Browse the directory

Automatically runs cargo check and clippy when Rust files are modified.

Transform Claude into a Rust specialist with deep knowledge of ownership, borrowing, error handling, async, and production systems patterns.

Framework-agnostic agent memory lifecycle skill and Rust-native CLI for explicit recall, evidence-backed memory, forgetting, audit, consolidation, DOX/Revolve sync, and local SQLite/FTS storage.

Official Rust SDK for Model Context Protocol clients and servers, published as the `rmcp` crate with tokio async runtime support, server and client features, tool macros, resources, prompts, sampling, roots, logging, completions, notifications, Streamable HTTP, child-process transports, and OAuth support.

AgentTrust stdio MCP server giving AI agents verified identity with email, instant messaging, and cloud file storage across 19 Ed25519-signed tools.

Expert MCP remote server trust review capability pack for auditing OAuth flows, transport security, tool permissions, data exfiltration risk, and vendor scope before connecting Claude Code to third-party MCP servers.

MIT-licensed DataFrame query engine written in Rust for Python, Rust, Node.js, R, and SQL workflows with lazy execution, streaming, Arrow integration, and file, database, and cloud I/O.

Source-backed rules for reviewing AI-generated code that deserializes data before merge for insecure deserialization risk, covering native serialization formats (pickle, PyYAML, Java Serializable) that can execute arbitrary code on untrusted input, safe data-interchange alternatives, and class allowlisting/integrity checks when native formats can't be avoided.

Source-backed rules for reviewing AI-generated code that binds request parameters to model/entity objects before merge for mass assignment risk, covering allowlist field binding, DTOs that exclude sensitive fields, and the framework-specific autobinding features that make this easy to introduce by default.

Verify MCP server package provenance before Claude Code installation: registry publisher match, repository ownership, release artifact checksums, maintainer history, and rollback when supply-chain signals fail review.

Source-backed agent that reviews active Claude Code sessions and configuration for security gaps, cross-references the official security guidance, and produces a ranked remediation plan covering permissions, MCP trust, prompt injection, credential handling, and hook safety.

A reusable agent prompt that reviews a Claude Code auto mode setup: whether autoMode.environment trusts the right repos, buckets, and domains, how the allow, soft_deny, and hard_deny tiers resolve, and whether $defaults is kept across settings scopes.

A reusable agent prompt that vets a Claude Code plugin or marketplace before a team installs it. It walks source trust, the plugin's Will-install list and bundled components (skills, agents, hooks, MCP servers, commands), the context-window cost, version pinning, and the user/project/local/managed install scope.

Source-backed agent that threat-models an MCP server before it is connected to Claude Code, covering trust verification, tool authority and side effects, prompt injection via tool output, network and credential exposure, and least-privilege mitigations, grounded in the official security docs.

Source-backed agent for security review of open-source pull requests, including untrusted fork boundaries, GitHub Actions permissions, secret and code scanning, dependency review, provenance signals, and maintainer-owned merge recommendations.

A practical pre-installation review workflow for Model Context Protocol servers. Inventory tools, resources, prompts, credentials, network reach, storage, and runtime permissions before connecting a server to Claude or another MCP client.

Evaluation, prompt experimentation, logging, and data platform for production AI application development.

Compile Rust, C++, or Go to WebAssembly and run it in the browser, Node.js, and serverless runtimes: wasm-bindgen JS interop, WASI for system access, the Component Model, and SIMD.

Local-first MCP server for web scraping, crawling, URL mapping, batch extraction, structured extraction, summarization, diffing, brand extraction, and optional hosted API fallback for bot-protected pages.

Local-first context-engineering MCP server and CLI that gives Claude token-efficient file reads, shell-output compression, code search, graph queries, persistent session memory, context packaging, verification tools, and dashboard-style token accounting through a single Rust binary.

Source-backed Claude agent prompt for contributing to the official vercel/next.js monorepo using its AGENTS.md guidance, pnpm workspace commands, package-filtered builds, Turbopack and Rust boundaries, mode-specific tests, PR triage rules, and secrets-safety notes.

Automatically formats code files after Claude writes or edits them using industry-standard formatters including Prettier 3.6.2+ (JavaScript/TypeScript/Web), Black or Ruff (Python), gofmt (Go), and rustfmt (Rust).

Microsoft open-source course for learning AI agents with lessons on agentic frameworks, design patterns, tool use, agentic RAG, trustworthy agents, planning, multi-agent systems, MCP/A2A/NLWeb, memory, browser use, and Microsoft Agent Framework.

Slash command that builds a chronological incident timeline from trusted sources such as GitHub Actions run metadata, deployment notes, and operator timestamps, then drafts a handoff-ready post-incident summary.

Expert capability pack for reviewing Claude Code autoMode settings blocks, trusted infrastructure prose, classifier rule overrides, and documented claude auto-mode CLI inspection before enabling permission-free auto mode.

Community reusable agent prompt for debugging Claude Code behind corporate HTTP proxies and mTLS using official network-config docs: HTTP_PROXY variables, certificate trust, downloads reachability, and remote MCP URL failures.

Community reusable agent prompt for reviewing new MCP server adoption in Claude Code using official security documentation: trusted providers, permissions configuration, trust verification, and settings checked into source control.

Expert Claude Code enterprise network configuration capability pack for auditing proxy settings, custom CA trust, mTLS client certificates, URL allowlists, and provider-specific routing in restricted corporate networks.

Read-only Claude Code PostToolUse hook that runs Hadolint diagnostics after Claude writes or edits Dockerfile-like files, surfacing Dockerfile best practice, inline shell, trusted registry, label, and configuration findings without rewriting files.

Expert SLSA provenance review skill for checking source, build, artifact, and trust evidence before accepting content or package submissions.