Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/rjmurillo/ai-agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/rjmurillo/ai-agents/claude)<a href="https://agentmods.dev/plugins/rjmurillo/ai-agents/claude"><img src="https://agentmods.dev/badge/plugins/rjmurillo/ai-agents/claude/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/rjmurillo/ai-agents/claude"><img src="https://agentmods.dev/badge/plugins/rjmurillo/ai-agents/claude.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
project-toolkit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "project-toolkit",
"description": "Complete project development toolkit: agents, slash commands, lifecycle hooks, and reusable skills for Claude Code workflows",
"author": {
"name": "rjmurillo"
}
}
What it installs
The manifest is a name and a version. 125 skills, 25 commands, 33 agents, 5 hooks travel with it, and installing the plugin installs all of them — 13,878 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill ai-agents-generation-and-release A 105 tokens
- Skill github A 90 tokens
- Skill pr-review A 102 tokens
- Skill ship A 80 tokens
- Skill agent-harness-reference A 122 tokens
- Skill ai-agents-research-methodology A 118 tokens
- Skill autoplan A 77 tokens
- Skill context-optimizer A 117 tokens
- Skill cva-analysis A 58 tokens
- Skill fix-markdown-fences A 72 tokens
- Skill pipeline-validator A 82 tokens
- Skill adr-generator A 170 tokens
- Skill adr-review A 136 tokens
- Skill ai-agents-empirical-probe-toolkit A 119 tokens
- Skill buy-vs-build-framework A 71 tokens
- Skill chaos-experiment A 84 tokens
- Skill code-qualities-assessment A 139 tokens
- Skill cynefin-classifier A 58 tokens
- Skill dx-review A 130 tokens
- Skill git-advanced-workflows A 90 tokens
- Skill memory A 99 tokens
- Skill memory-consolidate A 137 tokens
- Skill merge-resolver A 93 tokens
- Skill metrics A 63 tokens
- Skill pr-comment-responder A 131 tokens
- Skill programming-advisor A 113 tokens
- Skill prose-self-check A 104 tokens
- Skill push-pr A 81 tokens
- Skill research A 92 tokens
- Skill skillforge A 152 tokens
- Skill skillopt A 103 tokens
- Skill spec-generator A 99 tokens
- Skill style-enforcement A 103 tokens
- Skill threat-modeling A 69 tokens
- Skill windows-image-updater A 63 tokens
- Skill world-model-diagnostic A 94 tokens
- Skill ai-agents-portability-campaign A 104 tokens
- Skill codeql-scan A 36 tokens
- Skill maintainer-review A 73 tokens
- Skill memory-enhancement A 80 tokens
- Skill planner A 147 tokens
- Skill pre-mortem A 97 tokens
- Skill requirements-interview A 90 tokens
- Skill research-and-incorporate A 111 tokens
- Skill security-scan A 77 tokens
- Skill skill-bootstrap A 93 tokens
- Skill slashcommandcreator A 51 tokens
- Skill slo-designer A 56 tokens
- Skill validation-authority A 36 tokens
- Skill analysis-provenance A 48 tokens
- Skill analyze A 107 tokens
- Skill api-doc-authoring A 55 tokens
- Skill benchmark-models A 104 tokens
- Skill book-to-skill A 99 tokens
- Skill chestertons-fence A 80 tokens
- Skill curating-memories A 91 tokens
- Skill decision-critic A 70 tokens
- Skill decision-question A 78 tokens
- Skill destructive-change-safety A 90 tokens
- Skill doc-accuracy A 84 tokens
- Skill domain-design A 82 tokens
- Skill memory-gate A 109 tokens
- Skill memory-maintenance A 90 tokens
- Skill memory-reflexion A 98 tokens
- Skill observability A 47 tokens
- Skill panning-for-gold A 93 tokens
- Skill prompt-engineer A 63 tokens
- Skill repository-completion-proof A 34 tokens
- Skill repository-consumer-proof A 33 tokens
- Skill repository-pr-recovery A 34 tokens
- Skill serena-code-architecture A 91 tokens
- Skill using-forgetful-memory A 117 tokens
- Skill using-serena-symbols A 66 tokens
- Skill validate-pr-description A 84 tokens
- Skill avoiding-manufactured-work A 88 tokens
- Skill context-gather A 94 tokens
- Skill context-hub-setup A 79 tokens
- Skill encode-repo-serena A 97 tokens
- Skill evidence-provenance A 112 tokens
- Skill exploring-knowledge-graph A 47 tokens
- Skill golden-principles A 54 tokens
- Skill memory-documentary A 98 tokens
- Skill memory-search A 82 tokens
- Skill pr-quality-analyst A 86 tokens
- Skill pr-quality-devops A 88 tokens
- Skill pr-quality-qa A 91 tokens
- Skill pr-quality-roadmap A 86 tokens
- Skill pr-quality-security A 89 tokens
- Skill quality-grades A 108 tokens
- Skill security-detection A 63 tokens
- Skill stuck-detection A 81 tokens
