websiteURL should be present for marketplace readiness.
ThumbGate
Pre-action infrastructure firewall for AI coding agents: feedback becomes lessons and prevention rules enforced by PreToolUse hooks across Claude Code, Codex, Gemini, and MCP
igorganapolsky/thumbgate · v1.38.0 · Development & Workflow
Trust Score
65
Security
64
Surfaces
89
What is ThumbGate?
ThumbGate is a published development & workflow plugin for AI coding agents in the claude-code ecosystem, developed by IgorGanapolsky and distributed through the HOL AI plugin registry. Pre-action infrastructure firewall for AI coding agents: feedback becomes lessons and prevention rules enforced by PreToolUse hooks across Claude Code, Codex, Gemini, and MCP
- Canonical slug
- igorganapolsky/thumbgate
- Version
- v1.38.0 · updated Oct 9, 2026
- Open data
- entity.json (JSON-LD)
Trust & Reputation
Factor Analysis
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Registry Snapshot
- Homepage
- https://thumbgate.ai
- Canonical profile
- https://hol.org/registry/plugins/igorganapolsky%2Fthumbgate
- Publisher verification
- No
- Marketplace source
- Unknown
- Scanner
- Broker fallback
- Safety label
- caution
- Digest verified
- Yes
Trust & reputation
Trust & Reputation
Factor Analysis
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Provenance
- Plugin root
- .
- Source repo
- https://github.com/IgorGanapolsky/ThumbGate
- Source commit
- dd796ed2331b…
- Publisher verified
- No
- Owner verified
- Not owner verified
Continuous scanner CI not detected
This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.
Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.
Verified badge not detected
Add the HOL verified badge to the repository README to score +2% trust. Plugin owners can open that pull request from Guard Plugins.
Security Posture
- Provider
- registry-broker-fallback
- Grade
- D · caution
- Version
- Unknown
Findings
privacyPolicyURL should be present for marketplace readiness.
termsOfServiceURL should be present for marketplace readiness.
Script permission declarations are required for scripts/: scripts/RAG_IMPROVEMENTS_REPORT.md, scripts/a-plus-evidence-scorecard.js, scripts/TEMPORAL_DECAY_README.md, scripts/a2ui-engine.js, scripts/activation-tracker.js, scripts/activation-quickstart.js, scripts/adaptive-governance-arena.js, scripts/action-receipts.js, scripts/access-anomaly-detector.js, scripts/adk-consolidator.js, scripts/agent-egress-policy.js, scripts/admin-override.js, scripts/agent-memory-lifecycle.js, scripts/agent-design-governance.js, scripts/agent-audit-trace.js, scripts/agent-action-inventory.js, scripts/agent-readiness-plan.js, scripts/agent-outcome-eval.js, scripts/agent-outcome-monitor.js, scripts/agent-reasoning-traces.js, scripts/agent-readiness.js, scripts/agent-operations-planner.js, scripts/agent-security-hardening.js, scripts/agent-stack-survival-audit.js, scripts/agent-reward-model.js, scripts/agent-security-central.js, scripts/agents-sdk-sandbox-plan.js, scripts/agentic-data-pipeline.js, scripts/ai-engineering-stack-guardrails.js, scripts/ai-component-inventory.js, scripts/ai-org-governance.js, scripts/ai-identity-checklist.js, scripts/ai-search-distribution.js, scripts/ai-governance-operating-plan.js, scripts/analytics-window.js, scripts/ai-search-visibility.js, scripts/aiventyx-marketplace-plan.js, scripts/allowlist-bridge-honesty.js, scripts/apollo-acquisition.js, scripts/analytics-report.js, scripts/audit.js, scripts/artifact-agent-plan.js, scripts/async-eval-observability.js, scripts/audit-trail.js, scripts/audit-pr-bot-contamination.js, scripts/async-job-runner.js, scripts/autonomous-sales-agent.js, scripts/auto-context-packs.js, scripts/autonomous-reliability-explorer.js, scripts/autonomous-workflow.js, scripts/auto-promote-gates.js, scripts/auto-wire-hooks.js, scripts/belief-update.js, scripts/behavioral-extraction.js, scripts/bayes-optimal-gate.js, scripts/aws-blocks-guardrails.js, scripts/background-agent-governance.js, scripts/autoresearch-runner.js, scripts/bluesky-delete-replies.js, scripts/bluesky-monitor-launchd.js, scripts/bluesky-list-actionable.js, scripts/bluesky-monitor-cron.sh, scripts/billing.js, scripts/billing-setup.js, scripts/budget-enforcer.js, scripts/broker-execution-receipts.js, scripts/budget-aware-gates-proof.js, scripts/budget-guard.js, scripts/bot-detection.js, scripts/break-glass-gates-propose.js, scripts/buyer-paths.js, scripts/build-grok-plugin.js, scripts/build-codex-plugin.js, scripts/build-metadata.js, scripts/build-claude-mcpb.js, scripts/capture-railway-diagnostics.sh, scripts/chatgpt-ads-readiness-pack.js, scripts/check-posts.py, scripts/changeset-check.js, scripts/check-update.js, scripts/check-congruence.js, scripts/chatgpt-gpt-revenue-pack.js, scripts/ci-cd-hygiene-audit.js, scripts/classifier-routing.js, scripts/ci-gha-buildkite-patterns.js, scripts/checkout-attribution-reference.js, scripts/claude-feedback-sync.js, scripts/claude-workflow-hardening-pack.js, scripts/cli-progress.js, scripts/claw-harness-production.js, scripts/cli-feedback.js, scripts/cli-schema.js, scripts/cli-demo.js, scripts/cli-status.js, scripts/cloudflare-dynamic-sandbox.js, scripts/code-reasoning.js, scripts/code-mode-mcp-plan.js, scripts/code-graph-guardrails.js, scripts/cli-telemetry.js, scripts/cobble-hot-store-split.js, scripts/codex-self-heal.js, scripts/codegraph-context.js, scripts/codex-marketplace-revenue-pack.js, scripts/codex-runbook-flywheel.js, scripts/colab-compute-honesty.js, scripts/codex-plugin-revenue-pack.js, scripts/config-strict-parse.js, scripts/colbert-style-maxsim.js, scripts/computer-use-firewall.js, scripts/compact-memory-store.js, scripts/commercial-offer.js, scripts/content-engine/linkedin-content-generator.js, scripts/context-footprint.js, scripts/content-engine/output/linkedin-posts-2026-04-09.md, scripts/content-engine/reddit-thread-finder.js, scripts/context-engine.js, scripts/content-engine/output/linkedin-memento-validation.md, scripts/context-manager.js, scripts/creator-campaigns.js, scripts/conversation-context.js, scripts/conversion-rate-stats.js, scripts/create-pre-eci-archive.js, scripts/cost-cli.js, scripts/contextfs.js, scripts/daemon-manager.js, scripts/cursor-marketplace-doctor.js, scripts/daily-digest.js, scripts/dashboard-chat.js, scripts/daily-discoveries-topics.json, scripts/cross-encoder-reranker.js, scripts/dashboard-limits.js, scripts/data-governance.js, scripts/data-table-agent.js, scripts/dashboard-render-spec.js, scripts/dashboard.js, scripts/decision-journal.js, scripts/demo/zero-egress-proof.sh, scripts/deepseek-v4-runtime-guardrails.js, scripts/decision-trace.js, scripts/deeppattern-discipline-honesty.js, scripts/delegation-runtime.js, scripts/demo/legal-gate-pattern-proof.js, scripts/dependabot-changeset.js, scripts/deploy-policy.js, scripts/deploy-scope.sh, scripts/diagnostic-chrome.py, scripts/deploy-gcp.sh, scripts/disagreement-mining.js, scripts/distribution-surfaces.js, scripts/double-blind-eval-protocol.js, scripts/dispatch-brief.js, scripts/document-intake.js, scripts/docker-sandbox-planner.js, scripts/document-workflow-governance.js, scripts/durability/step.js, scripts/ensure-production-search-corpus.js, scripts/enforcement-provenance-check.js, scripts/edotenv-rl-gateway.js, scripts/ensure-repo-bootstrap.js, scripts/dpo-optimizer.js, scripts/eval-baseline.js, scripts/eval-harness.js, scripts/eval-holdout.js, scripts/enterprise-agent-rollout.js, scripts/ephemeral-agent-store.js, scripts/entitlement.js, scripts/eval-risk-model.js, scripts/evolution-state.js, scripts/eval_gate_classifier.py, scripts/experience-replay-governance.js, scripts/eval-quality-suite.js, scripts/eval-rag.js, scripts/experiment-tracker.js, scripts/explore.js, scripts/explainx-trending-honest.js, scripts/explore-subcommands.js, scripts/export-databricks-bundle.js, scripts/export-dpo-pairs.js, scripts/feedback-aggregate.js, scripts/export-hf-dataset.js, scripts/failure-diagnostics.js, scripts/export-training.js, scripts/external-customer-audit.js, scripts/export-kto-pairs.js, scripts/feedback-history-distiller.js, scripts/feedback-inbox-read.js, scripts/feedback-paths.js, scripts/feedback-attribution.js, scripts/feedback-loop.js, scripts/feedback-fallback.js, scripts/feedback-sanitizer.js, scripts/feedback-root-consolidator.js, scripts/feedback-schema.js, scripts/feedback-to-memory.js, scripts/feedback-session.js, scripts/feedback-quality.js, scripts/find-dormant-requires.js, scripts/feedback_quality_eval.py, scripts/filesystem-search.js, scripts/file-ledger-lock.js, scripts/financial-control-plane.js, scripts/feedback-to-rules.js, scripts/future-agi-evaluator.js, scripts/funnel-analytics.js, scripts/gate-decision-canary.js, scripts/fs-utils.js, scripts/gate-coherence.js, scripts/futureagi-prepost-gate.js, scripts/gates/cloud-egress-confirm.js, scripts/gate-satisfy.js, scripts/gate-eval.js, scripts/gate-stats.js, scripts/gate-templates.js, scripts/gates-engine.js, scripts/generate-case-study-outreach.js, scripts/gemini-embedding-policy.js, scripts/gemini-cli-demand-pack.js, scripts/generate-eval-scorecard.js, scripts/gates/tokenomics-cost-guard.js, scripts/generate-numbers-page.js, scripts/generate-pretool-hook.sh, scripts/gist-prompt-budget.js, scripts/git-at-scale.js, scripts/git-hook-installer.js, scripts/github-about.js, scripts/generate-paperbanana-diagrams.sh, scripts/graphify-readiness.js, scripts/github-outreach.js, scripts/grafana-revenue-evidence.js, scripts/github-achievement-honesty.js, scripts/governance-difficulty-curriculum.js, scripts/governance-conflict-audit.js, scripts/graphrag-schema-first-multi-hop.js, scripts/graphify-staleness-check.js, scripts/growth-campaigns.js, scripts/graphify-setup.js, scripts/graphrag-retrieval.js, scripts/gtm-revenue-loop.js, scripts/gurobi_optimizer.py, scripts/halo-trace-optimizer.js, scripts/gurobi-systemwide-install.sh, scripts/harness-selector.js, scripts/gurobi-optimizer.js, scripts/hallucination-detector.js, scripts/history-distiller.js, scripts/hidden-entry-points.js, scripts/harness-tool-names.js, scripts/hook-auto-capture.sh, scripts/hook-pre-tool-use.js, scripts/hf-papers.js, scripts/hook-stop-verify-deploy.sh, scripts/hook-stop-anti-claim.js, scripts/hook-thumbgate-cache-updater.js, scripts/hook-runtime.js, scripts/hook-stop-self-score.sh, scripts/hook-stop-pr-thread-check.sh, scripts/hosted-job-launcher.js, scripts/human-escalation.js, scripts/hybrid-supervisor-agent.js, scripts/imperative-detector.js, scripts/hosted-config.js, scripts/hybrid-feedback-context.js, scripts/index-leaf-context.js, scripts/inference-economics.js, scripts/inference-cache-policy.js, scripts/infoq-engage.js, scripts/implementation-notes.js, scripts/infoq-architect-honesty.js, scripts/install-spend-guard.js, scripts/install-drift-watch.sh, scripts/install-shim.js, scripts/install-revenue-truth-automation.js, scripts/install-mcp.js, scripts/ingest-manual-feedback.js, scripts/intent-scope-runtime.js, scripts/integrations/architect-kit-memory-bridge.js, scripts/integrations/memory-provider-enforcement-bridge.js, scripts/intent-router.js, scripts/install-thumbgate-daily-publish-launchd.sh, scripts/intent-governed-execution.js, scripts/internal-agent-bootstrap.js, scripts/jit-harness-compose.js, scripts/jsonl-watcher.js, scripts/ir-metrics.js, scripts/intervention-policy.js, scripts/jsonl-window.js, scripts/leak-scanner.js, scripts/judge-reward-function.js, scripts/latency-budget.js, scripts/knowledge-layer-plan.js, scripts/knowledge-graph-fuse.js, scripts/lesson-canonical.js, scripts/lesson-embedding-maintenance.js, scripts/lesson-embedding-index.js, scripts/lesson-graph.js, scripts/lesson-inference.js, scripts/lesson-db.js, scripts/lesson-reranker.js, scripts/lesson-synthesis.js, scripts/lib/bluesky-atproto.js, scripts/lesson-rotation.js, scripts/lesson-search.js, scripts/lesson-retrieval.js, scripts/license.js, scripts/llm-behavior-monitor.js, scripts/long-running-agent-context-guardrails.js, scripts/local-model-profile.js, scripts/llm-obs-honesty.js, scripts/linkedin-workflow-hardening-pack.js, scripts/llm-client.js, scripts/managed-dpo-export.js, scripts/mailer/resend-mailer.js, scripts/mailer/index.js, scripts/managed-lesson-agent.js, scripts/mantis-critic-review.js, scripts/markdown-escape.js, scripts/matryoshka-embedding.js, scripts/mcp-config.js, scripts/may-2026-revenue-machine.js, scripts/mcp-oauth.js, scripts/marketing-experiment.js, scripts/mcp-directory-revenue-pack.js, scripts/mcp-writeguard.js, scripts/mcp-transport-strategy.js, scripts/mcp-wiring-doctor.js, scripts/mcp-policy.js, scripts/medium-weekly.js, scripts/mcp-session-handles.js, scripts/memory-migration.js, scripts/memalign-recall.js, scripts/memory-firewall.js, scripts/memory-near-dupe.js, scripts/memory-scope-readiness.js, scripts/meko-datapack-honesty.js, scripts/migrate-lesson-graph.js, scripts/memory-vs-rag-route.js, scripts/meta-policy.js, scripts/metered-billing.js, scripts/meta-agent-loop.js, scripts/memory-store-governance.js, scripts/model-access-eligibility.js, scripts/mine-eval-set.js, scripts/model-candidates.js, scripts/model-distress-detector.js, scripts/model-calibration.js, scripts/mintlify-knowledge-honesty.js, scripts/monitor-launchd-common.js, scripts/model-migration-readiness.js, scripts/model-distress-doctor.js, scripts/model-eval.js, scripts/money-watcher.js, scripts/model-tier-router.js, scripts/native-messaging-audit.js, scripts