dshakes/compass
🧭 Let your coding agent off the leash — not off the rails. Guardrails, a hard budget cap & a self-fixing PR loop for Claude Code / Codex / Gemini. Eval-gated 100/100, you always merge.
ARCHETYPE
Pragmatist
A balanced, no-drama setup: some rules, some tools, nothing extreme.
Copy this rig
# review before running: this installs third-party code $ claude mcp add context7 -- npx -y @upstash/context7-mcp@3.1.0 $ claude mcp add fetch -- uvx --from mcp-server-fetch==2025.4.7 mcp-server-fetch $ claude mcp add git -- uvx --from mcp-server-git==2026.1.14 mcp-server-git
MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ claude mcp add context7 -- npx -y @upstash/context7-mcp@3.1.0 $ claude mcp add fetch -- uvx --from mcp-server-fetch==2025.4.7 mcp-server-fetch $ claude mcp add git -- uvx --from mcp-server-git==2026.1.14 mcp-server-git
$ npx degit dshakes/compass/claude/skills/bootstrap-agent-config .claude/skills/bootstrap-agent-config $ npx degit dshakes/compass/claude/skills/harden .claude/skills/harden $ npx degit dshakes/compass/claude/skills/morning-triage .claude/skills/morning-triage $ npx degit dshakes/compass/claude/skills/pr-shepherd .claude/skills/pr-shepherd $ npx degit dshakes/compass/claude/skills/route .claude/skills/route $ npx degit dshakes/compass/claude/skills/systematic-debugging .claude/skills/systematic-debugging $ npx degit dshakes/compass/claude/skills/using-compass .claude/skills/using-compass $ npx degit dshakes/compass/claude/skills/verification-before-completion .claude/skills/verification-before-completion
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} MCP servers (3)
| server | source | est. tokens |
|---|---|---|
| Context7 | npm | 1.2k |
| Fetch | pypi | 450 |
| Git | pypi | 3.2k |
