pezhik/skilltotal

Claude Code plugin that scans a package before the agent runs npx, npm install, pip install, uvx or claude mcp add. Malicious indicators block the install. High-risk packages need your approval. The scan runs on your machine and never executes the code or calls an LLM. Every finding cites a file and line. Also a CLI, GitHub Action and MCP server.

12Stars on the repository

4Mods indexed here, across every type

yesterdayLast push, which is what freshness is scored on

Apache-2.0Licence, which decides whether bodies are shown

Sort Relevance Recently updated Fewest tokens Security grade Repo stars Stars this week Top rated 1 mods

skilltotal

pezhik/skilltotal

Plugin Claude Code

Bundles 1 command, 1 hook · 18 tokens together

Checks each package the agent is about to install and shows a line for every install, checked or not. Denies packages with malicious indicators and asks you about high-risk ones, look-alike names and anything it could not check (refused in CI).

not rated 12 +6 changed yesterday A tokens not measured original Apache-2.0