/multimodal-retrieval-plan.js, scripts/npm-oidc-cli-floor.js, scripts/noop-detect.js, scripts/multi-hop-recall.js, scripts/natural-language-harness.js, scripts/observability-env.js, scripts/nvidia-specdecode-al-doctor.js, scripts/observability-setup.js, scripts/obsidian-export.js, scripts/nvhbm-base-die-gates.js, scripts/okara-money-promo-automation.js, scripts/operational-dashboard.js, scripts/openclaw-agent-governance-kit.js, scripts/operational-summary.js, scripts/operator-artifacts.js, scripts/operational-integrity.js, scripts/openui-catalog-compose-honesty.js, scripts/org-dashboard.js, scripts/override-audit.js, scripts/oss-pr-opportunity-scout.js, scripts/package-manager-honesty-doctor.js, scripts/otel-declarative-config.js, scripts/optimize-context.js, scripts/partner-orchestration.js, scripts/per-step-scoring.js, scripts/perf-budget-check.js, scripts/parallel-workflow-orchestrator.js, scripts/perplexity-client.js, scripts/perplexity-command-center.js, scripts/pii-scanner.js, scripts/plausible-server-events.js, scripts/plausible-domain-config.js, scripts/post-action-verification-window.js, scripts/perplexity-marketing.js, scripts/plan-gate.js, scripts/pr-manager.js, scripts/postgres-guard.js, scripts/pragmatic-hybrid-search.js, scripts/post-everywhere.js, scripts/post-training-governance.js, scripts/predictive-insights.js, scripts/principle-extractor.js, scripts/proactive-agent-eval-guardrails.js, scripts/problem-detail.js, scripts/pro-local-dashboard.js, scripts/private-core-boundary.js, scripts/pro-features.js, scripts/prompt-guard.js, scripts/profile-router.js, scripts/production-agent-readiness.js, scripts/product-feedback.js, scripts/prompt-eval.js, scripts/prompt-dlp.js, scripts/prompting-operating-system.js, scripts/prompt-programs.js, scripts/proof-common.js, scripts/prove-attribution.js, scripts/prove-automation.js, scripts/prove-adapters.js, scripts/prove-evolution.js, scripts/prove-claim-verification.js, scripts/prove-data-quality.js, scripts/prove-autoresearch.js, scripts/prove-data-pipeline.js, scripts/prove-cloudflare-sandbox.js, scripts/prove-hf-context.js, scripts/prove-herdr-adapter.js, scripts/prove-harnesses.js, scripts/prove-intelligence.js, scripts/prove-lancedb.js, scripts/prove-glama-mcp-start.js, scripts/prove-local-intelligence.js, scripts/prove-memory-pyramid-and-symbolic-canvas.js, scripts/prove-packaged-runtime.js, scripts/prove-loop-closure.js, scripts/prove-predictive-insights.js, scripts/prove-production-authenticated.js, scripts/prove-reliability.js, scripts/prove-rag-pipeline.js, scripts/prove-settings.js, scripts/prove-tessl.js, scripts/prove-runtime.js, scripts/prove-seo-gsd.js, scripts/prove-workos.js, scripts/prove-workflow-contract.js, scripts/prove-training-export.js, scripts/prove-xmemory.js, scripts/prove-vlt-dogfood.js, scripts/prove-vlt.js, scripts/provider-receipt-contract.js, scripts/provider-payment-reconciler.js, scripts/provider-revenue-evidence.js, scripts/provider-attestation-conformance.js, scripts/provider-live-evidence.js, scripts/provider-action-normalizer.js, scripts/publish-decision.js, scripts/published-cli.js, scripts/proxy-pointer-rag-guardrails.js, scripts/publish-linkedin-browser.py, scripts/publish-bluesky-direct.js, scripts/pulse.js, scripts/qwen38-max-cost-optimizer.js, scripts/rag-answer-quality-eval.js, scripts/rag-embedding-identity.js, scripts/radware-threat-defense.js, scripts/qa-scenario-planner.js, scripts/rag-document-pipeline.js, scripts/rate-limiter.js, scripts/rag-precision-guardrails.js, scripts/ragas-style-metrics.js, scripts/rag-structured-output.js, scripts/reasoning-efficiency-guardrails.js, scripts/rag-stage-contracts.js, scripts/reddit-monitor-cron.sh, scripts/reddit-dm-outreach.js, scripts/redteam-5-attacks.js, scripts/reddit-dm-workflow-hardening-pack.js, scripts/reddit-browser-notification-watch.js, scripts/reddit-monitor-launchd.js, scripts/reflector-agent.js, scripts/reminder-engine.js, scripts/release-notes.js, scripts/release-window.js, scripts/refresh-proof-pack.js, scripts/reliability-invariants.js, scripts/repeat-metric.js, scripts/render-demo-video/README.md, scripts/remote-feedback-capture.js, scripts/render-demo-video/generate-narration.js, scripts/render-demo-video/render.js, scripts/render-demo-video/index.html, scripts/request-envelope.js, scripts/retrieval-hybrid-ablation.js, scripts/require-proof.js, scripts/research-agent-harness.js, scripts/rerank-quality-eval.js, scripts/rerank-pipeline.js, scripts/retrieval-ranking-eval.js, scripts/retrieval-quality-tier.js, scripts/revenue-email-dispatch.js, scripts/revenue-observability-doctor.js, scripts/revenue-action-eligibility.js, scripts/revenue-evidence-remediation.js, scripts/revenue-pack-utils.js, scripts/reward-hacking-guardrails.js, scripts/risk-scorer.js, scripts/revenue-target-control.js, scripts/revenue-status.js, scripts/revenue-offer-system.js, scripts/rsi-safety-hillclimb.js, scripts/rlaif-self-audit.js, scripts/rotate-stripe-webhook-secret.js, scripts/rrsi-doctor.js, scripts/rrsi-regularizer.js, scripts/roo-sunset-demand-pack.js, scripts/rubric-engine.js, scripts/rule-validator.js, scripts/rule-sprawl.js, scripts/scaling-law-claims.js, scripts/salt-code-policy-honesty.js, scripts/sales-pipeline.js, scripts/schedule-manager.js, scripts/secret-redaction.js, scripts/secret-fixture-tokens.js, scripts/security-scanner.js, scripts/secret-scanner.js, scripts/self-distill-agent.js, scripts/self-healing-check.js, scripts/semantic-layer.js, scripts/self-harness-optimizer.js, scripts/self-heal.js, scripts/self-protection.js, scripts/semantic-dedup.js, scripts/session-health-sensor.js, scripts/session-analyzer.js, scripts/session-episode-store.js, scripts/sequence-guard.js, scripts/session-attribution-summary.js, scripts/seo-gsd.js, scripts/settings-hierarchy.js, scripts/shieldcortex-memory-firewall-runner.mjs, scripts/session-report.js, scripts/simatree-data-governance.js, scripts/silent-failure-cluster.js, scripts/session-lease.js, scripts/skill-exporter.js, scripts/single-use-credential-gate.js, scripts/six-function-agent-team.js, scripts/skill-library-compact.js, scripts/skill-generator.js, scripts/siren-mcp-governance.js, scripts/skill-proposer.js, scripts/skill-materializer.js, scripts/skill-packs.js, scripts/skill-quality-tracker.js, scripts/skool-reader.js, scripts/skill-rag-router.js, scripts/slow-loop.js, scripts/social-analytics/cleanup-zernio-duplicates.js, scripts/social-analytics/db/marketing-db.js, scripts/slo-alert-engine.js, scripts/slopsquat-guard.js, scripts/social-analytics/cli-entrypoint.js, scripts/social-analytics/generate-instagram-card.js, scripts/social-analytics/generate-applyops-instagram-card.js, scripts/social-analytics