~ / rigs / utsabpanta / claude-code-toolkit

utsabpanta/claude-code-toolkit

Safety hooks for Claude Code that actually block. Every hook tested. Installs with zero settings.json editing - plus 12 specialist review agents.

↗ GitHub ★ 0 MIT updated 1mo ago project Claude Code Claude plugin
share on X
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
CONTEXT TAX · EVERY TURN
~1.9k tokens
Featherweight · median rig: 2.3k · breakdown
GUARDRAILS
0/5
No committed guardrails · details

Copy this rig

$ git clone --depth 1 https://github.com/utsabpanta/claude-code-toolkit

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

$ npx degit utsabpanta/claude-code-toolkit/plugins/guardrails/skills/harden-setup .claude/skills/harden-setup
$ npx degit utsabpanta/claude-code-toolkit/plugins/guardrails/skills/hook-authoring .claude/skills/hook-authoring
$ npx degit utsabpanta/claude-code-toolkit/plugins/guardrails/skills/permission-policy .claude/skills/permission-policy
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/5-whys .claude/skills/5-whys
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/adr .claude/skills/adr
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/api-design .claude/skills/api-design
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/blame-why .claude/skills/blame-why
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/debug-help .claude/skills/debug-help
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/dependency-check .claude/skills/dependency-check
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/incident .claude/skills/incident
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/migration-review .claude/skills/migration-review
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/refactor-plan .claude/skills/refactor-plan
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/release-notes .claude/skills/release-notes
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/retro .claude/skills/retro
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/rubber-duck .claude/skills/rubber-duck
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/standup .claude/skills/standup
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/test-gen .claude/skills/test-gen
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/tldr .claude/skills/tldr
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/tradeoff .claude/skills/tradeoff
$ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/what-changed .claude/skills/what-changed

This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:

{
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(**/.env)",
      "Read(~/.ssh/**)",
      "Bash(rm -rf *)",
      "Read(**/*.pem)",
      "Bash(rm -rf /)",
      "Bash(git push --force:*)",
      "Bash(sudo *)",
      "Read(.env)",
      "Bash(rm -rf /*)",
      "Read(./.env.*)",
      "Read(~/.aws/**)",
      "Bash(git push --force*)",
      "Bash(rm -rf:*)",
      "Read(**/*.key)",
      "Read(**/.env.*)",
      "Bash(sudo:*)",
      "Bash(git reset --hard*)",
      "Bash(git reset --hard:*)",
      "Read(.env.*)"
    ],
    "ask": [
      "Bash(git push:*)",
      "Bash(git push *)",
      "Bash(git commit:*)",
      "Bash(rm *)",
      "Bash(rm:*)",
      "Bash(git rebase *)",
      "Bash(wget *)",
      "Bash(npm publish:*)",
      "Bash(git commit *)",
      "Bash(gh pr merge *)"
    ]
  }
}

Skills (20)

Similar rigs

copied ✓