Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/baleen37/bstackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/baleen37/bstack/me)<a href="https://agentmods.dev/plugins/baleen37/bstack/me"><img src="https://agentmods.dev/badge/plugins/baleen37/bstack/me/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/baleen37/bstack/me"><img src="https://agentmods.dev/badge/plugins/baleen37/bstack/me.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
me scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "me",
"version": "17.65.2",
"description": "AI coding assistant toolkit - git workflow protection, verification, shipping, research, and development automation",
"author": {
"name": "baleen37",
"email": "[email protected]"
},
"license": "MIT",
"keywords": [
"git",
"workflow",
"automation",
"verification",
"shipping",
"research",
"memory",
"context",
"compacting"
]
}
What it installs
The manifest is a name and a version. 10 skills, 1 agent, 7 hooks travel with it, and installing the plugin installs all of them — 652 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill e2e-scenario-testing A 105 tokens
- Skill ship A 60 tokens
- Skill create-pr A 16 tokens
- Skill writing-rfcs A 43 tokens
- Skill competitive-agents A 35 tokens
- Skill verify B 113 tokens
- Skill code-review A 81 tokens
- Skill browser A 57 tokens
- Skill learn A 27 tokens
- Skill simplify A 63 tokens
- Agent researcher A 52 tokens
- Hook SessionStart A not measured
- Hook WorktreeCreate A not measured
- Hook PreToolUse A not measured
- Hook UserPromptSubmit A not measured
- Hook PermissionRequest A not measured
- Hook SessionEnd A not measured
- Hook Stop A not measured
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago Changed 32d124f5badf
- 19d ago Changed c298dc518325
- 25d ago Changed b28bdab53c34
- 27d ago Changed 9700698b4327
- 1mo ago Changed fa46663179ec
- 1mo ago Changed 0e7543cba323
- 1mo ago Changed a5fe40b592bc
- 1mo ago Changed 1fded2f01b8b
- 1mo ago Changed 41dcb4181e19
- 1mo ago First seen · 22 lines scan A ed11c4ef56dd
me is a plugin published in the GitHub repository baleen37/bstack (4 stars, last pushed 18d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other plugins, from other repositories
memstack
131 battle-tested skills for Claude Code. Session memory, git workflows, database migrations, security scanning, deployments, and more. Auto-trigger commands and project handoffs via markdown-based skills.
commitlore
Recorded decisions from git history, delivered to the agent before it edits. Constraints, alternatives already ruled out, and warnings left by whoever was here last.
dstoic
Core infrastructure: git commits, model selection, hooks, scratch pad, kaizen, devil-advocate agent, context save/load, verbatim checkpoint, resumable work plans (plan-context), meta-prompt (RELIANCE recursive ledger), and session post-mortem.
unforgit-claude-code-marketplace
Claude Code plugins for Unforgit persistent repository memory.
unforgit
Persistent repository memory for AI coding agents using MCP tools, repository rules, and durable project knowledge.
continuity
Durable project state across AI sessions: decisions, constraints, and rejected paths, versioned in git as plain markdown. Not a memory tool — it answers what is true about the project now, and what must not change.