/instagram-thumbgate-post.js, scripts/social-analytics/engagement-audit.js, scripts/social-analytics/digest.js, scripts/social-analytics/generate-slides.js, scripts/social-analytics/install-growth-automation.js, scripts/social-analytics/load-env.js, scripts/social-analytics/mcp-server.js, scripts/social-analytics/notify.js, scripts/social-analytics/platform-limits.js, scripts/social-analytics/normalizer.js, scripts/social-analytics/pollers/github.js, scripts/social-analytics/pollers/instagram.js, scripts/social-analytics/pollers/reddit.js, scripts/social-analytics/pollers/plausible.js, scripts/social-analytics/poll-all.js, scripts/social-analytics/pollers/linkedin.js, scripts/social-analytics/pollers/threads.js, scripts/social-analytics/pollers/youtube.js, scripts/social-analytics/post-ledger.js, scripts/social-analytics/pollers/zernio.js, scripts/social-analytics/post-video.js, scripts/social-analytics/pollers/tiktok.js, scripts/social-analytics/publish-latest-release-article.js, scripts/social-analytics/publishers/bluesky.js, scripts/social-analytics/publish-instagram-thumbgate.js, scripts/social-analytics/publish-applyops-instagram.js, scripts/social-analytics/publish-latest-release-fallbacks.js, scripts/social-analytics/publish-thumbgate-launch.js, scripts/social-analytics/publishers/devto.js, scripts/social-analytics/publishers/linkedin-comment.js, scripts/social-analytics/publishers/hashnode.js, scripts/social-analytics/publishers/instagram.js, scripts/social-analytics/publishers/linkedin-quote-post.js, scripts/social-analytics/publishers/linkedin.js, scripts/social-analytics/publishers/youtube.js, scripts/social-analytics/publishers/threads.js, scripts/social-analytics/publishers/x.js, scripts/social-analytics/publishers/tiktok.js, scripts/social-analytics/publishers/medium.js, scripts/social-analytics/publishers/reddit.js, scripts/social-analytics/store.js, scripts/social-analytics/run-publish-thumbgate-launch.js, scripts/social-analytics/publishers/zernio.js, scripts/social-analytics/run-digest.js, scripts/social-analytics/schedule-thumbgate-campaign.js, scripts/social-analytics/reconcile-thumbgate-campaign.js, scripts/social-analytics/utm.js, scripts/social-analytics/zernio-status.js, scripts/social-analytics/verify-marketing-agent-campaign.js, scripts/social-analytics/sync-launch-assets.js, scripts/social-analytics/verify-latest-release-posts.js, scripts/social-bluesky-prospecting.js, scripts/social-quality-gate.js, scripts/social-reply-monitor-bluesky.js, scripts/sonar-review-hotspots.js, scripts/social-reply-monitor.js, scripts/solver-parity.js, scripts/social-post-hourly.js, scripts/state-backup.js, scripts/statusline-context.js, scripts/statusline-cache-read.js, scripts/spec-gate.js, scripts/star-history.js, scripts/statusline-cache-path.js, scripts/statusline-links.js, scripts/statusline-local-stats.js, scripts/statusline-tower.js, scripts/statusline-lesson.js, scripts/statusline.sh, scripts/statusline-meta.js, scripts/stripe-credentials.js, scripts/strands-harness-doctor.js, scripts/stripe-business-identity-probe.js, scripts/stripe-checkout-diagnostic.js, scripts/stripe-bootstrap-saas-catalog.js, scripts/stealth-memory-injection-gate.js, scripts/stripe-payment-link-update.js, scripts/stripe-revenue-catalog.js, scripts/stripe-sync-product-images.js, scripts/stripe-revenue-catalog-audit.js, scripts/stripe-live-status.js, scripts/stripe-revenue.js, scripts/sync-branch-protection.js, scripts/structured-prompt-driven.js, scripts/swarm-coordinator.js, scripts/subagent-profiles.js, scripts/student-consistent-training.js, scripts/switchyard-router.js, scripts/sync-telemetry-from-prod.js, scripts/sync-github-about.js, scripts/sync-version.js, scripts/sync-gh-secrets-from-env.sh, scripts/sync-repository-rulesets.js, scripts/synthetic-customer-panel.js, scripts/synthetic-data-provenance.js, scripts/synthetic-dpo.js, scripts/telemetry-analytics.js, scripts/task-context-result.js, scripts/tailscale-p2p-doctor.js, scripts/task-outcomes.js, scripts/tessl-export.js, scripts/temporal-decay-weighting.js, scripts/test-coverage.js, scripts/test-all.js, scripts/thumbgate-bench.js, scripts/thompson-sampling.js, scripts/thumbgate-daily-discoveries-publish.js, scripts/thumbgate_session_start.sh, scripts/thumbgate-search.js, scripts/thumbgate-daily-discoveries-publish.sh, scripts/thumbgate-spend-guard.js, scripts/thumbgate-board-loop.js, scripts/token-savings.js, scripts/tool-kpi-tracker.js, scripts/tool-contract-validator.js, scripts/tier-budget-guard.js, scripts/token-shunt-honesty.js, scripts/token-tco.js, scripts/trajectory-scorer.js, scripts/unicode-tag-block-normalize.js, scripts/triage-savings-calculator.js, scripts/typesafe-typed-questions.js, scripts/tool-registry.js, scripts/train_from_feedback.py, scripts/unified-revenue-rollup.js, scripts/upstream-contribution-engine.js, scripts/user-profile.js, scripts/validate-feedback.js, scripts/validate-social-post.js, scripts/universal-claim-evaluator.js, scripts/verification-loop.js, scripts/verify-npm-githead.js, scripts/validate-workflow-contract.js, scripts/verify-marketing-pages-deployed.js, scripts/verifier-scoring.js, scripts/vector-store.js, scripts/vulnerability-pre-action-diode.js, scripts/verify-obsidian-setup.sh, scripts/visitor-journey.js, scripts/verify-run.js, scripts/webhook-delivery.js, scripts/warm-outreach-targets.js, scripts/workflow-gate-checkpoint.js, scripts/weekly-auto-post.js, scripts/workflow-runs.js, scripts/wire-proof-gate.js, scripts/workflow-intake-queue.js, scripts/workflow-notebook.js, scripts/workos-production-guard.js, scripts/workspace-agent-routines.js, scripts/workload-identity-honesty.js, scripts/workspace-evolver.js, scripts/workflow-sentinel.js, scripts/workflow-sprint-intake.js, scripts/workspace-search-route.js, scripts/xmemory-lite.js, scripts/zai-smoke.js
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
ThumbGate — Frequently asked questions
- What is ThumbGate?
- ThumbGate is an AI plugin in the HOL registry. Pre-action infrastructure firewall for AI coding agents: feedback becomes lessons and prevention rules enforced by PreToolUse hooks across Claude Code, Codex, Gemini, and MCP
- How do I install ThumbGate?
- Install ThumbGate in your harness: Claude Code — /plugin marketplace add IgorGanapolsky/ThumbGate; Cursor — npx skills add IgorGanapolsky/ThumbGate; Antigravity CLI — npx skills add IgorGanapolsky/ThumbGate. Full step-by-step guidance is on the HOL plugin page.
- How do I install ThumbGate in Claude Code?
- To install ThumbGate in Claude Code, start with /plugin marketplace add IgorGanapolsky/ThumbGate. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
- How do I install ThumbGate in Cursor?
