Tools

Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.

Scans your codebase and recommends the best hooks, skills, MCP servers, subagents and slash commands by category. Analysis only, no file changes; a quick way to set up Claude Code for a project. Official Anthropic plugin.

Anthropic's official plugin marketplace, built into Claude Code by default, with 300+ official and partner plugins for development, security, design and office collaboration. Browse and install with /plugin.

Modernizes legacy codebases: assesses the current state, maps dependencies, extracts business rules and plans the migration, then upgrades or rewrites, running old and new code on the same inputs to prove identical behavior. Official Anthropic plugin.

Wraps Microsoft's Playwright MCP so agents can drive a real browser to navigate, click, fill forms and take screenshots for end-to-end tests and page checks. In Anthropic's official marketplace; needs Node.js.

Implements the Ralph Wiggum loop with a Stop hook: feeds Claude the same prompt repeatedly so it keeps iterating on its previous file changes until it outputs a completion marker or hits the iteration limit. Official Anthropic plugin.

Connects Claude Code to a TypeScript/JavaScript language server for go-to-definition, find references and live type error checking. Install typescript-language-server globally first. Official Anthropic plugin.

Simplifies and tidies recently changed code without changing behavior: reduces nesting and redundancy, improves naming and follows the project conventions in CLAUDE.md. Official Anthropic plugin.

Connects Claude Code to gopls, Go's official language server, for code intelligence, refactoring and analysis. Install gopls with go install and add Go's bin directory to PATH first. Official Anthropic plugin.

Lightweight multi-protocol command-line downloader that fetches in parallel segments from multiple sources over HTTP(S), FTP, SFTP, BitTorrent and Metalink. Resumes downloads, reads URLs in bulk from text files and offers a JSON-RPC interface for scripts or agents.

Command-line tool for transferring data by URL over 20+ protocols including HTTP(S), FTP, SFTP, WebSocket and MQTT; a staple for agents calling APIs and downloading files. Preinstalled on macOS and most Linux distributions.

Official daisyUI skill: the agent uses daisyUI 5 component classes, semantic colors and themes whenever it writes HTML or JSX, picking components by intended function, reading their guides and following their exact structure. Includes install, usage, config and color guides. Built on Tailwind CSS 4.

Color rules for daisyUI 5: explains semantic names such as primary, base-100 and error with their -content foregrounds, says to prefer them over fixed Tailwind colors and never add dark: to them, and shows how to enable, create and override themes. Part of the official daisyUI skill.

Configuration reference for daisyUI 5: how to set enabled themes, the default and prefers-dark theme, root selector, included or excluded modules, class prefix and console logs in the CSS plugin block, with full examples. Part of the official daisyUI skill.

Usage rules for daisyUI 5: combine component, part and modifier classes, add Tailwind utilities when needed and the ! override only as a last resort, use the default variant unless asked, make layouts responsive, and follow Refactoring UI for design choices. Part of the official daisyUI skill.

Installation guide for daisyUI 5: requires Tailwind CSS 4 without tailwind.config.js, installs via npm and adds the plugin in CSS, covers the CDN setup, and links framework guides for Next.js, Vue, SvelteKit, Laravel and more. Part of the official daisyUI skill.

Release automation for iOS and Android: lanes orchestrate builds, code signing management, screenshot generation and uploads to the App Store and Google Play, and agents can call a project's existing lanes directly.

Orchestrates multi-agent teams using Claude Code's experimental Agent Teams feature: parallel multi-angle code review, competing-hypothesis debugging and feature work split by file ownership. Enable CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS first.

Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice.

Business analytics plugin from the wshobson/agents marketplace: KPI dashboard design and data storytelling skills plus a business analyst subagent to choose metrics, plan dashboard layouts and turn data into reports executives or investors understand. Methods and templates only; no data connections.

MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills.

Plugin for building LLM apps: LangGraph agents with memory and tool use, hybrid-search RAG, vector index tuning, prompt optimization and LLM evaluation. Includes 3 subagents and 8 skills.

Backend development plugin with 8 subagents for backend architecture, GraphQL, event sourcing, Temporal, TDD orchestration and more, a feature development command, and 9 skills on API design, microservices, CQRS, sagas and more. Part of the wshobson/agents marketplace.

Python 3.12+ development plugin with python-pro, django-pro and fastapi-pro subagents, a project scaffolding command, and 16 skills on async, type safety, testing, packaging, uv and more. Part of the wshobson/agents marketplace.