From yana-ai
Sovereign-grade safety OS for AI coding agents. 45 hooks, 3,440 skills, L1 memory, circuit breakers, and cross-engine enforcement — blocks rm -rf, force push, pipe-to-shell, and 40+ attack vectors before they reach your repo.
How this skill is triggered — by the user, by Claude, or both
Slash command
/yana-ai:yana-ai yana-ai status | yana-ai audit | yana-ai hooks | yana-ai memoryyana-ai status | yana-ai audit | yana-ai hooks | yana-ai memoryThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Yana AI is an agent operating system layered on top of Claude Code (and other AI coding agents). It intercepts dangerous commands, enforces safety rules, manages persistent memory, and provides 3,440+ reusable skills.
Yana AI is an agent operating system layered on top of Claude Code (and other AI coding agents). It intercepts dangerous commands, enforces safety rules, manages persistent memory, and provides 3,440+ reusable skills.
When loaded, Yana AI automatically:
rm -rf, force push, pipe-to-shell, path traversal, supply chain attacks, and more# Install via skills CLI
npx skills add yanacuti1121/yana-ai
# Or install directly into .claude/
curl -L https://github.com/yanacuti1121/yana-ai/releases/latest/download/yana-ai-latest.zip -o yana-ai.zip
unzip yana-ai.zip -d .claude/
| Command | What it does |
|---|---|
/status | Show hooks, memory, and gate status |
/audit | Run full security audit on repo |
/quick-commit | Safe commit with gate checks |
/session-wrap | Persist session state to L1 memory |
/smart-fix | Auto-fix with feedback loop |
/code-review | Multi-agent code review |
Yana AI hooks fire on every tool call:
PreToolUse:
- safe-run.sh — blocks 40+ dangerous command patterns
- scope-guard.sh — enforces declared file scope
- risk-scorer.sh — rates action risk 0–100
- token-budget-guard — prevents runaway token usage
PostToolUse:
- session-checkpoint — saves state every 5 tool calls
- audit-logger — appends to Merkle hash-chain log
Stop:
- truth-gate.sh — warns on completion claims without evidence
# Save a fact to L1 (persists across sessions)
bash core/scripts/add-fact.sh "tag" "fact content" "high"
# Search L1 memory
bash core/scripts/search-facts.sh "tag"
# View session memory
bash core/scripts/list-session-facts.sh
Yana AI will always block these regardless of context:
rm -rf git push --force eval "$user_input"
curl ... | bash DROP TABLE chmod 777 core/
Yana AI enforces safety on all AI coding agents via a shared safe-run.sh proxy:
CODEX_SHELL_EXEC_HOOK → safe-run.sh.cursor/rules/ enforcement--before-exec hookProvides UI/UX resources: 50+ styles, color palettes, font pairings, guidelines, charts for web/mobile across React, Next.js, Vue, Svelte, Tailwind, React Native, Flutter. Aids planning, building, reviewing interfaces.
Fetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.
npx claudepluginhub yanacuti1121/yana-ai --plugin yana-ai