visual-gen — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited visual-gen (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Claude Code plugins and pi packages for people who'd rather ship than configure.
These started as things I kept re-teaching Claude in every session -- review patterns, decimal validation traps, how to write without sounding like a press release. Eventually I packed them into skills so I could stop repeating myself. If any of them save you time, good. Steal them.
Claude Code (plugins) — full guide in INSTALL.md, but the short version:
/plugin marketplace add widnyana/eyay-toolkits
/plugin install <plugin-name>@eyay-toolkitsOther agents / skills.sh:
npx skills add widnyana/eyay-toolkitspi / OMP (packages):
pi install npm:@widnyana/design-thinking
# or
omp install npm:@widnyana/design-thinkingOMP (marketplace):
omp plugin marketplace add widnyana/eyay-toolkits
omp plugin install design-thinking@eyay-toolkits
omp plugin install block-forbidden-git-add@eyay-toolkits
omp plugin install iac-check-guard@eyay-toolkits
omp plugin install general-reminder@eyay-toolkitsThe Claude Code plugins that are skill-only (e.g. prose-engineers) also load in the pi coding agent — see INSTALL.md.
Uninstalling anything: see UNINSTALL.md.
Claude Code (plugins) — re-run the install command, then restart Claude Code:
/plugin install <plugin-name>@eyay-toolkitsOther agents / skills.sh — re-run the same command; it refreshes in place:
npx skills add widnyana/eyay-toolkitspi / OMP (packages) — re-run the install command, or for the git-clone method: git pull then re-run pi install.
| Plugin | What it does | Details |
|---|---|---|
| block-forbidden-git-add | PreToolUse hook that blocks git add ./-A, staging protected paths (docs/, CLAUDE.md, ...), and history rewrites (rebase, reset, commit --amend, push -f). Per-project override via .claude/ or .pi/block-forbidden-git-add.json. | README |
| iac-check-guard | PreToolUse hook that blocks IaC write/destructive commands — ansible-playbook/ansible-pull without --check, ad-hoc ansible write modules, terragrunt/tofu/terraform apply-family (apply, destroy, import, init, plan -out/-replace/-destroy, state mutations), including mise run tg -- ... wrappers. | README |
| bmad-sprint-run | Drives Claude Code through an entire BMad sprint autonomously — creates stories, implements them, runs quality gates, handles retries, and commits results. Two modes: skill (/bmad-sprint-run) and Python companion (sprint-runner.py). | README |
| career-tools | Cover letters and CVs from repo contents. Markdown or ATS-friendly LaTeX. | README |
| design-thinking | /dt mode + /cg* commands: draw the call graph (named failure paths) before writing code, review, or refactor. r17x's three methods (Design Thinking for code, Design Graph for interfaces, Graph Protocol for delegating to subagents) plus /research-prompt (Meta Research Prompt Generator). Claude Code port of the design-thinking pi package below. | README |
| evm-decimal-validation | Audits hardcoded decimals, queries on-chain values, fixes FromWei/ToWei conversions. Catches the "18 decimals everywhere" mistake before it hits production. | README |
| excalidraw-diagrams | Multi-frame Excalidraw diagrams from a design doc. A tested builder with layout checks, SVG/PNG preview, and a facts cross-check against the source. | README |
| perihbahasa | Humorous, absurd, and flirty remixes of Indonesian proverbs (peribahasa) with precise rhyme and cadence. | README |
| pi-coordinator | Claude Code coordinates cheap pi workers over RPC: one worktree per task, tool cap, loop nudge, a baseline-aware driver-owned verify gate (fails only on failures new vs the base ref) that sends failures back to the same session, then a squash land on local main. | README |
| prose-engineers | Docs and articles that read like a colleague explaining something over coffee. Problem-first, concrete, no filler. Structured for how people actually read: scanning, front-loading, resumable sections. Public and internal modes. | README |
| solana-onchain | Query accounts, analyze transactions, execute operations on Solana. Defaults to devnet because mainnet mistakes are permanent. | README |
| sui-dev-tools | Move smart contracts, TypeScript SDK, dApp Kit, Seal secrets, Walrus storage. All the Sui things in one plugin. | README |
| ts-backend-dev | TypeScript backend skills: kill N+1 queries, review code for architecture and security issues, design Prisma schemas that won't paint you into a corner. | README |
| visual-gen | Blog cover images, architecture diagrams, and process infographics as PNG via HTML+CSS + Chrome headless. | README |
| video-gen | Videos from code. Remotion or fframes for motion, p5.js for canvas, Cairo/Skia/Poppler for 2D, Python + Vulkan (wgpu) for shader frames, Python for MIDI and synth audio, ffmpeg to stitch. Renders once and never judges its own output: you review. | README |
| Package | What it does | README |
|---|
| pi-coordinator | pi / omp skill: a coordinator that plans a job, hands each coding task to a sub-agent worker (pi Agent tool / omp task agent), verifies every result itself, and lands passing work on local main as one squash commit per task. | README | | design-thinking | pi / omp extension that flips the order: with /dt active, the agent draws the call graph (named failure paths) before writing code. Includes the /cg, /cg-plan, /cg-review, /cg-map prompt family, Graph Protocol delegation plans in /cg-plan, and /research-prompt (Meta Research Prompt Generator). Also carries an always-on LSP reminder: use the language server while one exists; otherwise the user hears once per session (UI sessions only) how to enable it. | README | | iac-check-guard | pi/omp extension that blocks IaC write/destructive commands (ansible, terragrunt/tofu/terraform apply-family including mise-wrapped forms) before the Bash tool runs. | README | | agent-notify | pi/omp extension that fires terminal-native banners (OSC 777/9/99, notify-send, Windows toast) when the agent finishes, needs an approval, or is retrying, so you can leave the terminal. | README | | exit-commands | pi/omp extension that adds vim muscle-memory exits to the REPL: :q (plus :q!, :wq, :x) and a /exit command. /quit is already built-in; /exit is not. | README | | general-reminder | pi/omp extension that injects user-configured standing reminders into every run, read from <project>/.omp/reminders.json (or .pi/ on pi) — always-on entries plus optional one-shot notes per session. | README |
| Standard (1200x630) | Wide (2400x630) | Tall (1200x2400) |
|---|---|---|
| Cover image | Wide diagram | Tall infographic |
| Architecture diagram | Process infographic |
See CONTRIBUTING.md for the plugin structure and how to add your own.
Some files ship to both Claude Code (plugins/) and pi/omp (pi-packages/). The canonical copy lives in pi-packages/<name>/. After editing one of them:
bun scripts/check-drift.ts # sync pi-packages copies into plugins/
bun scripts/check-drift.ts --check # verify only (also runs on git commit)Two classes are maintained automatically: verbatim sync (the block-forbidden-git-add hook script, design-thinking/references/*.md) and transform (design-thinking/skills/*/SKILL.md, where "package" becomes "plugin" on the Claude side). READMEs, LICENSEs, and the platform adapters (hooks/hooks.json vs extensions/*.ts) are per-platform — edit each side independently.
MIT -- see individual plugin directories for specifics.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.