klaussy — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited klaussy (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Write once, align everyone. Keep your conventions in one centralCLAUDE.mdand letklaussycompile it into native rules, settings, and skills for Claude, Gemini, Cursor, Copilot, Codex, Google Antigravity, and Cline.
Designed by an ex-GitHub, ex-Twitch, and ex-Microsoft engineer, klaussy is a multi-agent repository boilerplate generator. With a single command, it scaffolds conventions, repo-namespaced skills, stack-appropriate settings, and interactive guardrails for seven major AI coding environments—matching each agent's native file formats and capability profiles.
Get your repo ready for agent collaboration in seconds:
pip install klaussy-agents
cd your-repo
klaussy initAuto-detects your base branch and stack, then scaffolds all targets. To target specific agents, run `klaussy init --agents claude,cursor`.
klaussy translates your canonical repository conventions (CLAUDE.md) and workflows into native formats optimized for each agent's directory placement, scoping mechanisms, and capability boundaries:
.claude/skills/, .claude/settings.json allow/deny-lists, and active local read/fetch hooks.AGENTS.md project-level rules, plugin-based path rules with glob triggers (rules/*.md), native hooks, and IDE-compatible permissions..cursor/rules/*.mdc) with auto-apply matching, terminal permissions allow-list, and .cursorignore read blocks.applyTo file matchers (.instructions.md), and skills nested in .github/skills/.GEMINI.md scoping (loaded only when touching subdirectories), settings tool allow-lists, and .geminiignore filtering.AGENTS.md root-and-nesting rules, generic skills, and .codex/config.toml sandbox configurations..clinerules/ Markdown rules with paths: glob activation, event-named .clinerules/hooks/ guards (commit, read/web-injection, plan guidance), and .clineignore read blocks.klaussy installs cross-agent, dialect-tolerant guard scripts that intercept agent tool actions (terminal runs, file reads, web requests) at the boundary. They block unsafe commands via exit 2 and stderr, which all supported agents respect:
read_guard.py)[!IMPORTANT] Intercepts and neutralizes prompt injection. Scans the content of any file being read locally or fetched from the web (on supported agents like Claude and Antigravity) for malicious instructions. Stops external data from hijacking your agent's current task context.
comment_guard.py)[!TIP] Keep commits and pull request comments clean. Intercepts outgoing messages and pull request comments (e.g., gh pr comment). Automatically scrubs AI filler words, robotic formatting, and chatty openers, ensuring all generated communication reads like it was written by a human software engineer.plan_guidance.py)[!NOTE] Injects strict guardrails (e.g., minimal lines changed, no over-engineering, write tests first) directly into the agent's plan step before it begins modifying files, preventing scope creep.
commit_guard.py)[!NOTE] Automatically triggers your project's linting and formatting stack before allowing the agent to commit, keeping your Git history green.
Every generated skill is namespaced to your repo, carries an auto-trigger description, and is adapted to the agent's capability profile (such as mapping Claude's parallel subagent tools to Codex/Cursor/Antigravity equivalents):
| Skill | What it does | Magic Feature |
|---|---|---|
| `<repo>-review` | Senior-level PR review against the base branch. | 🧠 Multi-Lens & Self-Refutation: Runs parallel sub-agents looking at correctness, security, architecture, and agentic evals. A final validation phase filters out false positives before posting. |
| `<repo>-debug` | Rigid 5-phase bug resolution flow. | 🧪 Test-First: Reproduces the bug, writes a failing test, implements the fix, and runs the entire suite to verify. |
| `<repo>-plan` | Multi-phase planning and execution. | 📋 Plan Gate: Writes a detailed plan.md checklist and halts, waiting for your explicit approval before modifying files. |
| `<repo>-precommit` | Last-mile review of staged changes. | 🔍 5-Lens Safety check: Reviews changed lines only for silent failures, leaked secrets, debug leftovers, and verbose comments. |
| `<repo>-humanize` | Prose and documentation cleaner. | ✍️ AI-Tell Scrubber: Runs the deterministic klaussy humanize regex engine to strip chatbot scaffolding and formalisms. |
Also bundles skills for `commit`, `pr`, `implement`, `refactor`, `explain`, `test`, and `new-worktree`.
klaussy-repo-conventions to auto-analyze your codebase and compile CLAUDE.md.<repo>-review skill so reviews check path-scoped rules.settings.json, config.toml) and allowed tool prefixes..cursorignore and .geminiignore with secret-excluding patterns.pip install klaussy-agents
klaussy init/plugin marketplace add steph-dove/klaussy-agents
/plugin install klaussy@klaussyAdd to your project's .mcp.json:
{
"mcpServers": {
"klaussy": {
"command": "klaussy-mcp",
"env": { "PYTHONUNBUFFERED": "1" }
}
}
}from klaussy import toolkit
# Scaffold a repo programmatically
toolkit.init(repo=".", agents=["claude", "cursor"])klaussy-repo-conventions >= 1.4.0--init enrichment)mcp (optional, for MCP server support)klaussy is an open-source project owned and maintained by Dovatech LLC (founded and owned by Stephanie Dover).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.