hooks — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hooks (Hook) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Claude Code skill for automatic CLI tool management. Detects missing tools, installs them via optimal package managers, and audits project environments.
This is an Agent Skill following the open standard originally developed by Anthropic and released for cross-platform use.
Supported Platforms:
Skills are portable packages of procedural knowledge that work across any AI agent supporting the Agent Skills specification.
77+ tools across categories:
| Category | Tools |
|---|---|
| Core CLI | ripgrep, fd, fzf, jq, yq, bat, delta, just |
| Languages | python, node, rust, go, ruby, php |
| Package Managers | uv, npm, pnpm, cargo, pip, gem, composer |
| DevOps | docker, compose, kubectl, terraform, ansible |
| Linters | eslint, prettier, ruff, black, shellcheck, phpstan |
| Security | trivy, gitleaks, bandit, semgrep |
| Git Tools | gh, glab, git-lfs, delta |
Automatically detects project types and their requirements:
| Project Type | Detection Files | Required Tools |
|---|---|---|
| Python | pyproject.toml, requirements.txt | python, uv |
| Node.js | package.json | node, npm |
| Rust | Cargo.toml | rust |
| Go | go.mod | go |
| PHP | composer.json, *.php | php, composer |
| Ruby | Gemfile | ruby |
| Docker | Dockerfile, docker-compose.yml | docker, compose |
| Terraform | *.tf | terraform |
Add the Netresearch marketplace once, then browse and install skills:
# Claude Code
/plugin marketplace add netresearch/claude-code-marketplaceInstall with any Agent Skills-compatible agent:
npx skills add https://github.com/netresearch/cli-tools-skill --skill cli-toolsDownload the latest release and extract to your agent's skills directory.
git clone https://github.com/netresearch/cli-tools-skill.gitcomposer require netresearch/cli-tools-skillRequires netresearch/composer-agent-skill-plugin.
npm install --save-dev \
@netresearch/agent-skill-coordinator \
github:netresearch/cli-tools-skillRequires @netresearch/agent-skill-coordinator, which discovers the skill in node_modules and registers it in AGENTS.md via a postinstall hook. For pnpm, also allowlist the coordinator's postinstall:
{
"pnpm": {
"onlyBuiltDependencies": ["@netresearch/agent-skill-coordinator"]
}
}The skill activates automatically on:
bash: <tool>: command not found
zsh: command not found: <tool>
'<tool>' is not recognized as an internal or external commandThe skill selects the optimal installation method based on catalog priority:
Priority: user-level (~/.local/bin, ~/.cargo/bin) over system-level.
cli-tools/
├── SKILL.md # Skill definition and workflows
├── catalog/ # Tool definitions (77+ JSON files)
│ ├── ripgrep.json
│ ├── php.json
│ └── ...
├── scripts/
│ ├── install_tool.sh # Main installer
│ ├── auto_update.sh # Batch updater
│ ├── check_environment.sh
│ ├── detect_project_type.sh
│ ├── lib/ # Shared libraries
│ └── installers/ # Method-specific installers
└── references/
├── binary_to_tool_map.md
└── project_type_requirements.mdThis project uses split licensing:
See the individual license files for full terms.
catalog/<tool>.jsonreferences/binary_to_tool_map.md if binary differs from tool namescripts/install_tool.sh <tool> installDeveloped and maintained by Netresearch DTT GmbH.
Made with ❤️ for Open Source by [Netresearch](https://www.netresearch.de/)
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.