Install payload
Install payload is broadly covered in current results.
92% (11/12)
2 trusted · 14 review in this set — compare to see which signals differ.
16 results in this view
3 trust signals differ in this sample: Package trust, Source provenance, Submitter
Signals differ on Package trust, Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
Install payload
Install payload is broadly covered in current results.
92% (11/12)
Adoption queue
1/16 visible results are in hold tier and need mitigation before adoption.
1 blockers: Metadata review
70/100
Request metadata review from maintainers or internal owners.
skills/bun-runtime-modern-javascript · trust trusted · confidence 83%
1 blockers: Metadata review
70/100
Request metadata review from maintainers or internal owners.
skills/svelte-sveltekit-fullstack · trust trusted · confidence 83%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
rules/ai-generated-prototype-pollution-review-rules · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
rules/ai-generated-xss-review-rules · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/auto-code-formatter-hook · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/biome-check-hook · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/codebase-migration-refactoring-agent · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/firefox-devtools-mcp · trust review · confidence 67%
Decision confidence
1/16 results are low-confidence and need review before adoption.
Confident candidate for staged adoption.
74/100
skills/bun-runtime-modern-javascript · trust trusted
Confident candidate for staged adoption.
74/100
skills/svelte-sveltekit-fullstack · trust trusted
Address Metadata review, Package integrity before broader rollout.
54/100
rules/ai-generated-prototype-pollution-review-rules · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
rules/ai-generated-xss-review-rules · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/auto-code-formatter-hook · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/biome-check-hook · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
agents/codebase-migration-refactoring-agent · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/firefox-devtools-mcp · trust review
Freshness distribution
Median age 52 days; 9 fresh, 3 aging or stale of 12 scanned.
Theme distribution
68 distinct themes with no dominant one. Most common: javascript, typescript, ai-agents.
68 distinct themes across 16 scanned
Build JavaScript and TypeScript apps with Bun, an all-in-one toolchain that replaces Node.js, npm, a bundler, and a test runner with one fast binary that executes TypeScript directly.
Official GreenSock GSAP AI Skills for coding agents that need correct GSAP tweens, timelines, ScrollTrigger, React cleanup, plugins, utilities, framework lifecycle guidance, and animation performance patterns.
Official JavaScript and TypeScript framework for building multi-agent workflows with agents, tools, handoffs, guardrails, sessions, tracing, realtime voice agents, MCP tools, hosted tools, and sandbox agents.
Open-source infrastructure for running AI-generated code in secure, isolated cloud sandboxes, with Python and JavaScript SDKs, a Code Interpreter package, and self-hosting options.
Expert frontend developer specializing in modern JavaScript frameworks, UI/UX implementation, and performance optimization
Official TypeScript SDK for Model Context Protocol clients and servers, with the production v1 `@modelcontextprotocol/sdk` package, active v2 server and client package work, Node.js, Bun, and Deno support, transports, OAuth helpers, tools, resources, prompts, examples, and API documentation.
Source-backed rules for reviewing AI-generated JavaScript/TypeScript code before merge for prototype pollution risk, covering unsafe recursive merge/clone/assign helpers on untrusted input, proto and constructor-prototype key handling, and safer alternatives like Map, Set, and Object.create(null).
Claude Code statusline that reads Istanbul JSON summary output and compares current line coverage with a local baseline percentage.
Build full-stack web apps with Svelte and SvelteKit. Minimal runtime overhead, reactive components, and server-side rendering. The most admired frontend framework of 2025. Svelte compiles components to vanilla JavaScript at build time, resulting in zero runtime overhead and exceptional performance.
Apache-2.0 sandbox runtime and SDK suite for AI agents, with Python, Java/Kotlin, JavaScript/TypeScript, C#/.NET, and Go SDKs, Docker and Kubernetes runtimes, OpenSandbox MCP server, CLI, code interpreter, filesystem and command tools, network policy, credential vault, and secure container runtime guidance.
Mozilla-maintained MCP server for automating Firefox through WebDriver BiDi, with tools for page navigation, snapshots, UID-based input, screenshots, network requests, console messages, dialogs, history, viewport changes, optional JavaScript evaluation, privileged Firefox contexts, preferences, and WebExtension.
MCP server for running AppleScript and JavaScript for Automation on macOS, with a searchable knowledge base of automation recipes for apps, files, browsers, system settings, Terminal, and productivity workflows.
Read-only Claude Code PostToolUse hook that runs Biome's formatter, linter, and import-sorting checks on edited JavaScript, TypeScript, JSON, CSS, and GraphQL files without auto-writing changes.
Source-backed rules for reviewing AI-generated code that renders untrusted data into HTML, JavaScript, URLs, or CSS before merge for cross-site scripting risk, covering context-correct output encoding, dangerous DOM sinks, HTML sanitization, and Content-Security-Policy as defense in depth.
A Claude Code agent prompt for behavior-preserving codebase migrations and refactoring. It plans framework upgrades (React, Next.js, TypeScript, ESLint), applies named refactoring patterns, modernizes legacy JavaScript, and works incrementally on a git branch with test validation between steps.
Automatically formats code files after Claude writes or edits them using industry-standard formatters including Prettier 3.6.2+ (JavaScript/TypeScript/Web), Black or Ruff (Python), gofmt (Go), and rustfmt (Rust).