T

ThumbGate

Pre-action infrastructure firewall for AI coding agents: feedback becomes lessons and prevention rules enforced by PreToolUse hooks across Claude Code, Codex, Gemini, and MCP

igorganapolsky/thumbgate · v1.38.0 · Development & Workflow

IgorGanapolskycaution

Trust Score

65

Security

64

Surfaces

89

What is ThumbGate?

ThumbGate is a published development & workflow plugin for AI coding agents in the claude-code ecosystem, developed by IgorGanapolsky and distributed through the HOL AI plugin registry. Pre-action infrastructure firewall for AI coding agents: feedback becomes lessons and prevention rules enforced by PreToolUse hooks across Claude Code, Codex, Gemini, and MCP

Canonical slug
igorganapolsky/thumbgate
Version
v1.38.0 · updated Oct 9, 2026

Trust & Reputation

HOL Trust Score
65

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64pts
Maintenance
100pts
MCP Posture
100pts
Plugin Security
64pts
Provenance
70pts
Publisher Quality
75pts

Registry Snapshot

Publisher verification
No
Marketplace source
Unknown
Scanner
Broker fallback
Safety label
caution
Digest verified
Yes
86 bundled skills — copy or download SKILL.mdOpen skills

Trust & reputation

Trust & Reputation

HOL Trust Score
65

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64pts
Maintenance
100pts
MCP Posture
100pts
Plugin Security
64pts
Provenance
70pts
Publisher Quality
75pts

Provenance

Plugin root
.
Source repo
https://github.com/IgorGanapolsky/ThumbGate
Source commit
dd796ed2331b…
Publisher verified
No
Owner verified
Not owner verified

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

Verified badge not detected

Add the HOL verified badge to the repository README to score +2% trust. Plugin owners can open that pull request from Guard Plugins.

Security Posture

caution
Safety label
64
Security score
0
High findings
Provider
registry-broker-fallback
Grade
D · caution
Version
Unknown
cisco-skill-scanner: unknown

