Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add air-gapped/skillsnpx agentmods add plugins/air-gapped/skills/marketplacegit clone --depth 1 https://github.com/air-gapped/skillsGrade A, and why
air-gapped-marketplace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 766 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "air-gapped-marketplace",
"owner": {
"name": "air-gapped"
},
"metadata": {
"description": "Reference skills for vLLM, Kubernetes, observability, agent workflows, and developer tooling. Grouped suites."
},
"plugins": [
{
"name": "agent",
"source": "./",
"description": "Agent workflow suite — Karpathy-pattern autoresearch (hill-climbing, multi-agent research) and skill-improver (Claude Code skill optimization loop).",
"version": "0.20260825.131",
"author": {
"name": "Jörgen"
},
"license": "MIT",
"skills": [
"./.claude/skills/autoresearch",
"./.claude/skills/skill-improver"
],
"strict": false,
"agents": [
"./.claude/agents/blind-scorer.md",
"./.claude/agents/deep-researcher.md",
"./.claude/agents/web-searcher.md"
],
"category": "ai-workflow",
"tags": [
"autoresearch",
"agents",
"claude-code",
"skills",
"hill-climbing",
"optimization"
]
},
{
"name": "bitnami-exit",
"source": "./",
"description": "Bitnami-exit suite — migrate off dead-ended Bitnami charts/images. First member: redis-to-valkey (Sentinel HA migration to Valkey: the RDB-version wall, RedisShake/rdb-cli logical replay, chart selection and values translation, consumer-app reconnection, air-gap mirroring, Argo CD source rewiring away from charts.bitnami.com).",
"version": "0.20260829.11",
"author": {
"name": "Jörgen"
},
"license": "MIT",
"skills": [
"./.claude/skills/redis-to-valkey"
],
"strict": false,
"category": "kubernetes",
"tags": [
"bitnami",
"valkey",
"redis",
"helm",
"migration",
"sentinel",
"air-gap",
"argocd",
"kubernetes"
]
},
{
"name": "defending-code",
"source": "./",
"description": "What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 766 lines scan A 06fb2dc5c61a
air-gapped-marketplace is a plugin published in the GitHub repository air-gapped/skills (5 stars, last pushed 4d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other plugins, from other repositories
handbook-discover
Discover and audit all plugins in a Claude Code marketplace with installation status, versions, and component breakdown.
reflect
Better alignment with LLMs.
smk marketplace
Plugin marketplace listing 13 plugins: cursor-delegate, spring-clean, portal-skills, readable, decode.
go-specialist
Master Go 1.25+ development with modern patterns, advanced concurrency, performance optimization, and production-ready microservices. Skills: go-blackbox (black box test enforcement), go-bulma (Bulma CSS scaffolding), go-structure (project layout), go-tool (Go 1.24+ tool dependencies). MCP: context7.
spring-clean
Two passes over a repo. spring-clean measures against a declared scoreboard, deletes or gitignores what does not belong, relocates dev docs, notes, clones and dumps to a -workspace repo, splits oversized files, draws package boundaries and writes its plan to a numbered unit list that survives a dead context. w.
portal-skills
Platform engineering and security skills: GitLab CI/CD + Helm chart generation for Kubernetes, data-driven pod rightsizing from Prometheus, a proactive secure-coding baseline, and a deep OWASP reference (Top 10:2025, LLM Top 10, Agentic AI).