- To install ThumbGate in Cursor, start with npx skills add IgorGanapolsky/ThumbGate. The complete step-by-step install guide for Cursor is on the HOL plugin page.
- How do I install ThumbGate in Antigravity CLI?
- To install ThumbGate in Antigravity CLI, start with npx skills add IgorGanapolsky/ThumbGate. The complete step-by-step install guide for Antigravity CLI is on the HOL plugin page.
- Is ThumbGate free?
- Pricing for ThumbGate is published on its HOL plugin page when the maker schedules a launch.
- Who publishes ThumbGate?
- ThumbGate is published by IgorGanapolsky and listed on HOL.
- Is ThumbGate available now?
- ThumbGate availability is listed on its HOL plugin page.
Install Guidance
Install in Claude Code
Install through the Claude Code plugin marketplace.
- 1
Add the marketplace
Run this inside a Claude Code session.
claude code - 2
Install the plugin
Use the plugin name and the marketplace name shown by the previous command.
claude code - 3
Scripted alternative
Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.
shell
Plugin Manifest
{
"name": "thumbgate",
"description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
"version": "1.38.0",
"author": {
"name": "Igor Ganapolsky",
"email": "[email protected]",
"url": "https://thumbgate.ai"
},
"homepage": "https://thumbgate.ai",
"repository": "https://github.com/IgorGanapolsky/ThumbGate",
"license": "MIT",
"category": "developer-tools",
"keywords": [
"guardrails",
"pretooluse",
"hooks",
"feedback",
"rlhf",
"dpo",
"agent-safety",
"workflow-hardening",
"claude-desktop",
"desktop-extension",
"mcp",
"pre-action-checks",
"ai-agent-safety",
"memory"
],
"skills": "./",
"commands": "./.claude/commands/",
"hooks": "./hooks/hooks.json",
"mcpServers": "./.registry/mcp.json",
"interface": {
"displayName": "thumbgate",
"developerName": "IgorGanapolsky"
},
"holManifestOrigin": "repository",
"registryIndexVersion": 5
}Marketplace Source
- Repo URL
- https://github.com/IgorGanapolsky/ThumbGate
- Marketplace path
- Unknown
- Source path
- .
- Install policy
- Unspecified
Skills
86 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.
article-syndication-pipeline
.agents/skills/article-syndication-pipeline/SKILL.md
Technical article syndication pipeline for cross-posting Dev.to articles to CoderLegion and other developer platforms with canonical URL preservation, UTM parameter attribution, and contributor onboarding compliance.
autonomous-execution-mandate
.agents/skills/autonomous-execution-mandate/SKILL.md
Self-directed autonomous execution mandate and workflow skill for ThumbGate agents. Enforces zero-human-intervention task chaining, proactive CI/Trunk monitoring, automated conflict resolution, and evidence-first reporting without requiring manual prompt nudges from the user.
aws-strands-harness-not-clone
.agents/skills/aws-strands-harness-not-clone/SKILL.md
>
ci-gha-buildkite-patterns-not-clone
.agents/skills/ci-gha-buildkite-patterns-not-clone/SKILL.md
>
cobble-hot-store-compare-not-clone
.agents/skills/cobble-hot-store-compare-not-clone/SKILL.md
>
colab-compute-honesty-not-clone
.agents/skills/colab-compute-honesty-not-clone/SKILL.md
>
comet-session-logger
.agents/skills/comet-session-logger/SKILL.md
Live session logger and observability dashboard driver for Comet browser. Ensures every PR, deployment status check, CoderLegion/Dev.to publication, and Railway production health metric is actively logged and visualized in Comet tabs.
cyberstrike-compare-not-clone
.agents/skills/cyberstrike-compare-not-clone/SKILL.md
>
datadog-llm-obs-compare-not-clone
.agents/skills/datadog-llm-obs-compare-not-clone/SKILL.md
>
deeppattern-discipline-honesty-not-clone
.agents/skills/deeppattern-discipline-honesty-not-clone/SKILL.md
>
gitlab-sandbox-allowlist-not-trust
.agents/skills/gitlab-sandbox-allowlist-not-trust/SKILL.md
>
graphify
.agents/skills/graphify/SKILL.md
>
halo-trace-optimize-not-clone
.agents/skills/halo-trace-optimize-not-clone/SKILL.md
>
ideabrowser-connector
.agents/skills/ideabrowser-connector/SKILL.md
Secure IdeaBrowser agent connector with read-only vs mutating classification, zero plaintext credentials, and fail-closed pre-action diodes. Closes ThumbGate issue #3823.
infoq-architect-honesty-not-clone
.agents/skills/infoq-architect-honesty-not-clone/SKILL.md
>
jit-harness-compare-not-clone
.agents/skills/jit-harness-compare-not-clone/SKILL.md
>
meko-datapack-honesty-not-clone
.agents/skills/meko-datapack-honesty-not-clone/SKILL.md
>
mintlify-knowledge-honesty-not-clone
.agents/skills/mintlify-knowledge-honesty-not-clone/SKILL.md
>
model-distress-governance
.agents/skills/model-distress-governance/SKILL.md
>
nvidia-specdecode-al-doctor
.agents/skills/nvidia-specdecode-al-doctor/SKILL.md
>
openui-catalog-compose-honesty
.agents/skills/openui-catalog-compose-honesty/SKILL.md
>
package-manager-honesty-doctor
.agents/skills/package-manager-honesty-doctor/SKILL.md
>
salt-code-policy-honesty-not-clone
.agents/skills/salt-code-policy-honesty-not-clone/SKILL.md
>
show-me
.agents/skills/show-me/SKILL.md
>
siren-mcp-governance
.agents/skills/siren-mcp-governance/SKILL.md
>
skool-headless-reader
.agents/skills/skool-headless-reader/SKILL.md
Read, monitor, and analyze Skool communities or posts headlessly for lead discovery, customer pain, acquisition opportunities, or ThumbGate revenue research without blocking the user's browser.
tailscale-p2p-governance-not-clone
.agents/skills/tailscale-p2p-governance-not-clone/SKILL.md
>
thumbgate-board-loop
.agents/skills/thumbgate-board-loop/SKILL.md
>
thumbgate-daily-discoveries
.agents/skills/thumbgate-daily-discoveries/SKILL.md
Autonomous daily publishing engine and monitoring skill for ThumbGate news and technical discoveries. Generates high-density engineering posts with full UTM attribution, synchronizes to Obsidian, schedules dual cron/launchd runs at 9:00 AM EST, and tracks publication ledgers.
thumbgate
.agents/skills/thumbgate/SKILL.md
>-
token-shunt-honesty-not-clone
.agents/skills/token-shunt-honesty-not-clone/SKILL.md
>
typesafe-typed-questions-not-clone
.agents/skills/typesafe-typed-questions-not-clone/SKILL.md
>
vulnerability-pre-action-diode
.agents/skills/vulnerability-pre-action-diode/SKILL.md
>
zvec-grep-compare-not-clone
.agents/skills/zvec-grep-compare-not-clone/SKILL.md
>
ci-failure-triage
.claude/skills/ci-failure-triage/SKILL.md
>
evidence-first-answer
.claude/skills/evidence-first-answer/SKILL.md
Required pre-flight before answering any "why" or "are we" question about revenue, conversion, outbound, traffic, or commercial state. Forces verification of live data and distinguishes planning docs from telemetry. Triggered automatically when the CEO asks "are you sure?" — that phrase means the previous answer was wrong.
fleet-coordination
.claude/skills/fleet-coordination/SKILL.md
>
revenue-truth
.claude/skills/revenue-truth/SKILL.md
Fetch live ThumbGate revenue, paid orders, and funnel telemetry from production billing endpoints. Use BEFORE answering any question about money, conversion, traffic, or "why we didn't make X." Never quote planning documents as actuals.