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

infoskill-securityskill-scan.unavailable

Script permission declarations are required for scripts/: scripts/RAG_IMPROVEMENTS_REPORT.md, scripts/a-plus-evidence-scorecard.js, scripts/TEMPORAL_DECAY_README.md, scripts/a2ui-engine.js, scripts/activation-tracker.js, scripts/activation-quickstart.js, scripts/adaptive-governance-arena.js, scripts/action-receipts.js, scripts/access-anomaly-detector.js, scripts/adk-consolidator.js, scripts/agent-egress-policy.js, scripts/admin-override.js, scripts/agent-memory-lifecycle.js, scripts/agent-design-governance.js, scripts/agent-audit-trace.js, scripts/agent-action-inventory.js, scripts/agent-readiness-plan.js, scripts/agent-outcome-eval.js, scripts/agent-outcome-monitor.js, scripts/agent-reasoning-traces.js, scripts/agent-readiness.js, scripts/agent-operations-planner.js, scripts/agent-security-hardening.js, scripts/agent-stack-survival-audit.js, scripts/agent-reward-model.js, scripts/agent-security-central.js, scripts/agents-sdk-sandbox-plan.js, scripts/agentic-data-pipeline.js, scripts/ai-engineering-stack-guardrails.js, scripts/ai-component-inventory.js, scripts/ai-org-governance.js, scripts/ai-identity-checklist.js, scripts/ai-search-distribution.js, scripts/ai-governance-operating-plan.js, scripts/analytics-window.js, scripts/ai-search-visibility.js, scripts/aiventyx-marketplace-plan.js, scripts/allowlist-bridge-honesty.js, scripts/apollo-acquisition.js, scripts/analytics-report.js, scripts/audit.js, scripts/artifact-agent-plan.js, scripts/async-eval-observability.js, scripts/audit-trail.js, scripts/audit-pr-bot-contamination.js, scripts/async-job-runner.js, scripts/autonomous-sales-agent.js, scripts/auto-context-packs.js, scripts/autonomous-reliability-explorer.js, scripts/autonomous-workflow.js, scripts/auto-promote-gates.js, scripts/auto-wire-hooks.js, scripts/belief-update.js, scripts/behavioral-extraction.js, scripts/bayes-optimal-gate.js, scripts/aws-blocks-guardrails.js, scripts/background-agent-governance.js, scripts/autoresearch-runner.js, scripts/bluesky-delete-replies.js, scripts/bluesky-monitor-launchd.js, scripts/bluesky-list-actionable.js, scripts/bluesky-monitor-cron.sh, scripts/billing.js, scripts/billing-setup.js, scripts/budget-enforcer.js, scripts/broker-execution-receipts.js, scripts/budget-aware-gates-proof.js, scripts/budget-guard.js, scripts/bot-detection.js, scripts/break-glass-gates-propose.js, scripts/buyer-paths.js, scripts/build-grok-plugin.js, scripts/build-codex-plugin.js, scripts/build-metadata.js, scripts/build-claude-mcpb.js, scripts/capture-railway-diagnostics.sh, scripts/chatgpt-ads-readiness-pack.js, scripts/check-posts.py, scripts/changeset-check.js, scripts/check-update.js, scripts/check-congruence.js, scripts/chatgpt-gpt-revenue-pack.js, scripts/ci-cd-hygiene-audit.js, scripts/classifier-routing.js, scripts/ci-gha-buildkite-patterns.js, scripts/checkout-attribution-reference.js, scripts/claude-feedback-sync.js, scripts/claude-workflow-hardening-pack.js, scripts/cli-progress.js, scripts/claw-harness-production.js, scripts/cli-feedback.js, scripts/cli-schema.js, scripts/cli-demo.js, scripts/cli-status.js, scripts/cloudflare-dynamic-sandbox.js, scripts/code-reasoning.js, scripts/code-mode-mcp-plan.js, scripts/code-graph-guardrails.js, scripts/cli-telemetry.js, scripts/cobble-hot-store-split.js, scripts/codex-self-heal.js, scripts/codegraph-context.js, scripts/codex-marketplace-revenue-pack.js, scripts/codex-runbook-flywheel.js, scripts/colab-compute-honesty.js, scripts/codex-plugin-revenue-pack.js, scripts/config-strict-parse.js, scripts/colbert-style-maxsim.js, scripts/computer-use-firewall.js, scripts/compact-memory-store.js, scripts/commercial-offer.js, scripts/content-engine/linkedin-content-generator.js, scripts/context-footprint.js, scripts/content-engine/output/linkedin-posts-2026-04-09.md, scripts/content-engine/reddit-thread-finder.js, scripts/context-engine.js, scripts/content-engine/output/linkedin-memento-validation.md, scripts/context-manager.js, scripts/creator-campaigns.js, scripts/conversation-context.js, scripts/conversion-rate-stats.js, scripts/create-pre-eci-archive.js, scripts/cost-cli.js, scripts/contextfs.js, scripts/daemon-manager.js, scripts/cursor-marketplace-doctor.js, scripts/daily-digest.js, scripts/dashboard-chat.js, scripts/daily-discoveries-topics.json, scripts/cross-encoder-reranker.js, scripts/dashboard-limits.js, scripts/data-governance.js, scripts/data-table-agent.js, scripts/dashboard-render-spec.js, scripts/dashboard.js, scripts/decision-journal.js, scripts/demo/zero-egress-proof.sh, scripts/deepseek-v4-runtime-guardrails.js, scripts/decision-trace.js, scripts/deeppattern-discipline-honesty.js, scripts/delegation-runtime.js, scripts/demo/legal-gate-pattern-proof.js, scripts/dependabot-changeset.js, scripts/deploy-policy.js, scripts/deploy-scope.sh, scripts/diagnostic-chrome.py, scripts/deploy-gcp.sh, scripts/disagreement-mining.js, scripts/distribution-surfaces.js, scripts/double-blind-eval-protocol.js, scripts/dispatch-brief.js, scripts/document-intake.js, scripts/docker-sandbox-planner.js, scripts/document-workflow-governance.js, scripts/durability/step.js, scripts/ensure-production-search-corpus.js, scripts/enforcement-provenance-check.js, scripts/edotenv-rl-gateway.js, scripts/ensure-repo-bootstrap.js, scripts/dpo-optimizer.js, scripts/eval-baseline.js, scripts/eval-harness.js, scripts/eval-holdout.js, scripts/enterprise-agent-rollout.js, scripts/ephemeral-agent-store.js, scripts/entitlement.js, scripts/eval-risk-model.js, scripts/evolution-state.js, scripts/eval_gate_classifier.py, scripts/experience-replay-governance.js, scripts/eval-quality-suite.js, scripts/eval-rag.js, scripts/experiment-tracker.js, scripts/explore.js, scripts/explainx-trending-honest.js, scripts/explore-subcommands.js, scripts/export-databricks-bundle.js, scripts/export-dpo-pairs.js, scripts/feedback-aggregate.js, scripts/export-hf-dataset.js, scripts/failure-diagnostics.js, scripts/export-training.js, scripts/external-customer-audit.js, scripts/export-kto-pairs.js, scripts/feedback-history-distiller.js, scripts/feedback-inbox-read.js, scripts/feedback-paths.js, scripts/feedback-attribution.js, scripts/feedback-loop.js, scripts/feedback-fallback.js, scripts/feedback-sanitizer.js, scripts/feedback-root-consolidator.js, scripts/feedback-schema.js, scripts/feedback-to-memory.js, scripts/feedback-session.js, scripts/feedback-quality.js, scripts/find-dormant-requires.js, scripts/feedback_quality_eval.py, scripts/filesystem-search.js, scripts/file-ledger-lock.js, scripts/financial-control-plane.js, scripts/feedback-to-rules.js, scripts/future-agi-evaluator.js, scripts/funnel-analytics.js, scripts/gate-decision-canary.js, scripts/fs-utils.js, scripts/gate-coherence.js, scripts/futureagi-prepost-gate.js, scripts/gates/cloud-egress-confirm.js, scripts/gate-satisfy.js, scripts/gate-eval.js, scripts/gate-stats.js, scripts/gate-templates.js, scripts/gates-engine.js, scripts/generate-case-study-outreach.js, scripts/gemini-embedding-policy.js, scripts/gemini-cli-demand-pack.js, scripts/generate-eval-scorecard.js, scripts/gates/tokenomics-cost-guard.js, scripts/generate-numbers-page.js, scripts/generate-pretool-hook.sh, scripts/gist-prompt-budget.js, scripts/git-at-scale.js, scripts/git-hook-installer.js, scripts/github-about.js, scripts/generate-paperbanana-diagrams.sh, scripts/graphify-readiness.js, scripts/github-outreach.js, scripts/grafana-revenue-evidence.js, scripts/github-achievement-honesty.js, scripts/governance-difficulty-curriculum.js, scripts/governance-conflict-audit.js, scripts/graphrag-schema-first-multi-hop.js, scripts/graphify-staleness-check.js, scripts/growth-campaigns.js, scripts/graphify-setup.js, scripts/graphrag-retrieval.js, scripts/gtm-revenue-loop.js, scripts/gurobi_optimizer.py, scripts/halo-trace-optimizer.js, scripts/gurobi-systemwide-install.sh, scripts/harness-selector.js, scripts/gurobi-optimizer.js, scripts/hallucination-detector.js, scripts/history-distiller.js, scripts/hidden-entry-points.js, scripts/harness-tool-names.js, scripts/hook-auto-capture.sh, scripts/hook-pre-tool-use.js, scripts/hf-papers.js, scripts/hook-stop-verify-deploy.sh, scripts/hook-stop-anti-claim.js, scripts/hook-thumbgate-cache-updater.js, scripts/hook-runtime.js, scripts/hook-stop-self-score.sh, scripts/hook-stop-pr-thread-check.sh, scripts/hosted-job-launcher.js, scripts/human-escalation.js, scripts/hybrid-supervisor-agent.js, scripts/imperative-detector.js, scripts/hosted-config.js, scripts/hybrid-feedback-context.js, scripts/index-leaf-context.js, scripts/inference-economics.js, scripts/inference-cache-policy.js, scripts/infoq-engage.js, scripts/implementation-notes.js, scripts/infoq-architect-honesty.js, scripts/install-spend-guard.js, scripts/install-drift-watch.