Help us improve
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
By jaeyeom
Analyze semgrep findings, fix real issues, and suppress false positives with proper nosemgrep comments
npx claudepluginhub jaeyeom/claude-toolbox --plugin semgrep-reviewA curated marketplace of Claude Code plugins for building a reliable AI-assisted development workflow.
claude-toolbox is opinionated about a few things:
These plugins work together to create a reliable development workflow:
┌─────────────────────────────────────────────────────────┐
│ gabyx-githooks-setup │
│ Shared Git hooks run automatically on commit and push │
│ │ │
│ ▼ │
│ makefile-workflow │
│ Hooks call `make check` - format, lint, test, build │
│ │ │ │
│ ▼ ▼ │
│ *-dev (e.g. go-dev) ci-workflow │
│ Language-specific CI calls the same │
│ conventions the Makefile targets │
│ checks enforce via GitHub Actions │
└─────────────────────────────────────────────────────────┘
Add the task-management layer on top:
next-action finds the next item worth doing.todo tracks local work.gh-issue-resolver can take an issue from investigation through commit.Install the marketplace and a practical starter bundle:
/plugin marketplace add jaeyeom/claude-toolbox
/plugin install git-guardrails
/plugin install next-action
/plugin install go-dev
/plugin install makefile-workflow
/plugin install gabyx-githooks-setup
/plugin install ci-workflow
That gives you:
Start here based on the question you are trying to answer:
Workflow:
Task management:
Jira:
Safety and security:
Other:
Each plugin directory contains its own README.md, which is the source of truth
for installation details, configuration, and examples.
The docs/claude/ directory mirrors Claude Code reference material used by this
repo:
MIT
Share bugs, ideas, or general feedback.
Based on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Automated code review, security scanning, and quality enforcement
Runs code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on uncommitted changes, branch diffs, or specific commits. Bundles Codex's built-in MCP server for direct tool access.
Perform security audit on codebase
Security scanning, dependency CVE audits, and exposure-aware risk prioritization.
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.
Go development skill with idiomatic patterns, testing, and build system detection
Resolve GitHub issues using the gh CLI with dependency checking, self-assignment, codebase investigation, and automatic commits
Create language-specific development skills by mining PR reviews, codebase conventions, and team documentation
Makefile workflow skill for consistent build, lint, test, and check targets across projects
GitHub Actions CI workflow generation and failure diagnosis — generate workflows that mirror Makefile targets and diagnose CI failures with targeted fixes
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claim