R

Ratchet

baisethomas/ratchet · v1.0.0 · Tools & Integrations

by baisethomasOwner verifiedScan grade: caution

Verification playbook and Claude Code plugin for coding agents at any capability tier: a model-agnostic AGENTS.md contract, a destructive-command guard, a stop gate that runs your checks before "done", and skills that reproduce a bug and prove its regression test can fail; the same skills load in Codex from .agents/skills/

InstallSource
Follow0
Trust Score70Security scan59Components6
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Ratchet a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • 6 skills
  • Runs hooks on agent events

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

What is Ratchet?

Ratchet is a published tools & integrations plugin for AI coding agents in the Claude Code ecosystem, developed by baisethomas and distributed through the HOL AI plugin registry. Verification playbook and Claude Code plugin for coding agents at any capability tier: a model-agnostic AGENTS.md contract, a destructive-command guard, a stop gate that runs your checks before "done", and skills that reproduce a bug and prove its regression test can fail; the same skills load in Codex from `.agents/skills/`.

Canonical slug
baisethomas/ratchet
Version
v1.0.0 · updated Oct 15, 2026

Registry snapshot

Owner verification
Verified on HOL as @baisethomas
Scanner
Registry fallback scan
Security result
Caution
Digest verified
Yes
6 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
70

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64/100
Maintenance
25/100
MCP server setup
100/100
Plugin Security
59/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
drop-in
Source repo
https://github.com/baisethomas/Ratchet
Source commit
69f5c2fdb36a…
Publisher verified
Yes
Owner verified
@baisethomas

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Caution
Security result
59
Security score
0
High findings
Provider
registry-broker-fallback
Grade
F · caution
Version
Unknown
cisco-skill-scanner: unknown

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-YWxwXP (lenient mode requires at least one markdown file)

infoskill-securityskill-scan.unavailable

Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-ykJSwD (lenient mode requires at least one markdown file)

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-AMk0GH (lenient mode requires at least one markdown file)

infoskill-securityskill-scan.unavailable

Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-ksvvKF (lenient mode requires at least one markdown file)

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Find the marketplace and plugin names

    The install id is <plugin-entry>@<marketplace-name>, and the marketplace name is declared inside the manifest — it can differ from the repository name. List registered marketplaces to read both names.

    shell
  3. 3

    Install the plugin

    Substitute the plugin entry name and the marketplace name shown by the previous step.

    claude code

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "ratchet",
  "version": "1.0.0",
  "description": "Ratchet's six skills (completion gate, test-first bug fixing with a revert-restore proof, hostile review, handoff, tighten-after-failure, installer) plus the destructive-command guard. The contract, project memory, and stop gate stay per-repo: run /ratchet:ratchet-init to install them.",
  "author": {
    "name": "Baise Thomas",
    "url": "https://github.com/baisethomas"
  },
  "homepage": "https://github.com/baisethomas/Ratchet",
  "repository": "https://github.com/baisethomas/Ratchet",
  "license": "MIT",
  "keywords": [
    "verification",
    "review",
    "skills",
    "hooks",
    "agents-md",
    "codex"
  ],
  "hooks": "./plugin-hooks.json",
  "interface": {
    "displayName": "ratchet",
    "developerName": "baisethomas"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 5
}

Marketplace source

Repo URL
https://github.com/baisethomas/Ratchet
Marketplace path
Unknown
Source path
drop-in
Install policy
Unspecified

Skills

6 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • ratchet-bugfix

    skills/ratchet-bugfix/SKILL.md

    Test-first bug fixing with mechanical proof that the regression test can fail. Use when fixing a bug, a regression, a failing or flaky test, a crash, or any "this is broken / used to work" report — before editing the code under suspicion.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ratchet-done

    skills/ratchet-done/SKILL.md

    Completion gate for coding work. Use before telling the user that nontrivial work is done, fixed, ready for review, or passing — even when the change feels obviously fine. Audits the real diff, re-runs the checks, bins claims as RAN / READ / ASSUMED, and writes the completion report.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ratchet-handoff

