By WaterplanAI
Enforce safety policies for agentic operations—block dangerous bash/git commands, credential leaks, and sensitive file writes—with interactive configuration to customize guardians for credentials, destructive actions, supply chain, and browser automation.
Project-agnostic, composable configuration system for AI-assisted development workflows.
claude plugin marketplace add WaterplanAI/agentic-config
# For dev branch: `claude plugin marketplace add </path/to/dev/branch>` OR `./dev.sh`
claude plugin install ac-workflow@agentic-plugins
claude plugin install ac-git@agentic-plugins
claude plugin install ac-qa@agentic-plugins
claude plugin install ac-tools@agentic-plugins
claude plugin install ac-meta@agentic-plugins
claude plugin install ac-safety@agentic-plugins
claude plugin install ac-audit@agentic-plugins
Note: Auto-updates are disabled by default for third-party marketplaces. Enable them via
/plugins> Marketplaces > agentic-plugins > Enable auto-update to stay in sync with new releases automatically.
See Getting Started for full setup.
A centralized configuration system with a Claude Code plugin architecture first in v0.2.0.
Future releases will extend the same plugin approach to additional tools (Cursor, Codex CLI, Gemini CLI, and Antigravity).
Core principles:
claude plugin install, no symlinks| Plugin | Focus | Skills |
|---|---|---|
ac-workflow | Spec workflow, MUX orchestration | 6 |
ac-git | Git automation, PRs, releases | 7 |
ac-qa | QA, E2E testing, browser automation | 7 |
ac-tools | Utilities, integrations, bootstrap | 17 |
ac-meta | Meta-prompting, self-improvement | 2 |
ac-safety | Security guardrails (credential, write-scope, destructive-bash, supply-chain, playwright) | 2 |
ac-audit | Tool audit logging (JSONL append-only log) | 1 |
MUX workflows (ac-workflow plugin) delegate to background agents via Task(run_in_background=True). Background agents cannot surface interactive permission prompts -- any unapproved tool is auto-denied.
Recommended: Run Claude Code with --dangerously-skip-permissions for MUX workflows:
claude --dangerously-skip-permissions
Alternatively, pre-authorize specific tools via CLI:
claude --allowedTools "Skill Bash Read Write Edit Grep Glob"
All plugins in this repository are designed and tested with full tool permissions enabled.
Executes bash commands
Hook triggers when Bash tool is used
Modifies files
Hook triggers on file write and edit operations
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub waterplanai/agentic-config --plugin ac-safetyQuality assurance - E2E testing, PR review, browser automation
Meta-prompting and self-improvement - skill writer, hook writer
Utilities - integrations, dry-run, prototyping, asset management
Spec workflow, MUX orchestration, and product management
Git automation - PRs, releases, branches, worktrees
5 essential safety hooks for Claude Code. Blocks rm -rf, force-push, hard-reset, .env overwrites, and package publish. The minimum viable safety net from 800+ hours of autonomous operation.
A secure runtime for Claude Code. Intercepts every tool call with policy-based allow/block/ask decisions, evasion detection, path fencing, file snapshots, and audit logging.
Achieve flow state safely with Claude Code. Auto-approves routine work, gates risky actions, hard-blocks dangerous patterns. Dual enforcement (skill + hooks), token cap for cost governance, full audit trail. Zero dependencies.
Smart command safety filter for Claude Code — parses shell pipelines and evaluates per-command safety rules to auto-approve safe commands and block dangerous ones
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
Claude Code hooks for enforcing best practices and workflow automation