scope-discipline
.claude/skills/scope-discipline/SKILL.md
>
task-state-ledger
.claude/skills/task-state-ledger/SKILL.md
>
thumbgate
.claude/skills/thumbgate/SKILL.md
Pre-action checks for AI agents - capture thumbs-up/down feedback, generate prevention rules, block known-bad patterns. Use for setup, feedback capture, check debugging, or DPO training data export.
graphify
.hermes/skills/graphify/SKILL.md
Use for any question about a codebase, its architecture, file relationships, or project content — especially when graphify-out/ exists, where the question should be treated as a graphify query first. Turns any input (code, docs, papers, images, videos) into a persistent knowledge graph with god nodes, community detection, and query/path/explain tools.
thumbgate-feedback
adapters/amp/skills/thumbgate-feedback/SKILL.md
Capture thumbs feedback and apply prevention rules before coding
thumbgate-pretool-gate
distribution/agensi/thumbgate-pretool-gate/SKILL.md
Hard-blocks secret exfiltration and repeats of a ranked lesson before a tool call, instead of warning and continuing. Use when the user asks to gate an agent, block a secret, stop a repeat mistake, capture thumbs-down feedback, check gate stats, or install ThumbGate.
thumbgate-feedback
plugins/amp-skill/SKILL.md
Dual-write feedback to Amp MCP memory AND thumbgate for DPO export, analytics, and cross-platform portability
adversarial-review
plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md
Run a skeptical Codex review from Claude Code that hunts for hidden regressions, unsafe assumptions, and release risk. Use before merges, deploys, migrations, or other risky changes.
result
plugins/claude-codex-bridge/skills/result/SKILL.md
Print the latest saved Codex bridge result from Claude Code without rerunning Codex. Use when the user asks for the last Codex output or wants to inspect the raw bridge result.
review
plugins/claude-codex-bridge/skills/review/SKILL.md
Run a Codex review from Claude Code against the current uncommitted work, a base branch diff, or a specific commit. Use when the user explicitly asks for a Codex review or second reviewer.
second-pass
plugins/claude-codex-bridge/skills/second-pass/SKILL.md
Hand the current task or repo state to Codex for an independent second pass from inside Claude Code. Use when the user explicitly wants another agent to take a shot after Claude's first pass.
setup
plugins/claude-codex-bridge/skills/setup/SKILL.md
Validate that the Codex bridge plugin is ready inside Claude Code. Use when the user asks to install, configure, or sanity-check Codex review from Claude.
status
plugins/claude-codex-bridge/skills/status/SKILL.md
Show the latest Codex bridge artifact metadata from Claude Code. Use when the user asks whether the bridge already ran, what mode it used, or where the result was saved.
thumbgate-feedback
plugins/claude-skill/SKILL.md
>
capture-feedback
plugins/cursor-marketplace/skills/capture-feedback/SKILL.md
Capture structured thumbs up/down feedback with context, history-aware lesson distillation, tags, and optional rubric scores after completing a task.
prevention-rules
plugins/cursor-marketplace/skills/prevention-rules/SKILL.md
Generate and review prevention rules auto-promoted from repeated failure patterns.
programmatic-agent-runs
plugins/cursor-marketplace/skills/programmatic-agent-runs/SKILL.md
Govern Cursor SDK local, cloud, self-hosted, and subagent coding runs before they create branches or PRs.
recall-context
plugins/cursor-marketplace/skills/recall-context/SKILL.md
Recall relevant past failures, prevention rules, and context packs before starting a coding task.
search-lessons
plugins/cursor-marketplace/skills/search-lessons/SKILL.md
Search promoted lessons for corrective actions, lifecycle state, linked rules, and linked gates.
thumbgate
SKILL.md
>
agent-architect-kit
skills/agent-architect-kit/SKILL.md
Agent Memory
skills/agent-memory/SKILL.md
Give your agent persistent cross-session memory — recall what went wrong on similar tasks before starting, then capture whether the work succeeded or failed so repeated mistakes auto-promote into prevention rules. Runs locally via the ThumbGate MCP server (recall, capture_feedback, prevention_rules, feedback_stats) — no API key needed. Use when the user says "recall", "what went wrong last time", "remember this for next time", "capture feedback", "thumbs up/down on that", or at the start of a new task or session. Do NOT use when the user wants to force one specific mistake into an enforced block gate (use the thumbgate-guard skill), to list rules that already exist (thumbgate-rules), or to check ThumbGate wiring (thumbgate-doctor).
applyops-deploy
skills/applyops-deploy/SKILL.md
article-syndication-pipeline
skills/article-syndication-pipeline/SKILL.md
Technical article syndication pipeline for cross-posting Dev.to articles to CoderLegion and other developer platforms with canonical URL preservation, UTM parameter attribution, and contributor onboarding compliance.
aws-strands-harness-not-clone
skills/aws-strands-harness-not-clone/SKILL.md
>
bluesky-engagement
skills/bluesky-engagement/SKILL.md
>
comet-session-logger
skills/comet-session-logger/SKILL.md
Live session logger and observability dashboard driver for Comet browser. Ensures every PR, deployment status check, CoderLegion/Dev.to publication, and Railway production health metric is actively logged and visualized in Comet tabs.
configure-analytics
skills/configure-analytics/SKILL.md
context-engineering-checklist
skills/context-engineering-checklist/SKILL.md
>
gsd-ralph-context-loop
skills/gsd-ralph-context-loop/SKILL.md
>
meko-datapack-honesty-not-clone
skills/meko-datapack-honesty-not-clone/SKILL.md
>
mintlify-knowledge-honesty-not-clone
skills/mintlify-knowledge-honesty-not-clone/SKILL.md
>
model-distress-governance
skills/model-distress-governance/SKILL.md
>
pull-funnel-data
skills/pull-funnel-data/SKILL.md
salt-code-policy-honesty-not-clone
skills/salt-code-policy-honesty-not-clone/SKILL.md
>
siren-mcp-governance
skills/siren-mcp-governance/SKILL.md
>
solve-architecture-autonomy
skills/solve-architecture-autonomy/SKILL.md
Course-correct from over-planning to execution — when the agent has produced a plan, research, or options instead of doing work the user already approved, drop the analysis and execute the smallest end-to-end action now (branch, run, deploy, verify). Use when the user says "stop planning, just do it", "why are you researching, execute", "just ship it", "enough analysis", or pushes back that you keep proposing instead of acting on an already-decided task. Do NOT use when the task is genuinely undecided and needs a plan first, when the user explicitly asked for research/options/a design, or for routine work where no over-planning has occurred — acting on an unscoped or destructive task is its own failure.
thumbgate-blocked
skills/thumbgate-blocked/SKILL.md
Show ThumbGate's enforcement record — how many risky actions were actually blocked versus warned, which gates fire most, the tokens/damage saved, and the full feedback to check to rejection pipeline. Reads live enforcement counters via the gate_stats and enforcement_matrix MCP tools (CLI fallback `npx thumbgate gate-stats`). Use when the user says "what has ThumbGate blocked", "show gate stats", "is enforcement working", "how many tokens did we save", "show the enforcement matrix", or "what got stopped". Do NOT use to list rule DEFINITIONS that exist (use the thumbgate-rules skill), to create a new rule (use the thumbgate-guard skill), or to check whether ThumbGate is installed and wired (use the thumbgate-doctor skill).
