10 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
mcptoonactiveing123/mcptoon1
uploadsbuildinternet/uploads1Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplacePersistent project planning files with lifecycle hooks that inject selected plan context. Automatic recovery uses project files only. Explicit catchup modes may read same-project local session records to emit aggregate counts or bounded nonce-framed excerpts. Optional gated mode can request continuation on capable hosts and never runs commands declared in Markdown. No network upload path. Installs across 60+ agents.
Compact the current conversation into a handoff document for another agent to pick up. Configurable save location, redaction enforcement, SessionStart auto-load + SessionEnd reminder, self-check fidelity script, --refresh flag, mtime-guarded cleanup. Inspired by Matt Pocock's handoff (MIT).
A four-tier memory ladder for Claude Code where promotion is earned by recurrence, not asserted by confidence. L0 raw transcripts are never injected; L1 candidate atoms are gitignored and recalled on lexical relevance per prompt; L2 project context loads each session start; L3 stable persona is always loaded. L1 to L2 needs three distinct sessions spanning two distinct calendar days (a stated claim needs two; a verified claim is the only single-observation path); L2 to L3 needs two projects and thirty days. Two gates refuse rather than guess: a claim altered by the redaction pass never promotes on evidence alone, and a contradicted claim freezes until a human resolves it. Three hooks run the loop unattended and every one fails open. Nothing reaches a committed CLAUDE.md without an explicit human adopt. Ships 5 stdlib scripts, 3 hooks, a cs-memory-curator agent, /cs-memory, a JSON schema, and a 69-check validator. Concept from TencentCloud/TencentDB-Agent-Memory (MIT); no upstream code
PreToolUse security reminder hook for Claude Code. Catches 12 common security anti-patterns in Edit/Write/MultiEdit operations BEFORE they happen — command injection (exec, os.system, subprocess shell=True), XSS (innerHTML, dangerouslySetInnerHTML, document.write), SQL injection (f-string queries, .format), unsafe deserialization (pickle, yaml.unsafe_load), code injection (eval, new Function), and GitHub Actions workflow injection. Session-state caching prevents duplicate warnings; 30-day auto-cleanup. Disable per-session with ENABLE_SECURITY_REMINDER=0. Ported from David Dworken at Anthropic.
Expert database guidance for the AWS database portfolio. Design schemas, execute queries, handle migrations, and choose the right database for your workload.
Hook-based security firewall and supply-chain verifier for Claude Code skills, MCPs and agents. Gates destructive git, secret and credential reads, exfiltration, download-and-run, self-tampering and Solana on-chain actions; grades and pins skill packs.
MCP tool-catalog compression for Claude Code. Compresses the tool discovery payload from 71,929 to 581 tokens (-99.2%). Auto-installs the zero-dependency mcptoon CLI (/mcptoon-setup), wires the serve bridge, and teaches the agent when to compress. MCP 2026-07-28 stateless-first bridge included.
mcpGet screenshots, GIFs, recordings, and files into GitHub PRs and issues via uploads.sh. Bundles the github-screenshots, annotate-screenshots, and uploads-cli skills, the hosted MCP server, and a mod that shows staged screenshots above the prompt and attaches them when gh pr create runs.
Testing workflow skill for high-value test discovery, strategy selection, focused test implementation, realistic workload generation, strict test review, and suite health diagnostics.
A session-strain meter for long agent sessions. Counts how loaded a single conversation has become and makes the agent report it on its own, on a schedule it cannot quietly skip, so you find out that a session should be wrapped before its answers start degrading. Reads the real context size on hosts that expose one, and says so plainly when it cannot.