sh, scripts/install-shim.js, scripts/install-revenue-truth-automation.js, scripts/install-mcp.js, scripts/ingest-manual-feedback.js, scripts/intent-scope-runtime.js, scripts/integrations/architect-kit-memory-bridge.js, scripts/integrations/memory-provider-enforcement-bridge.js, scripts/intent-router.js, scripts/install-thumbgate-daily-publish-launchd.sh, scripts/intent-governed-execution.js, scripts/internal-agent-bootstrap.js, scripts/jit-harness-compose.js, scripts/jsonl-watcher.js, scripts/ir-metrics.js, scripts/intervention-policy.js, scripts/jsonl-window.js, scripts/leak-scanner.js, scripts/judge-reward-function.js, scripts/latency-budget.js, scripts/knowledge-layer-plan.js, scripts/knowledge-graph-fuse.js, scripts/lesson-canonical.js, scripts/lesson-embedding-maintenance.js, scripts/lesson-embedding-index.js, scripts/lesson-graph.js, scripts/lesson-inference.js, scripts/lesson-db.js, scripts/lesson-reranker.js, scripts/lesson-synthesis.js, scripts/lib/bluesky-atproto.js, scripts/lesson-rotation.js, scripts/lesson-search.js, scripts/lesson-retrieval.js, scripts/license.js, scripts/llm-behavior-monitor.js, scripts/long-running-agent-context-guardrails.js, scripts/local-model-profile.js, scripts/llm-obs-honesty.js, scripts/linkedin-workflow-hardening-pack.js, scripts/llm-client.js, scripts/managed-dpo-export.js, scripts/mailer/resend-mailer.js, scripts/mailer/index.js, scripts/managed-lesson-agent.js, scripts/mantis-critic-review.js, scripts/markdown-escape.js, scripts/matryoshka-embedding.js, scripts/mcp-config.js, scripts/may-2026-revenue-machine.js, scripts/mcp-oauth.js, scripts/marketing-experiment.js, scripts/mcp-directory-revenue-pack.js, scripts/mcp-writeguard.js, scripts/mcp-transport-strategy.js, scripts/mcp-wiring-doctor.js, scripts/mcp-policy.js, scripts/medium-weekly.js, scripts/mcp-session-handles.js, scripts/memory-migration.js, scripts/memalign-recall.js, scripts/memory-firewall.js, scripts/memory-near-dupe.js, scripts/memory-scope-readiness.js, scripts/meko-datapack-honesty.js, scripts/migrate-lesson-graph.js, scripts/memory-vs-rag-route.js, scripts/meta-policy.js, scripts/metered-billing.js, scripts/meta-agent-loop.js, scripts/memory-store-governance.js, scripts/model-access-eligibility.js, scripts/mine-eval-set.js, scripts/model-candidates.js, scripts/model-distress-detector.js, scripts/model-calibration.js, scripts/mintlify-knowledge-honesty.js, scripts/monitor-launchd-common.js, scripts/model-migration-readiness.js, scripts/model-distress-doctor.js, scripts/model-eval.js, scripts/money-watcher.js, scripts/model-tier-router.js, scripts/native-messaging-audit.js, scripts/multimodal-retrieval-plan.js, scripts/npm-oidc-cli-floor.js, scripts/noop-detect.js, scripts/multi-hop-recall.js, scripts/natural-language-harness.js, scripts/observability-env.js, scripts/nvidia-specdecode-al-doctor.js, scripts/observability-setup.js, scripts/obsidian-export.js, scripts/nvhbm-base-die-gates.js, scripts/okara-money-promo-automation.js, scripts/operational-dashboard.js, scripts/openclaw-agent-governance-kit.js, scripts/operational-summary.js, scripts/operator-artifacts.js, scripts/operational-integrity.js, scripts/openui-catalog-compose-honesty.js, scripts/org-dashboard.js, scripts/override-audit.js, scripts/oss-pr-opportunity-scout.js, scripts/package-manager-honesty-doctor.js, scripts/otel-declarative-config.js, scripts/optimize-context.js, scripts/partner-orchestration.js, scripts/per-step-scoring.js, scripts/perf-budget-check.js, scripts/parallel-workflow-orchestrator.js, scripts/perplexity-client.js, scripts/perplexity-command-center.js, scripts/pii-scanner.js, scripts/plausible-server-events.js, scripts/plausible-domain-config.js, scripts/post-action-verification-window.js, scripts/perplexity-marketing.js, scripts/plan-gate.js, scripts/pr-manager.js, scripts/postgres-guard.js, scripts/pragmatic-hybrid-search.js, scripts/post-everywhere.js, scripts/post-training-governance.js, scripts/predictive-insights.js, scripts/principle-extractor.js, scripts/proactive-agent-eval-guardrails.js, scripts/problem-detail.js, scripts/pro-local-dashboard.js, scripts/private-core-boundary.js, scripts/pro-features.js, scripts/prompt-guard.js, scripts/profile-router.js, scripts/production-agent-readiness.js, scripts/product-feedback.js, scripts/prompt-eval.js, scripts/prompt-dlp.js, scripts/prompting-operating-system.js, scripts/prompt-programs.js, scripts/proof-common