    skills/ratchet-handoff/SKILL.md

    Refresh .ratchet/STATE.md and record durable decisions so a fresh agent can continue without this conversation. Use when ending a nontrivial session, switching models or tools, when context is about to be compacted or cleared, or when the user asks for a handoff.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ratchet-init

    skills/ratchet-init/SKILL.md

    Install Ratchet into a repository - the AGENTS.md contract, project memory, skills, and optionally the Claude Code and Codex adapters and hooks - then fill in the repo-specific slots from what the repo actually contains.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ratchet-review

    skills/ratchet-review/SKILL.md

    Hostile review of a diff by a fresh-context reviewer, with every finding verified before it is acted on. Use when the user asks to review a branch, PR, or diff, and before accepting high-risk work as done.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ratchet-tighten

    skills/ratchet-tighten/SKILL.md

    Turn an escaped failure into one permanent fix at the right layer — a check, a hook, a test, a skill step, or a rule. Use when a mistake got past the process - a false "done", a bug found after review, a broken rule, a repeated correction from the user - or when the user asks for a retro.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/plugin.json

file

723 bytes

42391ef1b34bea84…

.codex-plugin/plugin.json

plugin-manifest

777 bytes

51cdaac092cd8da4…

AGENTS.md

file

13,158 bytes

e047f3279d150f9d…

CLAUDE.md

file

1,938 bytes

5ccdb1778a930849…

hooks/check-on-stop.sh

file

8,180 bytes

27b077961090d97f…

hooks/guard-destructive.sh

file

18,704 bytes

68d4c9134c594681…

hooks/lib-payload.sh

file

1,346 bytes

69f72ac716e38968…

hooks/lint-edited-file.sh

file

4,270 bytes

6af63ad8591b938a…

hooks/test-hooks.sh

file

32,233 bytes

68fea684b83f4e4b…

plugin-hooks.json

file

591 bytes

2fb7a7b9971e0d46…

SECURITY.md

file

1,352 bytes

b7c99ed310cb1e7f…

skills/ratchet-bugfix/scripts/rrr.sh

skill

10,949 bytes

c42d8ec3853a084b…

skills/ratchet-bugfix/scripts/test-rrr.sh

skill

10,527 bytes

23b91d4703e2ab20…

skills/ratchet-bugfix/SKILL.md

skill

5,303 bytes

d75906f6e8197c05…

skills/ratchet-done/SKILL.md

skill

5,097 bytes

e6c10b95cefb64cc…

skills/ratchet-handoff/SKILL.md

skill

4,240 bytes

eec91286d7c8aab2…

skills/ratchet-init/agents/openai.yaml

skill

126 bytes

b5a3fafa6907a655…

skills/ratchet-init/scripts/install.sh

skill

6,991 bytes

348e17552f53ca5b…

skills/ratchet-init/scripts/test-install.sh

skill

9,885 bytes

2822a83691f59c84…

skills/ratchet-init/SKILL.md

skill

9,108 bytes

c578ee0aa008a31c…

skills/ratchet-review/SKILL.md

skill

4,839 bytes

976410ccaf70f80c…

skills/ratchet-tighten/SKILL.md

skill

4,409 bytes

25d773c003a1385a…

Ratchet — Frequently asked questions

What is Ratchet?
Ratchet is an AI plugin in the HOL registry. Verification playbook and Claude Code plugin for coding agents at any capability tier: a model-agnostic AGENTS.md contract, a destructive-command guard, a stop gate that runs your checks before "done", and skills that reproduce a bug and prove its regression test can fail;…
How do I install Ratchet?
Install Ratchet in your harness: Claude Code — /plugin marketplace add baisethomas/Ratchet; Any agent — npx [email protected] add baisethomas/Ratchet. Full step-by-step guidance is on the HOL plugin page.
How do I install Ratchet in Claude Code?
To install Ratchet in Claude Code, start with /plugin marketplace add baisethomas/Ratchet. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for Ratchet computed?
Ratchet has a HOL Trust Score of 70 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/baisethomas%2Fratchet/trust
Who publishes Ratchet?
Ratchet is published by baisethomas and listed on HOL.

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-18 to 2026-10-31.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Ratchet.

Alternatives in Tools & Integrations

See all Tools & Integrations plugins

Reviews and similar plugins