By wombat9000
Blocks access to sensitive dotfiles and configuration files containing credentials
A marketplace for Claude Code agent configuration plugins.
This repository provides a plugin marketplace for Claude Code extensions. Users can discover, install, and manage plugins distributed through this marketplace.
/plugin marketplace add https://github.com/wombat9000/claude-plugins.git
/plugin
/plugin install plugin-name@wombat9000-marketplace
Comprehensive toolkit for creating slash commands, designing skills, and configuring Claude Code permissions with security best practices.
Version: 1.0.0
Slash Commands:
/config-wizard:cmd-init - Initialize a new slash command for Claude Code/config-wizard:cmd-review - Review an existing slash command from the current projectSkills:
designing-claude-skills - Comprehensive guide for creating, reviewing, and improving skills
managing-permissions - Guide for configuring Claude Code permissions in settings.json
Blocks Claude Code access to sensitive dotfiles and configuration files that may contain credentials, API keys, and other secrets.
Protects 20+ sensitive files including .env, .bashrc, .zshrc, .ssh/, .aws/, .npmrc, and other credential files through Bash, Read, Glob, and Grep validation hooks.
Category: security Version: 1.0.0 License: MIT
Features:
Prevents Claude from accessing dependency directories to save tokens and improve performance.
Blocks access to node_modules, .git, dist, build, vendor, target, .venv, and venv directories through Bash, Read, Glob, and Grep validation hooks.
Category: utilities Version: 1.0.0 License: MIT
Features:
For automatic marketplace installation in team projects, add to .claude/settings.json:
{
"extraKnownMarketplaces": {
"wombat9000-marketplace": {
"source": {
"source": "github",
"repo": "wombat9000/claude-plugins"
}
}
}
}
Executes bash commands
Hook triggers when Bash tool is used
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub wombat9000/claude-plugins --plugin block-dotfilesPrevents Claude from accessing dependency directories to save tokens
Interactive wizard to help create new Claude Code plugins
Delegate research and web search tasks to Gemini AI via CLI
Security hook that blocks Claude from reading, writing, or accessing secret and sensitive files
Security guardrails - credential protection, destructive command blocking, write scope enforcement, supply chain control, browser restrictions
Protect secrets and credentials from Claude Code. Blocks writes to .env files, detects API keys in shell commands, prevents hardcoded tokens, and guards service account JSON files.
Easily create hooks to prevent unwanted behaviors by analyzing conversation patterns
Blocks secrets and PII before they reach the Anthropic API
Ultra-compressed communication mode. Cuts ~75% of tokens while keeping full technical accuracy by speaking like a caveman.