A plugin that includes an executable program in its bin directory.

The input is too thin to identify a concrete job it supports.

It packages a runnable tool with the add-on, but the input does not say what that program does.

with-bin — Plugin by codecast-sh

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Claude Code

/plugin marketplace add codecast-sh/codecast

agentmods

npx agentmods add plugins/codecast-sh/codecast/with-bin

Clone the repo

git clone --depth 1 https://github.com/codecast-sh/codecast

Made for: Claude Code.

Per session not measured What this adds to a session before it is invoked.

When invoked not measured Not applicable: nothing here is loaded into a session.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Security

Grade A, and why

with-bin scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

packages/cli/src/capabilities/__fixtures__/manifests/plugins/with-bin/.claude-plugin/plugin.json · 2 lines

What it actually says

{ "name": "with-bin", "description": "Synthetic: ships an executable under bin/." }

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 2 lines scan A 33122ed3757f

Subscribe to this mod's changes

with-bin is a plugin published in the GitHub repository codecast-sh/codecast (30 stars, last pushed 2d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

agents claude claude-code codex cursor gemini

entire-dev-tools

Plugin marketplace listing 2 plugins: e2e, agent-integration.

entireio/cli · not measured

e2e

E2E test triage, debugging, and fix implementation toolkit.

entireio/cli · not measured

ctx

Plugin marketplace listing 1 plugin: ctx.

ctxrs/ctx · not measured

ai-dev-kit

DEPRECATED — the databricks-ai-dev-kit plugin is no longer published. Install skills via install.sh or databricks aitools install, which installs the official databricks plugin (Claude Code/Codex/Copilot) or raw skill files (Cursor/OpenCode/Antigravity). Not a move away from plugins. See .claude-plugin/DEPRECATED.m.

databricks-solutions/ai-dev-kit · not measured

notify-me

Calls you back when an agent needs you. The moment an agent gets blocked waiting on your decision, notify-me pushes a notification to your phone (via ntfy) and/or plays a sound on your computer — so you can step away and still know when you're needed. Works with any agent that supports plugin hooks. No account, no…

jovesun-lab/whetstone · not measured

alpha

alpha. A cli tool for evaluating coding agent plugins with a multi-tier approach.

bitwise-media-group/evolve · not measured