Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add T0mSIlver/localvoxtralnpx agentmods add plugins/t0msilver/localvoxtral/localvoxtral-remotegit clone --depth 1 https://github.com/T0mSIlver/localvoxtralWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/t0msilver/localvoxtral/localvoxtral-remote)<a href="https://agentmods.dev/plugins/t0msilver/localvoxtral/localvoxtral-remote"><img src="https://agentmods.dev/badge/plugins/t0msilver/localvoxtral/localvoxtral-remote.svg" alt="Measured on agentmods" height="20"></a>Grade A, and why
localvoxtral-remote scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
"description": "Publishes Claude Code session context from a REMOTE host to localvoxtral on your Mac, over an SSH RemoteForward tunnel. Command hooks running a bundled POSIX-sh shim that POSTs via curl — needs only sh an What it actually says
{
"name": "localvoxtral-remote",
"description": "Publishes Claude Code session context from a REMOTE host to localvoxtral on your Mac, over an SSH RemoteForward tunnel. Command hooks running a bundled POSIX-sh shim that POSTs via curl — needs only sh and curl on the remote host, and fails open silently when either is missing.",
"version": "1.4.0",
"author": {
"name": "localvoxtral"
},
"homepage": "https://github.com/T0mSIlver/localvoxtral",
"license": "MIT",
"keywords": [
"dictation",
"context",
"voice",
"ssh",
"remote"
],
"userConfig": {
"token": {
"type": "string",
"sensitive": true,
"title": "localvoxtral host token",
"description": "Per-host token issued by localvoxtral on your Mac (Enroll a remote host). It authorizes remote context only and can never make localvoxtral read a local file. Revoke or rotate it in the app at any time.",
"default": ""
},
"port": {
"type": "string",
"sensitive": false,
"title": "Tunnel port on this host",
"description": "Loopback port on THIS host that localvoxtral's SSH RemoteForward binds — the app allocates one per Mac so two Macs enrolled here can never fight over the same bind. Copy the value from the enrollment plan; leaving it empty falls back to the legacy shared port 8473.",
"default": ""
}
}
}
What it installs
The manifest is a name and a version. 5 hooks travel with it, and installing the plugin installs all of them. Each is measured on its own page, and each can be installed alone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 34 lines scan A b49eb24aecad
localvoxtral-remote is a plugin published in the GitHub repository T0mSIlver/localvoxtral (54 stars, last pushed 4d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
cadence-code
Configurable local speech and transcription for natural Claude Code conversations on Apple Silicon.
mlx-vlm-skills
Skills for MLX-VLM: command-line and server inference, convert/quantize, adding new models, benchmarking, contributing, cached-model listing, and reproducible GitHub issues.
memo
Local MCP memory for AI agents — MLX on Apple Silicon or CPU sentence-transformers on Linux/Ubuntu, sqlite-vec store, markdown-on-disk in your Obsidian vault. Zero Ollama, zero cloud APIs.
claude-mlx-tts
Voice-cloned TTS notifications using MLX Chatterbox Turbo. Clone any voice from a 20-second sample.
media
System-wide now-playing control for macOS — see and control whatever is playing (Spotify, Apple Music, browsers) right from Claude Code. Zero dependencies, no OAuth, no app lock-in.
xcode-cli
Xcode CLI — Build, test, run, and manage Xcode projects from Claude Code.