Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/ashlrai/ashlr-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/ashlrai/ashlr-plugin/marketplace)<a href="https://agentmods.dev/plugins/ashlrai/ashlr-plugin/marketplace"><img src="https://agentmods.dev/badge/plugins/ashlrai/ashlr-plugin/marketplace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/ashlrai/ashlr-plugin/marketplace"><img src="https://agentmods.dev/badge/plugins/ashlrai/ashlr-plugin/marketplace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
ashlr-marketplace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "ashlr-marketplace",
"owner": {
"name": "AshlrAI",
"url": "https://github.com/ashlrai"
},
"metadata": {
"description": "Open-source Claude Code plugin — 40 token-efficient MCP tools, 34 slash commands, GitHub OAuth sign-in, auto-genome from public repos, cloud-genome pull, per-session accounting, animated status line. MIT, opt-in telemetry.",
"version": "1.37.0"
},
"plugins": [
{
"name": "ashlr",
"source": {
"source": "url",
"url": "https://github.com/ashlrai/ashlr-plugin.git"
},
"description": "Token-efficient MCP tools for Claude Code, open-source WOZCODE alternative. Measured per-call savings: reads about -75%, greps about -50% (not end-to-end).",
"version": "1.37.0",
"author": {
"name": "Mason Wyatt",
"url": "https://github.com/ashlrai"
},
"homepage": "https://plugin.ashlr.ai/",
"repository": "https://github.com/ashlrai/ashlr-plugin",
"license": "MIT",
"category": "token-efficiency",
"keywords": [
"claude-code",
"mcp",
"token-efficiency",
"wozcode-alternative",
"github-oauth",
"genome",
"cloud-genome"
]
}
]
}
The plugins it lists here
This marketplace lists 1 plugin kept in the same repository. Each has its own page, its own measurements and its own install command.
What ships with it
1 file beside marketplace.json in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed 58c2787eddcb
- 4d ago Changed 6fd8163a440f
- 19d ago Changed ef9f0c9bb935
- 20d ago Changed f472b4780de2
- 1mo ago First seen · 40 lines scan A e647d0fb9b2d
ashlr-marketplace is a plugin published in the GitHub repository ashlrai/ashlr-plugin (3 stars, last pushed yesterday), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other plugins, from other repositories
dashi-channel
Telegram channel plugin for Claude Code: personal DM bridge + public multichat, permission relay, confirm-panel keys, context HUD with a single pinned status card, rich messages (Bot API 10.1), Guest Mode, voice transcription, terminal mirror, secret redaction.
cassandra
Remembers the tool calls that already failed, and says so before your agent runs one again unchanged.
img-pilot
First Claude Code plugin that generates brand-aligned visual assets from your terminal. 9 providers, cost-optimized (one call, many derivatives), security-first (auto-gitignore, chmod 600, pre-commit hook).
familiar-extras
Companion personality, mood, lore, and commands powered by the Familiar SDK.
recall
Durable, fully-local project memory for Claude Code. Logs every session to .recall/history.md and condenses it into .recall/context.md with a local Python summarizer (TF-IDF + TextRank) — no API key, no external model, nothing leaves your machine. New sessions resume from the saved context.
orchestrator
Token-frugal multi-agent orchestration for Claude Code, built for a Claude Fable 5 chair: Fable plans and decides, Sonnet 5 carries the volume, Opus 5 takes the hard slices and escalations, each worker's effort sized by the chair. Delegation is the DEFAULT, not the escalation — and a solo guard watches the chair…