utsabpanta/claude-code-toolkit
Safety hooks for Claude Code that actually block. Every hook tested. Installs with zero settings.json editing - plus 12 specialist review agents.
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
Copy this rig
$ git clone --depth 1 https://github.com/utsabpanta/claude-code-toolkit MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit utsabpanta/claude-code-toolkit/plugins/guardrails/skills/harden-setup .claude/skills/harden-setup $ npx degit utsabpanta/claude-code-toolkit/plugins/guardrails/skills/hook-authoring .claude/skills/hook-authoring $ npx degit utsabpanta/claude-code-toolkit/plugins/guardrails/skills/permission-policy .claude/skills/permission-policy $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/5-whys .claude/skills/5-whys $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/adr .claude/skills/adr $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/api-design .claude/skills/api-design $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/blame-why .claude/skills/blame-why $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/debug-help .claude/skills/debug-help $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/dependency-check .claude/skills/dependency-check $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/incident .claude/skills/incident $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/migration-review .claude/skills/migration-review $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/refactor-plan .claude/skills/refactor-plan $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/release-notes .claude/skills/release-notes $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/retro .claude/skills/retro $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/rubber-duck .claude/skills/rubber-duck $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/standup .claude/skills/standup $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/test-gen .claude/skills/test-gen $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/tldr .claude/skills/tldr $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/tradeoff .claude/skills/tradeoff $ npx degit utsabpanta/claude-code-toolkit/plugins/team-power-pack/skills/what-changed .claude/skills/what-changed
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} Skills (20)
Similar rigs
edjchapman/claude-code-config
Reusable agents, commands, and permission templates for Claude Code
Orchestrator 4.0k tok ·
thoughtbot/rails-consultant
A collection of skills for Rails development and consulting with an emphasis on learning, communication, and client success.
Skill Collector 670 tok ·
anmolnagpal/devops-skills
Multi-tool DevOps skills for Claude Code, Cursor, and Codex — Terraform, Kubernetes, Docker, GitHub Actions, GitLab CI, AWS FinOps, OWASP security.
Skill Collector 98.4k tok ·
RAIT-09/obsidian-agent-client
Bring AI agents into Obsidian via Agent Client Protocol (ACP), such as Claude Code, Codex and Gemini CLI.
Pragmatist 4.8k tok ·