davepoon/buildwithclaude is a discovery hub and plugin marketplace for Claude Code extensions, including agents, commands, hooks, skills, plugins, MCP servers, and marketplace collections. Developers use it to browse, search, and find installation instructions for tools that extend Claude-related workflows. Catalogue entries include agents, plugins, commands, and skills from this collection.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/davepoon/buildwithclaudeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/davepoon/buildwithclaude/marketplace)<a href="https://agentmods.dev/plugins/davepoon/buildwithclaude/marketplace"><img src="https://agentmods.dev/badge/plugins/davepoon/buildwithclaude/marketplace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/davepoon/buildwithclaude/marketplace"><img src="https://agentmods.dev/badge/plugins/davepoon/buildwithclaude/marketplace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade E, and why
buildwithclaude marketplace scanned grade E with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
"description": "Keeps Claude Code sessions on AWS Bedrock alive through credential expiry. Scripts for awsCredentialExport and awsAuthRefresh, added to settings.json by hand, read fresh credentials from ~/.aws/credential Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
"description": "All-in-one mod pack for Claude Code: a usage limits and context HUD, a guard with undo for rm -rf and git reset --hard, .env and secret protection, and a receipt for every turn. Ten mods in one plugin; ne How it starts
The opening of the file, as written. The whole thing — 5,014 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
"name": "buildwithclaude",
"version": "1.0.0",
"owner": {
"name": "BuildWithClaude Community",
"email": "[email protected]",
"url": "https://github.com/davepoon/buildwithclaude"
},
"metadata": {
"description": "A comprehensive community-driven collection of 117 AI agents, 174 slash commands, 28 hooks, and 199 MCP servers for Claude Code",
"version": "1.0.0",
"homepage": "https://buildwithclaude.com",
"repository": "https://github.com/davepoon/buildwithclaude",
"license": "MIT",
"keywords": [
"claude-code",
"agents",
"commands",
"hooks",
"mcp-servers",
"automation",
"ai-tools"
]
},
"plugins": [
{
"name": "mobile-debug-tools",
"description": "Inspect and interact with Android and iOS apps through the mobile-debug-mcp server and a usage skill.",
"version": "0.0.1",
"author": {
"name": "mobile-debug-tools contributors",
"url": "https://github.com/clivejefferies"
},
"repository": "https://github.com/clivejefferies/mobile-debug-tools",
"license": "Apache-2.0",
"keywords": [
"android",
"ios",
"mobile-debugging",
"mcp",
"claude-code"
],
"category": "development",
"source": {
"source": "git-subdir",
"url": "https://github.com/clivejefferies/mobile-debug-tools.git",
"path": "agent-plugin",
"ref": "main"
}
},
{
"name": "pine",
"description": "Connect Claude to Pine AI to handle real-world tasks and follow up on progress and results.",
"version": "0.1.1",
"author": {
"name": "Pine AI",
"url": "https://pine.im"
},
"homepage": "https://pine.im",
"repository": "https://github.com/19PINE-AI/pine-mcp-server",
"license": "MIT",
"keywords": [
"pine",
The plugins it lists here
This marketplace lists 23 plugins kept in the same repository. Each has its own page, its own measurements and its own install command.
- Plugin aigent-os 2 inside A not measured
- Plugin agent-triforce 9 inside A not measured
- Plugin agents-data-ai 12 inside A not measured
- Plugin agents-development-architecture 12 inside A not measured
- Plugin agents-language-specialists 12 inside A not measured
- Plugin agents-media-content 11 inside A not measured
- Plugin agents-quality-security 15 inside A not measured
- Plugin agents-research 9 inside A not measured
- Plugin agents-specialized-domains 10 inside A not measured
- Plugin aiboarding A not measured
- Plugin uc-taskmanager 10 inside A not measured
- Plugin agents-ai-agents 5 inside A not measured
- Plugin agents-business-finance 4 inside A not measured
- Plugin agents-crypto-trading 5 inside A not measured
- Plugin agents-documentation 3 inside A not measured
- Plugin agents-infrastructure-operations 8 inside A not measured
- Plugin agents-sales-marketing 7 inside A not measured
- Plugin ag2-agent-builder 10 inside A not measured
- Plugin agents-blockchain-web3 2 inside A not measured
- Plugin agents-design-experience 2 inside A not measured
- Plugin agents-meta-orchestration 5 inside A not measured
- Plugin all-agents A not measured
- Plugin all-commands 23 inside A not measured
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +109 lines dd415296ae1a
- 3d ago Changed · +26 lines 684c40b92af8
- 4d ago Changed · +57 lines 78e90e5576d8
- 5d ago Changed fe1e2216df11
- 7d ago Changed · +79 lines 54ee6ecb2db9
- 8d ago Changed · +218 lines 2aad2fcd14fa
- 9d ago Changed · +80 lines 31791923e3ca
- 12d ago Changed · +133 lines cf19c9565377
- 13d ago Changed · +159 lines bb0a12a8eb46
- 14d ago First seen · 4,153 lines scan E 60f09946df48
buildwithclaude marketplace is a plugin published in the GitHub repository davepoon/buildwithclaude (3,727 stars, last pushed yesterday), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it E with 2 findings (reaches for credential files, recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
buildwithclaude marketplace compared with plugins from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| buildwithclaude marketplacedavepoon/buildwithclaude | Plugin | 3.7k | yesterday | MIT | E | — | Claude Code |
| aidd-telemetryai-driven-dev/framework | Plugin | 550 | yesterday | MIT | A | — | Claude Code |
| csrf-protectionsecondsky/claude-skills | Plugin | 245 | 6d ago | MIT | A | — | Claude Code |
| ai-engineerccplugins/awesome-claude-code-plugins | Plugin | 998 | 2mo ago | Apache-2.0 | A | — | Claude Code |
| code-reviewccplugins/awesome-claude-code-plugins | Plugin | 998 | 2mo ago | Apache-2.0 | A | — | Claude Code |
| create-worktreesxbim08/awesome-claude-code-plugins | Plugin | 10 | 1mo ago | Apache-2.0 | A | — | Claude Code |
| sigil-securityNOMARJ/sigil | Plugin | 6 | 28d ago | Apache-2.0 | A | — | Claude Code |