vbonk/repo-template
A secure, agent-native GitHub repository template for Claude Code and Codex. Pre-commit secret checks, CI checks on pull requests, SHA-pinned Actions, CODEOWNERS on agent config files. MIT.
ARCHETYPE
Pragmatist
A balanced, no-drama setup: some rules, some tools, nothing extreme.
Copy this rig
# review before running: this installs third-party code
$ npx degit vbonk/repo-template/.claude ./rig-repo-template # inspect, then merge into .claude/ MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit vbonk/repo-template/.claude/skills/_example-skill .claude/skills/_example-skill $ npx degit vbonk/repo-template/.claude/skills/cot .claude/skills/cot $ npx degit vbonk/repo-template/.claude/skills/hibernate .claude/skills/hibernate $ npx degit vbonk/repo-template/.claude/skills/repo-docs .claude/skills/repo-docs $ npx degit vbonk/repo-template/.claude/skills/skill-builder .claude/skills/skill-builder $ npx degit vbonk/repo-template/.claude/skills/skill-validator .claude/skills/skill-validator $ npx degit vbonk/repo-template/.claude/skills/task-cleanup .claude/skills/task-cleanup $ npx degit vbonk/repo-template/.claude/skills/template-upgrade .claude/skills/template-upgrade
$ curl -fsSL --create-dirs -o .claude/agents/_example-agent.md https://raw.githubusercontent.com/vbonk/repo-template/main/.claude/agents/_example-agent.md This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} Skills (8)
Subagents (1)
| code-review model: sonnet | >- |
Slash commands (7)
/bootstrap/getting-started/init-template/review/security-audit/update-docs/upgrade-template
Similar rigs
yusufkaraaslan/Skill_Seekers
Convert documentation websites, GitHub repositories, and PDFs into Claude AI skills with automatic conflict detection
Pragmatist 8.1k tok ·
shihabshahrier/skill-builder
Build & audit AI agent skills from plain English
Minimalist 640 tok ·
YurunChen/repo-docs-skills
Living project docs for coding agents: keep guides, progress logs, change maps, and handoff context updated as your repo evolves.
Minimalist 540 tok ·
ivory-code/agents-configs
Portable agent configs and repo-convention skills for Codex, Claude Code, and AI coding agents.
Minimalist 445 tok ·