wshobson-threat-mitigation-mapping

Agentic Plugin Marketplace

Production-ready agentic workflow building blocks: 92 plugins, 199 agents, 162 skills, 106 commands — built for Claude Code and consumed natively by OpenAI Codex CLI, Cursor, OpenCode, Gemini CLI, and GitHub Copilot from a single Markdown source.

[!NOTE] One source-of-truth (plugins/), five harnesses. Each harness gets idiomatic, harness-native artifacts — not lowest-common-denominator translations. See docs/harnesses.md for the capability matrix.

Quick start

Pick your harness:

Claude Code

/plugin marketplace add wshobson/agents
/plugin install python-development          # or any of 92 plugins

→ Full Claude Code setup, troubleshooting, and plugin catalog

Codex CLI · Cursor · OpenCode · Gemini CLI · Copilot

Codex and Cursor install natively from the committed registries (which point at the source plugins/):

npx codex-marketplace add wshobson/agents        # Codex; then install individual plugins
# Cursor: add the marketplace, then `/plugin install <name>` (reads .cursor-plugin/ + source)

Gemini and OpenCode install via clone + generate (the transformed trees are gitignored):

gh repo clone wshobson/agents ~/agents && cd ~/agents
make generate HARNESS=gemini && gemini extensions install .   # Gemini
make install-opencode                                          # OpenCode (runs generate + symlinks)

Setup details and per-harness gotchas: docs/harnesses.md. Gemini-specific setup: GEMINI.md (also auto-loaded by Gemini CLI).

What's inside

	Count	What it is
Plugins	92	Granular, single-purpose installable units (88 local + 4 external via git-subdir)
Agents	199	Domain experts (architecture, languages, infra, security, data, ML, docs, business, SEO)
Skills	162	Modular knowledge packages with progressive disclosure (load when activated)
Commands	106	Slash commands: scaffolding, security scans, test gen, infrastructure setup
Orchestrators	16	Multi-agent coordination workflows (full-stack, security, ML, incident response)

Browse the catalog: docs/plugins.md · docs/agents.md · docs/agent-skills.md

How it works

Each plugin is isolated and composable: agents, commands, and skills are auto-discovered from directory structure. Installing a plugin loads only its components into context — not the whole marketplace.

plugins/python-development/
├── .claude-plugin/plugin.json
├── agents/             # 3 Python agents (python-pro, django-pro, fastapi-pro)
├── commands/           # 1 scaffolding command
└── skills/             # 16 specialized skills (async, testing, packaging, …)

Tiered model strategy:

Tier	Model	Use
0	Fable 5	Longest-horizon autonomous work — large migrations, multi-hour runs (opt-in, premium cost)
1	Opus	Architecture, security, code review, production-critical
2	inherit	User-chosen — backend, frontend, AI/ML, specialized
3	Sonnet	Docs, testing, debugging, API references
4	Haiku	Fast operational tasks, SEO, deployment, content

→ Model configuration details

Multi-harness support

This marketplace ships to five agentic harnesses from one Markdown source. Each adapter emits harness-native artifacts (not lowest-common-denominator translations):

Harness	Generates	Notes
Claude Code	(source-of-truth)	Native marketplace.json + plugins/
Codex CLI	.agents/plugins/marketplace.json + plugins/*/.codex-plugin/plugin.json (committed); .codex/skills/, .codex/agents/ (gitignored)	8 KB skill cap respected; commands → skills
Cursor	.cursor-plugin/, .cursor/rules/	Thin marketplace + curated rules; reuses .claude/
OpenCode	.opencode/agents/, .opencode/commands/, .opencode/skills/	permission: block from tools: allowlist; OpenCode-safe skill names
Gemini CLI	skills/, agents/, commands/ (TOML)	Native skills + subagents (April 2026 spec)
Copilot	.copilot/agents/, .copilot/skills/, .copilot/commands/	Markdown agent profiles + SKILL.md skills + commands-as-skills; model maps to native Claude models