Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add georgeguimaraes/claude-code-elixirnpx agentmods add plugins/georgeguimaraes/claude-code-elixir/mix-compilegit clone --depth 1 https://github.com/georgeguimaraes/claude-code-elixirGrade A, and why
mix-compile scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "mix-compile",
"version": "1.1.0",
"description": "Run mix compile --warnings-as-errors after editing Elixir files",
"author": {
"name": "George Guimaraes"
},
"homepage": "https://github.com/georgeguimaraes/claude-code-elixir",
"license": "Apache-2.0",
"keywords": ["elixir", "mix-compile", "warnings-as-errors"]
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 12 lines scan A 707a77093d17
mix-compile is a plugin published in the GitHub repository georgeguimaraes/claude-code-elixir (169 stars, last pushed 4mo ago), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
tree-sitter-language-pack
Parse and extract code intelligence from 371 programming languages with tree-sitter — structure, imports, symbols, and syntax-aware chunking.
review
PR review, interactive git diff annotation review, and writing style guide.
moai-career
구직자 편 커리어 코칭 전담 AI 코워커 — 이력서·포트폴리오 첨삭, 면접 준비, 이직 전략까지 커리어 전환 실무 스킬. 인사채용(고용주 편)과 구분되는 구직자 관점입니다. 이런 분께 추천: 이직 준비자·취업 준비생·주니어 직장인.
dev-tooling
Three MCP servers for PHP and JavaScript operations plus an optional PHP language server. PHP (php-tooling): PHPStan, ECS, Rector, PHPUnit, PHPUnit coverage gap analysis, Symfony Console. Administration (js-admin-tooling): ESLint, Stylelint, Prettier, Jest, TypeScript, Vite builds. Storefront (js-storefront-tooling)…
swe-marketplace
Plugin marketplace listing 13 plugins: adv, arch, context-engineering, research-team, knowledgeware.
excessibility
LiveView introspection and accessibility testing skills for Phoenix. Use htmlsnapshot() to capture state at any point, axe-core for WCAG compliance, timeline analysis for debugging.