Krypton — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Krypton (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Current version: 0.2.0
Stop AI agents from shipping plausible wrong work.
Krypton is the goal-based planning and proof gate for running Claude Code, Codex, and other AI coding agents against production-grade codebases.
The failure mode Krypton is built for is not bad syntax. It is the right-looking feature that compiles while living on the wrong layer, inventing a second source of truth, skipping cutover, or claiming success without proof from the real path.
Krypton forces the plan before the code:
Built for /goals, equivalent goal-based agent workflows, Claude Code skills/plugins, Codex skills, and operators who need agent speed without letting the codebase rot.
Modern agents can create weeks of architectural debt in one enthusiastic session. Krypton turns "build this" into an operational contract before the agent touches code:
That contract is what lets an operator keep using agents on production systems without letting the codebase become a pile of current-looking alternatives.
/goalsKrypton is best used with /goals or any equivalent goal-based agent workflow. It is not meant to be a one-shot "please implement this" prompt.
The planning session creates the durable handoff:
docs/goals/<goal-slug>/PLAN.md
docs/goals/<goal-slug>/GOAL.md
docs/goals/<goal-slug>/EVIDENCE.mdPLAN.md is the source plan. GOAL.md is the compact /goal prompt. EVIDENCE.md is where execution records the actual proof from the real command, artifact, payload, browser state, trace, or operator-visible result. Start the execution session with the GOAL prompt, then load krypton-execution so the main agent preserves the plan's ownership, cutover, review, and evidence gates.
If your harness does not have /goals, paste the contents of GOAL.md into a fresh Codex or Claude session. The shape still works.
Use the open skills CLI when you want Krypton installed into supported agent skill directories:
Codex only:
npx --yes skills add jturntdev/krypton --skill '*' --agent codex --copy -yClaude Code only:
npx --yes skills add jturntdev/krypton --skill '*' --agent claude-code --copy -yThat installs every Krypton skill for the named agent only. If you want Codex, Claude Code, OpenCode, or another agent together, run the command without --agent ... and use the interactive selector:
npx --yes skills add jturntdev/kryptonSee the package page:
https://skills.sh/jturntdev/kryptonThis repo ships a Codex marketplace file at .agents/plugins/marketplace.json. For Codex clients that support repo marketplaces:
codex plugin marketplace add \
"https://github.com/jturntdev/krypton.git" \
--ref "main" \
--sparse ".agents/plugins" \
--sparse ".codex-plugin" \
--sparse "assets" \
--sparse "skills"
codex plugin install krypton --source kryptonUse the plugin route when you want Claude Code to manage Krypton as a plugin:
/plugin marketplace add jturntdev/krypton
/plugin install krypton@krypton-dev
/reload-pluginsClaude Code namespaces plugin skills, so invoke them as:
/krypton:krypton-planning
/krypton:krypton-executionThis repo includes the Claude plugin files Claude Code expects:
.claude-plugin/plugin.json
.claude-plugin/marketplace.json
skills/krypton-planning/SKILL.md
skills/krypton-execution/SKILL.mdUse manual install when you want the skills available as personal Claude Code skills without the plugin marketplace:
git clone https://github.com/jturntdev/krypton.git
mkdir -p ~/.claude/skills
cp -R krypton/skills/krypton-planning ~/.claude/skills/
cp -R krypton/skills/krypton-execution ~/.claude/skills/Manual personal skills invoke without a plugin namespace:
/krypton-planning
/krypton-executionFor Codex skills:
git clone https://github.com/jturntdev/krypton.git
mkdir -p ~/.codex/skills
cp -R krypton/skills/* ~/.codex/skills/krypton-planning: turn a request into an outcome contract, architectureslice, task plan, evidence gate, and /goal handoff prompt.
krypton-execution: execute an approved plan without drifting from ownership,cutover, or proof requirements.
krypton-planning with a feature request, bug, refactor, migration, orarchitecture goal.
docs/goals/<goal-slug>/PLAN.md
docs/goals/<goal-slug>/GOAL.md
docs/goals/<goal-slug>/EVIDENCE.mdPLAN.md is the full implementation plan. GOAL.md is the short /goalprompt or handoff prompt for the next session.
GOAL.md prompt in Codex or Claude.krypton-execution when you want the main agent to use the sameownership, cutover, review, and evidence discipline.
artifact, payload, trace, browser state, or operator-visible output and recorded in EVIDENCE.md.
The workflow is intentionally two-stage:
rough request
-> krypton-planning
-> PLAN.md + GOAL.md + EVIDENCE.md
-> /goal handoff
-> krypton-execution
-> main-agent implementation + review gates + acceptance evidenceKrypton also ships a reusable PR gate, but treat it as beta until you have tested it in a throwaway repo that matches your workflow. The primary install path is still the skills.sh command above.
The gate fails non-trivial code changes that do not include a changed Krypton goal package with:
PLAN.mdGOAL.mdEVIDENCE.mdBeta workflow example:
name: Krypton Goal Gate
on:
pull_request:
permissions:
contents: read
jobs:
krypton:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
- uses: jturntdev/[email protected]Run the same gate locally:
python3 scripts/check-krypton-goal.py --base-ref origin/mainGoal package templates live in:
templates/goal-package/Before relying on the Action in a real repo, test three cases in a throwaway repository:
PLAN.md, GOAL.md, and EVIDENCE.md should passKrypton works best when the harness supports named agents:
explorer: read-only source-of-truth and architecture mappingplan-reviewer: PRE and POST alignment checksreviewer: runtime correctness, security, and evidence checkmaintainer: codebase-shape, duplication, and cutover-debt checkverifier: focused proof from the real pathSee docs/required-roles.md for the role expectations. If your harness does not support named agents, the main agent can still follow the same gates, but independent exploration and review will be weaker.
Krypton keeps prompt templates individual instead of centralizing them into one large prompt file. Each skill owns the prompts it actually uses:
skills/krypton-planning/plan-reviewer-prompt.mdskills/krypton-execution/post-plan-reviewer-prompt.mdskills/krypton-execution/reviewer-prompt.mdskills/krypton-execution/maintainer-prompt.mdBad agent path:
"Add sentiment to the dashboard."The agent adds frontend-only sentiment logic and calls it done.
Krypton path:
Truth owner: market intelligence producer
Contract boundary: typed sentiment payload
Cutover: dashboard reads producer output only
Evidence: API response plus browser state showing the real payloadSee examples/ and tests/pressure-scenarios/ for more.
This is the first public cut. It is intentionally small: two skills, individual prompt templates, agent role expectations, goal package templates, a local gate script, a beta reusable GitHub Action gate, examples, pressure scenarios, and validation scripts.
Krypton uses SemVer-style versions while the public package stabilizes.
VERSION.codex-plugin/plugin.json,.claude-plugin/plugin.json, and .claude-plugin/marketplace.json
vX.Y.ZVersion policy:
/goal workflow shapeRun:
./scripts/validate.shThe validator checks required files, skill metadata, JSON plugin metadata, and public-safety issues such as placeholders or private project references.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.