ThumbGate Brand Voice
skills/thumbgate-brand-voice/SKILL.md
Make any ThumbGate-facing copy — landing/pricing/compare/guide pages, README, postinstall banners, CLI receipts, Reddit/LinkedIn/Bluesky/Threads posts, docs, outreach drafts, blog/launch content — sound like ThumbGate: direct, technical, honest, anti-hype. Use BEFORE writing or editing customer-facing or marketing text, and when the user says "write a landing page", "draft a Reddit/LinkedIn post", "write the README", "make this on-brand", "punch up this copy", or "review this copy for voice". Do NOT use for code comments, commit messages, internal notes, or non-ThumbGate copy — and never to add fabricated traction or unsupported claims (honesty is the brand).
thumbgate-daily-discoveries
skills/thumbgate-daily-discoveries/SKILL.md
Autonomous daily publishing engine and monitoring skill for ThumbGate news and technical discoveries. Generates high-density engineering posts with full UTM attribution, synchronizes to Obsidian, schedules dual cron/launchd runs at 9:00 AM EST, and tracks publication ledgers.
thumbgate-doctor
skills/thumbgate-doctor/SKILL.md
Health-check whether ThumbGate is actually wired into this agent — PreToolUse/SessionStart hooks installed, MCP server reachable, lesson store present, statusline, and overall agent-readiness — then report exactly what to fix. Runs the existing `npx thumbgate doctor` audit and the check_operational_integrity MCP tool. Use when the user says "is ThumbGate wired up", "thumbgate doctor", "check my guardrails are installed", "why aren't my gates firing", "is the MCP server connected", or "agent readiness". Do NOT use to view rules (use the thumbgate-rules skill), to view what was blocked (use the thumbgate-blocked skill), or to capture a new rule (use the thumbgate-guard skill) — this skill only diagnoses setup and wiring.
thumbgate-feedback
skills/thumbgate-feedback/SKILL.md
>
thumbgate-guard
skills/thumbgate-guard/SKILL.md
Turn the agent's most recent mistake into an enforced ThumbGate prevention rule (a PreToolUse block gate) so the same bad tool call is intercepted before it runs again, in this and every future session across Claude Code, Cursor, Codex, Gemini, Amp, and Cline. Captures the failure with the capture_feedback MCP tool, then force-promotes it via `npx thumbgate force-gate` so it is enforced, not just logged. Use when the user says "guard against this", "block this from happening again", "never do that again", "make that a rule", "stop the agent from repeating that", or right after a bad action or thumbs-down that should become a hard rule. Do NOT use to merely log a thumbs-up/down without enforcement (use the thumbgate-feedback skill), to recall prior context before starting work (use the Agent Memory skill), or to list rules that already exist (use the thumbgate-rules skill).
thumbgate-protect
skills/thumbgate-protect/SKILL.md
Inspect this repo's branch and release governance (protected branches, release rules, protected-file globs) and, only when the user explicitly approves, grant a scoped, time-limited exception so a protected-file edit or publish can proceed under audit. Reads posture via the get_branch_governance MCP tool and records a narrow, expiring approval via the approve_protected_action MCP tool. Use when the user says "is main protected", "show branch governance", "what am I blocked from editing", "approve this protected change", or "let me edit a protected file just this once". Do NOT use to disable protection wholesale, to grant broad or standing exceptions, or to diagnose hook wiring (use the thumbgate-doctor skill) — this skill is for narrow, temporary, audited approvals only.
thumbgate-rules
skills/thumbgate-rules/SKILL.md
List the active ThumbGate prevention rules, reliability rules, and the promoted lessons behind them, so the user can see which guardrails are currently protecting this project and WHY each one exists. Reads the live rule and lesson stores via the prevention_rules, get_reliability_rules, and search_lessons MCP tools (CLI fallback `npx thumbgate rules`). Use when the user says "what is ThumbGate protecting me from", "show my rules", "show my gates", "what has the agent learned", "list active guardrails", or "what's blocked here". Do NOT use to CREATE a new rule (use the thumbgate-guard skill), to see runtime enforcement counts of what actually fired (use the thumbgate-blocked skill), or to diagnose whether ThumbGate is wired up at all (use the thumbgate-doctor skill).
thumbgate
skills/thumbgate/SKILL.md
>
verify-pricing-surfaces
skills/verify-pricing-surfaces/SKILL.md
vulnerability-pre-action-diode
skills/vulnerability-pre-action-diode/SKILL.md
>
File Inventory
.agents/plugins/marketplace.json
file
407 bytes
c83f99aa4dabad2d…
.agents/skills/article-syndication-pipeline/SKILL.md
skill
2,018 bytes
7aa9f56ab40633a1…
.agents/skills/autonomous-execution-mandate/SKILL.md
skill
2,522 bytes
bc7bbeebff3cfea5…
.agents/skills/aws-strands-harness-not-clone/SKILL.md
skill
2,145 bytes
7c3c9c35e0095f87…
.agents/skills/ci-gha-buildkite-patterns-not-clone/SKILL.md
skill
2,518 bytes
7ee3d9e2baeeb620…
.agents/skills/cobble-hot-store-compare-not-clone/SKILL.md
skill
3,033 bytes
42faaa784265f630…
.agents/skills/colab-compute-honesty-not-clone/SKILL.md
skill
2,373 bytes
255034a5c0220f2f…
.agents/skills/comet-session-logger/SKILL.md
skill
2,351 bytes
a9a667aa44a593d6…
.agents/skills/cyberstrike-compare-not-clone/SKILL.md
skill
1,443 bytes
94fd555d31ea1d74…
.agents/skills/datadog-llm-obs-compare-not-clone/SKILL.md
skill
2,695 bytes
c5f2b0e182cde5c4…
.agents/skills/deeppattern-discipline-honesty-not-clone/SKILL.md
skill
2,679 bytes
6cf2600eaffd537e…
.agents/skills/gitlab-sandbox-allowlist-not-trust/SKILL.md
skill
3,120 bytes
2f80a948fe025b2f…
.agents/skills/graphify/references/add-watch.md
file
2,959 bytes
b9d1564380ac1e6f…
.agents/skills/graphify/references/exports.md
file
3,362 bytes
ee47fae477f106d8…
.agents/skills/graphify/references/extraction-spec.md
file
7,960 bytes
f72a6d2dfa67446f…
.agents/skills/graphify/references/github-and-merge.md
file
2,177 bytes
e5ebd90c7686f503…
.agents/skills/graphify/references/hooks.md
file
1,270 bytes
7910939007ada796…
.agents/skills/graphify/references/query.md
file
13,820 bytes
