Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Eigenwise/eigenwise-toolshedWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/eigenwise/eigenwise-toolshed/quartermaster)<a href="https://agentmods.dev/plugins/eigenwise/eigenwise-toolshed/quartermaster"><img src="https://agentmods.dev/badge/plugins/eigenwise/eigenwise-toolshed/quartermaster/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/eigenwise/eigenwise-toolshed/quartermaster"><img src="https://agentmods.dev/badge/plugins/eigenwise/eigenwise-toolshed/quartermaster.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
quartermaster scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "quartermaster",
"version": "0.12.1",
"description": "Set up a project from your existing Claude Code habits, keep Toolshed installs healthy, and find missing capabilities after real work accumulates. Local scripts reduce session history to a bounded summary before the active model sees it; setup, resupply, updates, and config changes happen only with your approval.",
"author": { "name": "Eigenwise", "email": "[email protected]" },
"homepage": "https://github.com/Eigenwise/eigenwise-toolshed/tree/main/plugins/quartermaster",
"repository": "https://github.com/Eigenwise/eigenwise-toolshed",
"license": "MIT",
"keywords": ["resupply", "self-improvement", "capability", "measurement", "transcripts", "friction", "recommendations", "plugins", "rules", "permissions", "setup", "developer-experience"]
}
What it installs
The manifest is a name and a version. 4 skills travel with it, and installing the plugin installs all of them — 400 tokens a session between them. Each is measured on its own page, and each can be installed alone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed 551a01b0a84e
- 8d ago Changed 8f676a5a96cb
- 12d ago Changed a7537d09bc59
- 15d ago Changed 01cb946ab356
- 16d ago Changed cf84c3b83aea
- 17d ago Changed 57312afc3e28
- 23d ago Changed bff5a9673440
- 26d ago Changed 6a2c86c36355
- 1mo ago Changed 119e48f48787
- 1mo ago First seen · 11 lines scan A fb019d1aede1
quartermaster is a plugin published in the GitHub repository Eigenwise/eigenwise-toolshed (280 stars, last pushed 2d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
cloudflare-browser-rendering
Cloudflare Browser Rendering with Puppeteer/Playwright. Use for screenshots, PDFs, web scraping, or encountering rendering errors, timeout issues, memory exceeded.
cloudflare-cron-triggers
Cloudflare Cron Triggers for scheduled Workers execution. Use for periodic tasks, scheduled jobs, or encountering handler not found, invalid cron expression, timezone errors.
handbook
Core Claude Code handbook with best practices and essential tools.
daily
Day-to-day skills with memory: a morning briefing, a tutor that remembers what you got wrong, and a retro that turns agent mistakes into one-line fixes.
pacewright
Paces a Claude subscription's usage — how fast to spend this week, what can still run at N% weekly, whether planned work fits before a reset. Reads the 5-hour, weekly, per-model and CI-minutes meters, sets a spend mode (normal, pace, turbo, overnight, work-day, owner-away, reset-eve) and re-cuts waves that don't fit.…
lark
A plugin for operating Feishu/Lark workplace services such as messages, documents, spreadsheets, calendars, files, tasks, and meetings through a local command-line tool.