Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/ericlitman/open-pstackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/ericlitman/open-pstack/pstack)<a href="https://agentmods.dev/plugins/ericlitman/open-pstack/pstack"><img src="https://agentmods.dev/badge/plugins/ericlitman/open-pstack/pstack/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/ericlitman/open-pstack/pstack"><img src="https://agentmods.dev/badge/plugins/ericlitman/open-pstack/pstack.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
pstack scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "pstack",
"displayName": "pstack",
"version": "1.15.0",
"description": "if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence. Ported from cursor/plugins/pstack for Claude Code and Codex.",
"author": {
"name": "Lauren Tan"
},
"homepage": "https://github.com/ericlitman/open-pstack",
"repository": "https://github.com/ericlitman/open-pstack",
"license": "MIT",
"keywords": [
"pstack",
"poteto-mode",
"workflow",
"principles",
"agent-style",
"subagents",
"unslop"
]
}
What it installs
The manifest is a name and a version. 61 skills, 22 agents, 1 hook travel with it, and installing the plugin installs all of them — 3,457 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill setup-pstack A 59 tokens
- Skill poteto-help A 40 tokens
- Skill arena A 58 tokens
- Skill interrogate A 51 tokens
- Skill reflect A 36 tokens
- Skill swarm A 41 tokens
- Skill how A 60 tokens
- Skill principle-test-behavior-not-implementation A 50 tokens
- Skill principle-attack-the-premise A 41 tokens
- Skill bro A 16 tokens
- Skill babysit A 61 tokens
- Skill benchmark-checklist A 53 tokens
- Skill make-pr-easy-to-review A 57 tokens
- Skill show-me-your-work A 75 tokens
- Skill poteto-mode A 49 tokens
- Skill ketchup A 45 tokens
- Skill blast-radius A 61 tokens
- Skill fix-ci A 19 tokens
- Skill why A 89 tokens
- Skill principle-explain-the-number A 59 tokens
- Skill architect A 52 tokens
- Skill create-verification-skill A 64 tokens
- Skill thermo-nuclear-code-quality-review A 54 tokens
- Skill correct A 68 tokens
- Skill in-your-own-words A 36 tokens
- Skill fix-merge-conflicts A 22 tokens
- Skill no-comments A 24 tokens
- Skill recall A 77 tokens
- Skill sharpen A 36 tokens
- Skill tdd A 52 tokens
- Skill automate-me A 72 tokens
- Skill what-did-i-get-done A 24 tokens
- Skill technical-writing A 52 tokens
- Skill typescript-best-practices A 24 tokens
- Skill get-pr-comments A 14 tokens
- Skill maintain-verification-skill A 57 tokens
- Skill teach A 60 tokens
- Skill figure-it-out A 63 tokens
- Skill principle-build-the-lever A 71 tokens
- Skill principle-boundary-discipline A 46 tokens
- Skill principle-fix-root-causes A 43 tokens
- Skill principle-make-operations-idempotent A 46 tokens
- Skill principle-minimize-reader-load A 44 tokens
- Skill principle-model-the-domain A 27 tokens
- Skill principle-sequence-verifiable-units A 68 tokens
- Skill principle-experience-first A 37 tokens
- Skill principle-foundational-thinking A 42 tokens
- Skill principle-prove-it-works A 50 tokens
- Skill principle-separate-before-serializing-shared-state A 50 tokens
- Skill principle-type-system-discipline A 53 tokens
- Skill principle-never-block-on-the-human A 24 tokens
- Skill principle-outcome-oriented-execution A 39 tokens
- Skill principle-subtract-before-you-add A 39 tokens
- Skill deslop A 14 tokens
- Skill principle-redesign-from-first-principles A 21 tokens
- Skill principle-encode-lessons-in-structure A 49 tokens
- Skill principle-guard-the-context-window A 46 tokens
- Skill principle-laziness-protocol A 42 tokens
- Skill principle-migrate-callers-then-delete-legacy-apis A 45 tokens
- Skill principle-exhaust-the-design-space A 41 tokens
- Skill unslop A 10 tokens
- Agent pstack-fable-high A 22 tokens
- Agent pstack-opus-low A 22 tokens
- Agent pstack-opus-5-5-medium A 33 tokens
- Agent pstack-opus-medium A 22 tokens
- Agent pstack-sonnet-medium A 23 tokens
- Agent pstack-sonnet-low A 23 tokens
- Agent pstack-opus-5-5-max A 33 tokens
- Agent pstack-opus-max A 22 tokens
- Agent pstack-sonnet-max A 23 tokens
- Agent pstack-sonnet-xhigh A 25 tokens
- Agent pstack-opus-5-5-xhigh A 35 tokens
- Agent pstack-opus-xhigh A 24 tokens
- Agent pstack-sonnet-high A 23 tokens
- Agent pstack-opus-5-5-high A 33 tokens
- Agent pstack-opus-high A 22 tokens
- Agent pstack-fable-low A 22 tokens
- Agent pstack-fable-xhigh A 24 tokens
- Agent pstack-fable-max A 22 tokens
- Agent pstack-fable-medium A 22 tokens
- Agent comment-sicko A 21 tokens
- Agent poteto-agent A 110 tokens
- Agent pstack-opus-5-5-low A 33 tokens
- Hook SessionStart A not measured
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed 2b5a4a6b385b
- 4d ago Changed 877840561b79
- 5d ago Changed 131545ced592
- 6d ago Changed 25aef7555495
- 16d ago Changed 37b4c2973ee7
- 1mo ago Changed 0a2411dfa424
- 1mo ago Changed 702984c0a94a
- 1mo ago Changed 53bb53d7f8f0
- 1mo ago Changed 176d7b0f41dd
- 1mo ago First seen · 22 lines scan A 74c4e14e4ae1
pstack is a plugin published in the GitHub repository ericlitman/open-pstack (427 stars, last pushed yesterday), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
humanizer
Rewrite AI-sounding text so it reads like the writer without changing what it says.
nextjs
Official Next.js skills: adopt and optimize Cache Components, adopt Partial Prefetching, and verify runtime behavior against a running dev server.
themes-example
themes-example. An open-source AI agent that brings the power of Gemini directly into your terminal.
claude-plugins-official marketplace
Directory of popular Claude Code extensions including development tools, productivity plugins, and MCP integrations.
knowledge-work-plugins marketplace
Plugin marketplace listing 123 plugins: noibu, productivity, enterprise-search, cowork-plugin-management, sales.
code-modernization
Guided modernization for any legacy codebase: start with /modernize, get an assessment, an interactive map, the business rules mined from the code, and a plan you approve, then an upgrade, a rewrite or a rebuild with independent proof that the new code behaves like the old. Includes security hardening, a one-page…