Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add LovelaceLoom/grok-plugin-ccnpx agentmods add plugins/lovelaceloom/grok-plugin-cc/grokgit clone --depth 1 https://github.com/LovelaceLoom/grok-plugin-ccGrade A, and why
grok scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "grok",
"version": "1.2.2",
"description": "Use xAI Grok from Claude Code to ask, research (effort=max + web search), review code, generate images/videos via Grok Imagine, run parallel best-of-N and fan-out, or delegate long-form tasks. Wraps the local `grok` CLI.",
"author": {
"name": "taibaran"
}
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 9 lines scan A 964d01dc61cb
grok is a plugin published in the GitHub repository LovelaceLoom/grok-plugin-cc (5 stars, last pushed 24d ago), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other plugins, from other repositories
claudekit
Verification-first engineering toolkit for Claude Code. 15 skills across a 5-phase spine (Investigate → Design → Implement → Verify → Ship), 8 specialist agents, an interactive setup wizard. Every skill has rationalizations + evidence requirements. Built for senior ICs and tech leads.
claude-human-review
Force a human review gate after every Claude turn that edits files. Summarizes what changed and why, drops one-line doc comments on touched classes and functions, then waits for the developer to Approve or Undo.
claude-human-review marketplace
Single-plugin marketplace for claude-human-review: a human approval gate after every Claude Code turn that edits files.
context-hogs
A per-file context-cost leaderboard for Claude Code. A PostToolUse hook (async, zero added latency) attributes every tool result's tokens to the file(s) it pulled into context; at SessionEnd (or on demand via /context-hogs:leaderboard) it renders your repo's most token-expensive files with estimated cost, so you know…
cc-skills
Claude Code Skills Marketplace: Meta-skills and foundational tools for Claude Code.
boundedrelay
Optional Claude Code coordinator skills for BoundedRelay adaptive Spec Kit delivery.