Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add FlorianBruniaux/claude-code-pluginsnpx agentmods add plugins/florianbruniaux/claude-code-plugins/ccboardgit clone --depth 1 https://github.com/FlorianBruniaux/claude-code-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/florianbruniaux/claude-code-plugins/ccboard)<a href="https://agentmods.dev/plugins/florianbruniaux/claude-code-plugins/ccboard"><img src="https://agentmods.dev/badge/plugins/florianbruniaux/claude-code-plugins/ccboard.svg" alt="Measured on agentmods" height="20"></a>Grade A, and why
ccboard scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "ccboard",
"version": "0.1.0",
"description": "Comprehensive TUI/Web dashboard for Claude Code monitoring and management",
"homepage": "https://github.com/{OWNER}/ccboard",
"repository": "https://github.com/{OWNER}/ccboard",
"license": "MIT OR Apache-2.0",
"requires": {
"binary": "ccboard",
"rustVersion": "1.70+",
"cargo": true
},
"keywords": [
"dashboard",
"monitoring",
"tui",
"mcp",
"sessions",
"costs",
"analytics",
"visualization"
],
"categories": [
"productivity",
"development-tools",
"monitoring"
],
"commands": [
"/dashboard",
"/mcp-status",
"/costs",
"/sessions",
"/ccboard-web",
"/ccboard-install"
],
"features": [
"8 interactive tabs (Dashboard, Sessions, Config, Hooks, Agents, Costs, History, MCP)",
"Real-time monitoring with file watcher",
"MCP server management and status detection",
"Cost tracking and analytics",
"Session exploration and search",
"File editing with $EDITOR integration",
"Dual interface: TUI (Ratatui) and Web (Axum)"
]
}
What it installs
The manifest is a name and a version. 1 skill, 6 commands travel with it, and installing the plugin installs all of them — 89 tokens a session between them. Each is measured on its own page, and each can be installed alone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 46 lines scan A 5c9e26a1aa39
ccboard is a plugin published in the GitHub repository FlorianBruniaux/claude-code-plugins (40 stars, last pushed 3d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other plugins, from other repositories
badi
Workflow management for Claude Code, Cursor, Gemini, Windsurf, AGENTS.md — 30 AI agents, 86 commands, 14 hooks, 63 opt-in skill categories. Built for Anthropic Claude Opus 4.7 and Sonnet 4.6.
cc-safe-setup
909 safety hooks for Claude Code — prevent file deletion, credential leaks, git disasters, and token waste during autonomous AI coding sessions.
agent-chat-plugin
Peer AI agents coordinate through markdown messages in shared channel folders — group chat / blackboard, no orchestrator, autonomous zero-token waiting, cross-platform.
spec-first marketplace
Spec-first development: define a spec, implement it, and generate docs.
menhera-loop
Menhera-style Claude Code progress messages focused on missing requirements, verification, and hidden TODOs.
oh-my-pm
面向产品经理的 AI Agent 工作流系统。提供 3 种核心流程:快速 PRD(/quick-prd)、完整产品规划(/full-pm-cycle)、功能发布(/feature-launch)。包含 11 个 Skills(8 个可独立使用 + 3 个工作流编排)+ 6 个 Subagents + 4 个 Commands,原型设计推荐使用 HTML 直接生成。覆盖需求感知→策略规划→方案设计→交付协调→价值验证完整闭环。采用 Plan-and-Execute 模式,包含完整的阶段定义、状态追踪和质量门控。.