- Skill execution-plans A 71 tokens
- Skill steering-matcher A 82 tokens
- Skill taste-lints A 47 tokens
- Skill ai-agents-architecture-contract A 111 tokens
- Skill ai-agents-debugging-playbook A 124 tokens
- Skill review A 97 tokens
- Skill ai-agents-config-catalog A 114 tokens
- Skill reviewer-findings A 122 tokens
- Skill ai-agents-change-control A 119 tokens
- Skill ai-agents-failure-archaeology A 115 tokens
- Skill plan A 89 tokens
- Skill retrospective A 87 tokens
- Skill security-review A 103 tokens
- Skill skillify A 51 tokens
- Skill business-strategy A 104 tokens
- Skill pr-quality-all A 96 tokens
- Skill work-operating-model A 102 tokens
- Skill negotiation A 78 tokens
- Skill reflect A 95 tokens
- Skill codebase-documenter A 45 tokens
- Skill retro A 70 tokens
- Skill software-engineering-library A 69 tokens
- Skill ai-agents-docs-of-record B 113 tokens
- Skill ai-agents-external-claims B 133 tokens
- Skill ai-agents-build-and-env B 117 tokens
- Skill github-url-intercept B 135 tokens
- Skill ai-agents-research-frontier B 111 tokens
- Skill ai-agents-diagnostics-toolkit B 109 tokens
- Skill checkpoint B 91 tokens
- Skill pr-autofix C 104 tokens
- Skill ai-agents-validation-and-qa C 126 tokens
- Skill sync C 96 tokens
- Skill pr-quality-architect A 87 tokens
- Skill orphan-ref-validator E 90 tokens
- Command ship A 19 tokens
- Command research A 15 tokens
- Command context-hub-setup A 27 tokens
- Command memory-explore A 24 tokens
- Command memory-search A 24 tokens
- Command memory-list A 21 tokens
- Command validate-pr-description A 22 tokens
- Command analyst A 23 tokens
- Command spec A 16 tokens
- Command all A 35 tokens
- Command plan A 23 tokens
- Command push-pr A 8 tokens
- Command retro A 16 tokens
- Command checkpoint B 31 tokens
- Command CLAUDE A 0 tokens
- Command pr-autofix C 39 tokens
- Command test C 31 tokens
- Command sync C 41 tokens
- Command build C 22 tokens
- Command memory-save A 19 tokens
- Command qa A 23 tokens
- Command roadmap A 23 tokens
- Command security A 31 tokens
- Command architect A 27 tokens
- Command devops A 24 tokens
- Agent pr-comment-responder A 59 tokens
- Agent retrospective A 62 tokens
- Agent orchestrator A 63 tokens
- Agent qa A 56 tokens
- Agent security A 47 tokens
- Agent architect A 61 tokens
- Agent devops A 63 tokens
- Agent merge-resolver A 41 tokens
- Agent AGENTS A 0 tokens
- Agent high-level-advisor A 62 tokens
- Agent independent-thinker A 57 tokens
- Agent task-decomposer A 84 tokens
- Agent backlog-generator A 63 tokens
- Agent issue-feature-review A 39 tokens
- Agent negotiation A 63 tokens
- Agent skillbook A 58 tokens
- Agent code-simplifier A 77 tokens
- Agent comment-analyzer A 60 tokens
- Agent dependency-auditor A 58 tokens
- Agent milestone-planner A 86 tokens
- Agent pr-test-analyzer A 46 tokens
- Agent roadmap A 64 tokens
- Agent quality-auditor A 103 tokens
- Agent type-design-analyzer A 69 tokens
- Agent silent-failure-hunter A 64 tokens
- Agent code-reviewer A 70 tokens
- Agent explainer A 59 tokens
- Agent debug A 31 tokens
- Agent janitor A 22 tokens
- Agent CLAUDE A 0 tokens
- Agent implementer C 91 tokens
- Agent critic C 99 tokens
- Agent analyst D 57 tokens
- Hook SessionStart A not measured
- Hook PreCompact A not measured
- Hook SessionEnd A not measured
- Hook Stop A not measured
- Hook UserPromptSubmit A not measured
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 8 lines scan A 62641fb0388b
project-toolkit is a plugin published in the GitHub repository rjmurillo/ai-agents (48 stars, last pushed today), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
agentic-foundry marketplace
Governed, spec-driven delivery for agent-built software: operator-authorized acceptance contracts, an honestly-tiered merge floor on your own branch protection + CI, deploy-once certification, and a citation-graph MCP.
librechat-core
Essential LibreChat admin skills: YAML config, agents, troubleshooting.
humanizer
Rewrite AI-sounding text so it reads like the writer without changing what it says.
nextjs
Official Next.js skills: adopt and optimize Cache Components, adopt Partial Prefetching, and verify runtime behavior against a running dev server.
claude-plugins-official marketplace
Directory of popular Claude Code extensions including development tools, productivity plugins, and MCP integrations.
themes-example
themes-example. An open-source AI agent that brings the power of Gemini directly into your terminal.