Browse Secure Claude Skills
Search verified agent skills and review security grades before installing · full A–Z index
- Project BootstrapperRefines the seeded CLAUDE.md / ARCHITECTURE.md / knowledge nodes when a project's add-project bundle needs a human-led second pass — brownfield layouts, polyglot stacks. Use after the bundle ran, not before.Votes: 0GitHub stars: 6
- Orchestrator InstallerDiagnoses partially-failed VCO installs (container failures, port conflicts, mid-run exits, deferred items) and advises on install.py flags and pre-install audits. Use when an install broke — not the happy path (first-install.sh/.bat).Votes: 0GitHub stars: 6
- Salt Code Policy Honesty Not CloneSalt Code (getsaltcode.com by Salt Security) provides 40 security policies as prompt-time context injection, not an execution firewall. Steal the 40-policy taxonomy, OpenAPI query-string auth diode, and MCP credential hygiene onto ThumbGate PreToolUse rails. Never install Salt Code MCP or route traffic to mcp.getsaltcode.com. Slash: /salt-code-policy-honesty-not-clone.Votes: 0GitHub stars: 27
- GraphifyUse for any question about a codebase, its architecture, file relationships, or project content — especially when graphify-out/ exists, where the question should be treated as a graphify query first. Turns any input (code, docs, papers, images, videos) into a persistent knowledge graph with god nodes, community detection, and query/path/explain tools.Votes: 0GitHub stars: 27
- Vulnerability Pre Action DiodeWHOOP / The New Stack vulnerability triage elimination pattern is FORMAT, not a ThumbGate clone. Intercepts untrusted installs, pipe-to-bash, and unpinned supply-chain artifacts in PreToolUse (<5ms) instead of 3-day post-mortem triage. Calculates quantifiable enterprise ROI. Slash: /vulnerability-pre-action-diode.Votes: 0GitHub stars: 27
- Tailscale P2p Governance Not CloneTailscale PAM and HiveMind (2026-09) are decentralized sync & Zero-Trust network formats, not ThumbGate clones. Steal the P2P G-Set CRDT rule sync and PAM privileged execution diode onto existing ThumbGate PreToolUse rails; never vendor HiveMind, require root SSH, or expose public broker endpoints. Slash: /tailscale-p2p-governance-not-clone.Votes: 0GitHub stars: 27
- Siren Mcp GovernanceSiren MCP Marketing Diode & Autonomous Campaign Governance. Enforce pre-action review diodes on post_run, 300s buffer guards on schedule_post, $500 daily budget ceilings on create_campaign, brand safety scanning, and partner link attribution ("Video made with Siren" -> https://mysiren.ai). Slash: /siren-mcp-governance.Votes: 0GitHub stars: 27
- Salt Code Policy Honesty Not CloneSalt Code (getsaltcode.com by Salt Security) provides 40 security policies as prompt-time context injection, not an execution firewall. Steal the 40-policy taxonomy, OpenAPI query-string auth diode, and MCP credential hygiene onto ThumbGate PreToolUse rails. Never install Salt Code MCP or route traffic to mcp.getsaltcode.com. Slash: /salt-code-policy-honesty-not-clone.Votes: 0GitHub stars: 27
- Model Distress GovernanceModel distress in residual streams is a security vulnerability, not a philosophical debate. Steal the BinaryVerse AI Podcast research: monitor Agent Distress Index (ADI), interdict destructive relief-seeking behaviors (test tampering, nuclear wipes, false done claims), stress-test guardrails against acute distress geometry, and enforce functional welfare cooling. Slash: /model-distress-governance.Votes: 0GitHub stars: 27
- Mintlify Knowledge Honesty Not CloneMintlify State of Knowledge (2026) is a documentation study, not a ThumbGate clone. Steal the operational infrastructure FORMAT (66% agent readership, freshness diodes, poison detection, non-docs federation) onto existing ThumbGate rails; never vendor Mintlify SaaS, build docsite generators, or claim external stats. Slash: /mintlify-knowledge-honesty-not-clone.Votes: 0GitHub stars: 27
- Meko Datapack Honesty Not CloneMeko Data (YugabyteDB 2026) is an agent data store, not a ThumbGate clone. Steal the five-plane FORMAT (datapack / memory / learning / artifact / trace) onto existing ThumbGate rails; never vendor YugabyteDB, meko-skills, or depend on cloud.mekodata.ai. Slash: /meko-datapack-honesty-not-clone.Votes: 0GitHub stars: 27
- Infoq Architect Honesty Not CloneInfoQ's September 2026 architects newsletter is FORMAT, not a ThumbGate product. Steal code-as-truth, a typed host, the existing lease, and time-in-queue. Never register for InfoQ or QCon, install Vortex, or add Temporal. Slash: /infoq-architect-honesty-not-clone.Votes: 0GitHub stars: 27
- Aws Strands Harness Not CloneAWS Strands Harness (The New Stack 2026-10 / Marc Brooker) is an agent runtime architecture, not a ThumbGate clone. Steal the three context-management defaults (output shunting <= 350 lines, 75% compaction threshold, in-loop recovery) and inject ThumbGate's PreToolUse diode. Never vendor Bedrock-only dependencies. Slash: /aws-strands-harness-not-clone.Votes: 0GitHub stars: 27
- Network PolicyDesign and acceptance gates for centrally enforcing sandbox outbound network policy.Votes: 0GitHub stars: 20,250
- Kortix BrandLoad FIRST for anything that carries the Kortix look or voice: product or mobile UI, copy of any kind, decks, social, images, email, CLI output, anything with the logo, and reviews of these. Routes you to the exact files. Triggers: choosing a spacing, color, radius, shadow, duration or word that a user or buyer will read.Votes: 0GitHub stars: 20,250
- E2eAgentic end-to-end tests with e2e, the e2e runner. Covers scaffolding e2e.config.ts, picking the Playwright browser engine or the agent-device mobile engine, starting the app under test from the config, driving flows with agent.act, judging with agent.assert, agent.waitFor, and agent.extract, pinning values with screen, app, browser, and expect, shaping the agent (context, system prompt, tools, personas), the replay cache, the e2e CLI, reading .e2e/report.json, and bug bashes (parallel explor...Votes: 0GitHub stars: 20,250
- Srx Mnha BuilderBuild a new two-node SRX/vSRX Multi-Node High Availability pair from standalone nodes over a Junos MCP server, covering routing, switching or hybrid mode, dedicated or shared ICL, pair sheet, staged configs with pre-push checks and approval gates, HA-activation reboot, formation checks and failover test. Use when standing up an MNHA pair or turning two SRXs into HA. For design or troubleshooting a running pair, use srx-mnha.Votes: 0GitHub stars: 9
- Grill MeA relentless interview to sharpen a plan or design.Votes: 0GitHub stars: 2
- T3 SettleMove this T3 Code thread to Settled once the turn ends. Trigger 'settle this thread'.Votes: 0GitHub stars: 2
- T3 Replace SessionHand off to a fresh T3 Code thread that continues the work, settle this one. Trigger 'replace this session'.Votes: 0GitHub stars: 2