package-bouncer 0.1.0
Checks every package install Claude runs (npm, bun, pnpm, yarn, pip, uv, cargo, go, gem, composer) and stops made-up names, brand-new packages, look-alike names and versions with known security holes.
ychampionInstall
/plugin marketplace add ychampion/ystack /plugin install package-bouncer@ystack
Run both lines inside Claude Code.
Hooks into
- Tool calls
- Slash commands
Also in ychampion/ystack
-
iron-rules
0.2.1
House rules on shell calls, each off until you turn it on in /config: bun instead of npm, your git commit identity, no AI attribution in commits and PRs. Always blocks nested Windows shell deletes, whose quoting breaks.
ychampion in Guardrails, updated
1
-
verify
0.2.0
Verify gate for the main loop and every subagent: no success claim without a real check. Optional live runner of only the tests related to each edit (opt-in: it runs the project's own test scripts).
ychampion in Panes, updated
1
-
brief-linter
0.1.0
Appends the missing standing requirements (real check, long output to a file, Assumptions I made, loop cap, decision inbox) to every subagent brief.
ychampion in Notifications, updated
1
-
assumptions-ledger
0.3.0
Logs every subagent's 'Assumptions I made' and hands them to the main Claude to triage; only product or business calls reach the owner, via the decision inbox with context.
ychampion in Panes, updated
1
-
decision-inbox
0.3.0
A non-blocking ask tool for owner decisions from any session or subagent, one inbox pane to answer them in a batch, answers delivered back to whoever asked.
ychampion in Panes, updated
1
-
spec-sharpener
0.1.0
On a large, open build request, has the main model ask 3-4 pointed questions before building (no side model, ~80 tokens). /sharpen on|off.
ychampion in Prompt, updated
1
-
review-panel
0.1.1
/review-panel: picks the specialist reviewers from the diff and has the orchestrator dispatch them on Opus in parallel, then verify findings. On demand only.
ychampion in Commands, updated
1
-
context-meter
0.4.1
Keeps long sessions cheap. /handoff writes a handoff in one turn and swaps the conversation in place for it (no /clear; background agents keep reporting). Between turns it acts by itself: hands off after a push or merge on a big context or when a session is running on its own, and before the prom...
ychampion in Usage & cost, updated
1
-
memory-recall
0.1.0
When a tool call fails, matches the error against memory notes and skills and points the model at the matching note (once per note per session).
ychampion in Guardrails, updated
1
-
auto-claudeception
0.1.0
After a long debugging turn or a 'turns out' discovery, toasts and pre-fills /claudeception (Tab to run). Never runs it by itself.
ychampion in Guardrails, updated
1
More guardrails mods
-
blast-radius
0.1.0
See what a risky command would change before it runs.
deepseek-ai in Guardrails, updated
279.9k
-
agents-md
0.1.0
AGENTS.md as project instructions, by one option. Under claude-md-or-agents-md a project with no instruction files of its own gets its AGENTS.md files instead: a prompt.context hook asks $.fs.ancestors for every AGENTS.md and .claude/AGENTS.md from the filesystem root down to the working director...
Anthropic in Guardrails, updated
155.5k
-
claude-mem
15.12.1
mod + skill
Persistent memory for AI coding agents: the next session starts where the last one left off. Works with Claude Code, Codex, Cursor, OpenCode and more.
Alex Newman in Guardrails, updated
114.9k
-
ruflo-rvf
0.3.7
mod + skill
RVF format for portable agent memory, session persistence, and cross-platform transfer. As a mod (ADR-445): a write guard that keeps secrets out of memory, sessions and transfers, /rvf-mod, and a status file the console shows
ruvnet in Guardrails, updated
81.6k
-
openviking-memory
0.7.22
mod + skill
Long-term semantic memory for Claude Code, powered by OpenViking. Auto-recall relevant memories at session start and capture important information during conversations.
OpenViking in Guardrails, updated
42.1k