fc3bfc8831a01de6…
.agents/skills/graphify/references/transcribe.md
file
3,173 bytes
676a1e39aa6d43cd…
.agents/skills/graphify/references/update.md
file
10,646 bytes
926ad025dc2bebd8…
.agents/skills/graphify/SKILL.md
skill
1,340 bytes
7a67756beee6dc63…
.agents/skills/halo-trace-optimize-not-clone/SKILL.md
skill
2,113 bytes
8a440c93b743cb3c…
.agents/skills/ideabrowser-connector/SKILL.md
skill
1,818 bytes
de30761319b2c770…
.agents/skills/infoq-architect-honesty-not-clone/SKILL.md
skill
1,390 bytes
e0905955017e7ef9…
.agents/skills/jit-harness-compare-not-clone/SKILL.md
skill
1,275 bytes
7cfc5ce83e7c3207…
.agents/skills/meko-datapack-honesty-not-clone/SKILL.md
skill
1,818 bytes
3122fc0d1be5face…
.agents/skills/mintlify-knowledge-honesty-not-clone/SKILL.md
skill
2,093 bytes
fc931dc6c938b2b5…
.agents/skills/model-distress-governance/SKILL.md
skill
2,918 bytes
9146c97a47033d49…
.agents/skills/nvidia-specdecode-al-doctor/SKILL.md
skill
1,060 bytes
b7e877d25f44758d…
.agents/skills/openui-catalog-compose-honesty/SKILL.md
skill
2,229 bytes
6a8827c60bc281d4…
.agents/skills/package-manager-honesty-doctor/SKILL.md
skill
774 bytes
8b221aa9be0dbda5…
.agents/skills/salt-code-policy-honesty-not-clone/SKILL.md
skill
3,133 bytes
19590099e8a03df3…
.agents/skills/show-me/SKILL.md
skill
1,761 bytes
5ecbc45b90f8ccff…
.agents/skills/siren-mcp-governance/SKILL.md
skill
2,249 bytes
64b56433c41e3e73…
.agents/skills/skool-headless-reader/agents/openai.yaml
file
237 bytes
7ea681784ad03297…
.agents/skills/skool-headless-reader/SKILL.md
skill
2,716 bytes
3cb4b82fd51d0db1…
.agents/skills/tailscale-p2p-governance-not-clone/SKILL.md
skill
2,373 bytes
d93488f58257c861…
.agents/skills/thumbgate-board-loop/SKILL.md
skill
2,481 bytes
c6dd15ac20da6fe9…
.agents/skills/thumbgate-daily-discoveries/SKILL.md
skill
2,815 bytes
99341bf219123ed7…
.agents/skills/thumbgate/references/gate-config.md
file
2,187 bytes
a4fff67ca4b334da…
.agents/skills/thumbgate/references/setup-guides.md
file
1,239 bytes
b5a01182667dc176…
.agents/skills/thumbgate/SKILL.md
skill
4,394 bytes
12abb0e597b15330…
.agents/skills/token-shunt-honesty-not-clone/SKILL.md
skill
2,454 bytes
ad5a363d1e139bb3…
.agents/skills/typesafe-typed-questions-not-clone/SKILL.md
skill
4,166 bytes
8d0bc29c8bda2af5…
.agents/skills/vulnerability-pre-action-diode/SKILL.md
skill
1,852 bytes
fc3a9d3cc74b908d…
.agents/skills/zvec-grep-compare-not-clone/SKILL.md
skill
1,136 bytes
9c005ab391d9bdf5…
.changeset/buyer-demo-proof.md
file
243 bytes
2ca07a56508c8595…
.changeset/config.json
file
271 bytes
29908e3bb90e2fab…
.changeset/dependabot-pr-4040.md
file
160 bytes
b23b03ced87e25ba…
.changeset/dependabot-pr-4041.md
file
153 bytes
12dae1f92986f7bd…
.changeset/dependabot-pr-4042.md
file
160 bytes
d64f295b29cd7533…
.changeset/dependabot-pr-4043.md
file
177 bytes
a5d18117828940bf…
.changeset/fix-mailer-default-from-identity.md
file
140 bytes
bc06475070574b0f…
.changeset/isolate-daily-discovery-publisher-tests.md
file
358 bytes
ed4a98b320e3c3c7…
.changeset/railway-credential-selection.md
file
195 bytes
6b975a082680921f…
.changeset/README.md
file
703 bytes
386c88f2ccb74edd…
.changeset/recover-scoped-lesson-graph.md
file
250 bytes
94a73ed152140c32…
.changeset/siren-mcp-governance.md
file
118 bytes
baecc6f4c377fd63…
.changeset/siren-posting-policy.md
file
128 bytes
d97cd836cb7427d1…
.changeset/triage-vulnerability-diode.md
file
208 bytes
4570a3964eb931ce…
.claude-plugin/bundle/icon.svg
file
950 bytes
f7f7efd157bfcba9…
.claude-plugin/bundle/server/index.js
file
1,053 bytes
bc0dd396daeb3399…
.claude-plugin/marketplace.json
file
3,418 bytes
101865ebbe8e90f1…
.claude-plugin/plugin.json
file
1,086 bytes
92b0fe5750fa9d31…
.claude-plugin/README.md
file
7,384 bytes
7db22ffdc8632fa5…
.claude/commands/dashboard.md
file
561 bytes
caf20010d28fcac2…
.claude/commands/thumbgate-blocked.md
file
1,404 bytes
c616913dd3a445fd…
.claude/commands/thumbgate-dashboard.md
file
1,059 bytes
c2c01923a764d581…
.claude/commands/thumbgate-doctor.md
file
1,415 bytes
c92869eef4d74662…
.claude/commands/thumbgate-guard.md
file
2,016 bytes
9b7254f4c764ad2f…
.claude/commands/thumbgate-protect.md
file
1,746 bytes
337a43b80300ec03…
.claude/commands/thumbgate-rules.md
file
1,363 bytes
e64cfad096edfbd7…
.claude/context-engine/knowledge-index.json
file
16,353 bytes
e37026289350889c…
.claude/memory/mistakes/2026-06-14-false-completion.md
file
340 bytes
e552a9cb1fb48170…
.claude/rules/pr-thread-policy.md
file
1,375 bytes
659b6e5ce2b4eca5…
.claude/scripts/feedback/capture-feedback.js
file
7,628 bytes
ee4a343f7cda66c4…
.claude/scripts/session-bootstrap/fleet-coordination-check.sh
file
6,768 bytes
077d1835549bfbba…
.claude/scripts/session-bootstrap/revenue-truth.sh
file
3,768 bytes
816f8d30d196b4b2…
.claude/settings.json
file
1,908 bytes
fc98c9808024d65f…
.claude/skills/ci-failure-triage/SKILL.md
skill
4,197 bytes
275f0b5e13658a93…
.claude/skills/evidence-first-answer/SKILL.md
skill
4,371 bytes
a15508b95be37a02…
.claude/skills/fleet-coordination/SKILL.md
skill
3,456 bytes
43621136ad37585c…
.claude/skills/paperbanana-diagrams.md
file
2,568 bytes
575af5f581f24dc1…
.claude/skills/revenue-truth/SKILL.md
skill
7,322 bytes
e13504e3be5c17f9…
.claude/skills/scope-discipline/SKILL.md
skill
3,235 bytes
b4287a5a4712b360…
.claude/skills/task-state-ledger/SKILL.md
skill
3,802 bytes
1a254c55dae083de…
.claude/skills/thumbgate/references/gate-config.md
file
2,187 bytes
a4fff67ca4b334da…
.claude/skills/thumbgate/references/setup-guides.md
file
1,239 bytes
b5a01182667dc176…
.claude/skills/thumbgate/SKILL.md
skill
4,157 bytes
d1d9f77373492db2…
.codex-plugin/plugin.json
plugin-manifest
910 bytes
9a3bfe8fb2e67467…
.cursor-plugin/marketplace.json
file
852 bytes
adfa449b928781da…
.gitar/config/approve.md
file
1,064 bytes
d6addb81ec03e117…
.gitar/review/thumbgate-core-review-rules.md
file
2,766 bytes
ac3b0b1c8a129d6c…
.gitar/review/thumbgate-feedback-to-rules.md
file
1,416 bytes
bd4f08a4567f4152…
.gitguardian.yaml
file
1,730 bytes
99b05a548524031d…
.github/agents/thumbgate.agent.md
file
900 bytes
28d614bd2851db4e…
.github/BOT-INTEGRATIONS.md
file
13,050 bytes
761415cf73df74b9…
.github/dependabot.yml
file
1,020 bytes
3a689a3b9290cc89…
.github/FUNDING.yml
file
108 bytes
9d48c4ad5c02aaf8…
.github/GITHUB_APP_SETUP.md
file
5,309 bytes
87fd6eecf80f3886…