for premature victory and silent omission (Tier 4) Layer 3: Optional agent-based deep verification against task lists and plan files This is a passive hook — it activates automatically when the plugin is enabled. No slash command needed. The hook fires on every Stop event and only blocks when laziness patterns are detected.
GitHub Agentic Workflows (gh-aw) — write AI-powered automation workflows in natural-language markdown that compile to secure GitHub Actions. Supports Copilot, Claude, and Codex engines with safe-output guardrails, MCP tool integration, and sandboxed execution. Use this skill when users need to: (1) Install or set up gh-aw in a repository (2) Create, edit, or compile agentic workflow markdown files (3) Configure triggers, schedules, safe outputs, tools, or MCP servers (4) Switch AI engines (Copilot, Claude, Codex) or configure engine options (5) Troubleshoot workflow failures, compilation errors, or permission issues (6) Understand gh-aw patterns (ChatOps, DailyOps, IssueOps, etc.) (7) Configure security: permissions, network rules, sandbox, threat detection (8) Use advanced features: memory, imports, orchestration, cross-repo ops
Prepare Claude Code skills, agents, or collections for open-source sharing on GitHub. Supports two modes: (1) Standalone repo creation, or (2) Marketplace integration into existing plugin repos. Use when: - "prepare for open source", "open source this skill" - "upload skill to github", "share this agent" - "add to marketplace", "add to robot-tools" - "create repo for skill", "package for sharing" - User has a skill directory, agent file, or collection to share
Multi-stage implementation review with parallel sub-agents, severity-based autonomous fixes, and gated test verification. Runs code quality, architecture, simplicity, documentation, and security reviews in sequence with test gates between each fix stage. Security review is blocked until all other fixes are complete. Use after completing a feature, implementation phase, or release candidate. Supports scope modes: full, code-only, security, simplicity, docs.
Validates plugin manifest consistency, README cross-references, SKILL.md frontmatter, and version sync across the robot-tools monorepo. Has two modes: - Validate mode: checks and reports pass/warn/fail (default) - Release prep mode: validates, walks through version bumping, re-validates, summarizes for commit Claude should proactively suggest release-prep mode when a development session that added or modified plugin content appears to be wrapping up.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
A comprehensive collection of Claude Code plugins for research, security, code analysis, and workflow automation.
AI/ML research and verification tools for software development.
Skills:
ai-dev-research - Expert technical research on AI topicsai-twitter-radar - Discover AI trends and news from Twitter/X using Bird CLIresearch-verification - Pre-flight verification checklist for research taskskcap - Capture and distill knowledge from URLs into structured markdown notesstarduster - Catalog GitHub starred repos into a structured Obsidian vaultSecurity investigation and analysis tools.
Skills:
secret-scanning-investigator - Investigate GitHub secret scanning alerts with evidence-based analysissecurity-vuln-analyzer - Multi-agent vulnerability analysis with adversarial verification, ICD 203 analytic standards, CWE-specific procedures, confirmation bias mitigation, and deterministic validationgha-hardening - GitHub Actions security hardening — permissions, secrets, OIDC, attack patterns, supply chain, detection tools, runner security, incident responseCodebase flow analysis, dependency visualization, and health scoring.
Skills:
impact-flow - Dependency graphs, blast radius analysis, health scoring, and dead code detectionDevelopment workflow automation and productivity tools.
Commands:
/dep-check - Check dependency health and security/git-branch-cleanup - Clean up merged/stale branches/git-safe-commit - Safe commit with validation/post-impl-review - Post-implementation review/verify - Full verification suite (typecheck, lint, test, audit)Skills:
open-sourceror - Prepare skills/agents for open-source sharing or marketplace integrationphased-review - Multi-stage implementation review with parallel sub-agents, test gates, and scope modessafe-skill-install - Supply chain security scanning for skill installations via Cisco skill-scannersession-retrospective - Extract learnings from Claude Code sessionsplugin-qa - Validate plugin manifests, READMEs, versions, and cross-references; guided release prep with version bumpinggh-aw-helper - GitHub Agentic Workflows guide — setup, authoring, triggers, safe I/O, security, MCP tools, patterns, troubleshootinganti-laziness-guard - Three-layer Stop hook detecting and blocking work-skipping rationalizations (regex + Haiku intent detection + optional deep verification)Agents:
code-reviewer - Staff-level Rust code review specialistidempotency-tester - Verify operation idempotencyops-docs-generator - Generate operational documentationreview-orchestrator - Coordinate multi-phase code reviews/plugin marketplace add https://github.com/swannysec/robot-tools
/plugin install research-toolkit@robot-tools
/plugin install security-toolkit@robot-tools
/plugin install code-analysis-toolkit@robot-tools
/plugin install workflow-toolkit@robot-tools
/plugin marketplace add https://github.com/swannysec/robot-tools
/plugin install <plugin-name>@robot-tools
git clone https://github.com/swannysec/robot-tools.git
cd robot-tools
cc --plugin-dir ./<plugin-name>
robot-tools/
├── marketplace.json # Marketplace manifest
├── research-toolkit/ # AI/ML research tools
│ ├── plugin.json
│ └── skills/
├── security-toolkit/ # Security investigation tools
│ ├── plugin.json
│ └── skills/
├── code-analysis-toolkit/ # Code analysis tools
│ ├── plugin.json
│ └── skills/
└── workflow-toolkit/ # Workflow automation tools
├── plugin.json
├── commands/
├── skills/
├── agents/
└── hooks/
MIT License with Commercial Restriction
swannysec
npx claudepluginhub swannysec/robot-tools --plugin workflow-toolkitAI/ML research and verification tools for software development
Security investigation and analysis tools
Codebase flow analysis, dependency visualization, and health scoring
Personal Claude Code + Codex dev stack: security hooks, AI-first code conventions, /security-review, /repo-map, /stack-check, portable statusline. Designed to complement other skills-based plugins, not replace them.
A caring skill pack for vibe coders. Encodes engineering discipline — refactor verification, minimal security audit, repo rot detection, AI-friendly docs, CI/CD basics, secrets lifecycle, project conventions, repo bloat diagnosis, and design-system unification — as a set of portable agent skills.
Corca Workflow Framework — consolidated hooks and skill orchestration for structured development sessions
Harness engineering for Claude Code — hook-enforced dual review, state-machine gates, and fail-closed safety where it counts.
General purpose Claude Code toolkit with research agents, skills, and introspection commands
Task-focused agents for test, review, debug, docs, CI, security, refactoring, research, performance, and search-replace — with teammate and subagent role guidance