.js, scripts/prove-attribution.js, scripts/prove-automation.js, scripts/prove-adapters.js, scripts/prove-evolution.js, scripts/prove-claim-verification.js, scripts/prove-data-quality.js, scripts/prove-autoresearch.js, scripts/prove-data-pipeline.js, scripts/prove-cloudflare-sandbox.js, scripts/prove-hf-context.js, scripts/prove-herdr-adapter.js, scripts/prove-harnesses.js, scripts/prove-intelligence.js, scripts/prove-lancedb.js, scripts/prove-glama-mcp-start.js, scripts/prove-local-intelligence.js, scripts/prove-memory-pyramid-and-symbolic-canvas.js, scripts/prove-packaged-runtime.js, scripts/prove-loop-closure.js, scripts/prove-predictive-insights.js, scripts/prove-production-authenticated.js, scripts/prove-reliability.js, scripts/prove-rag-pipeline.js, scripts/prove-settings.js, scripts/prove-tessl.js, scripts/prove-runtime.js, scripts/prove-seo-gsd.js, scripts/prove-workos.js, scripts/prove-workflow-contract.js, scripts/prove-training-export.js, scripts/prove-xmemory.js, scripts/prove-vlt-dogfood.js, scripts/prove-vlt.js, scripts/provider-receipt-contract.js, scripts/provider-payment-reconciler.js, scripts/provider-revenue-evidence.js, scripts/provider-attestation-conformance.js, scripts/provider-live-evidence.js, scripts/provider-action-normalizer.js, scripts/publish-decision.js, scripts/published-cli.js, scripts/proxy-pointer-rag-guardrails.js, scripts/publish-linkedin-browser.py, scripts/publish-bluesky-direct.js, scripts/pulse.js, scripts/qwen38-max-cost-optimizer.js, scripts/rag-answer-quality-eval.js, scripts/rag-embedding-identity.js, scripts/radware-threat-defense.js, scripts/qa-scenario-planner.js, scripts/rag-document-pipeline.js, scripts/rate-limiter.js, scripts/rag-precision-guardrails.js, scripts/ragas-style-metrics.js, scripts/rag-structured-output.js, scripts/reasoning-efficiency-guardrails.js, scripts/rag-stage-contracts.js, scripts/reddit-monitor-cron.sh, scripts/reddit-dm-outreach.js, scripts/redteam-5-attacks.js, scripts/reddit-dm-workflow-hardening-pack.js, scripts/reddit-browser-notification-watch.js, scripts/reddit-monitor-launchd.js, scripts/reflector-agent.js, scripts/reminder-engine.js, scripts/release-notes.js, scripts/release-window.js, scripts/refresh-proof-pack.js, scripts/reliability-invariants.js, scripts/repeat-metric.js, scripts/render-demo-video/README.md, scripts/remote-feedback-capture.js, scripts/render-demo-video/generate-narration.js, scripts/render-demo-video/render.js, scripts/render-demo-video/index.html, scripts/request-envelope.js, scripts/retrieval-hybrid-ablation.js, scripts/require-proof.js, scripts/research-agent-harness.js, scripts/rerank-quality-eval.js, scripts/rerank-pipeline.js, scripts/retrieval-ranking-eval.js, scripts/retrieval-quality-tier.js, scripts/revenue-email-dispatch.js, scripts/revenue-observability-doctor.js, scripts/revenue-action-eligibility.js, scripts/revenue-evidence-remediation.js, scripts/revenue-pack-utils.js, scripts/reward-hacking-guardrails.js, scripts/risk-scorer.js, scripts/revenue-target-control.js, scripts/revenue-status.js, scripts/revenue-offer-system.js, scripts/rsi-safety-hillclimb.js, scripts/rlaif-self-audit.js, scripts/rotate-stripe-webhook-secret.js, scripts/rrsi-doctor.js, scripts/rrsi-regularizer.js, scripts/roo-sunset-demand-pack.js, scripts/rubric-engine.js, scripts/rule-validator.js, scripts/rule-sprawl.js, scripts/scaling-law-claims.js, scripts/salt-code-policy-honesty.js, scripts/sales-pipeline.js, scripts/schedule-manager.js, scripts/secret-redaction.js, scripts/secret-fixture-tokens.js, scripts/security-scanner.js, scripts/secret-scanner.js, scripts/self-distill-agent.js, scripts/self-healing-check.js, scripts/semantic-layer.js, scripts/self-harness-optimizer.js, scripts/self-heal.js, scripts/self-protection.js, scripts/semantic-dedup.js, scripts/session-health-sensor.js, scripts/session-analyzer.js, scripts/session-episode-store.js, scripts/sequence-guard.js, scripts/session-attribution-summary.js, scripts/seo-gsd.js, scripts/settings-hierarchy.js, scripts/shieldcortex-memory-firewall-runner.mjs, scripts/session-report.js, scripts/simatree-data-governance.js, scripts/silent-failure-cluster.js, scripts/session-lease.js, scripts/skill-exporter.js, scripts/single-use-credential-gate.js, scripts/six-function-agent-team.js, scripts/skill-library-compact.js, scripts/skill-generator.js, scripts/siren-mcp-governance.js, scripts/skill-proposer.js, scripts/skill-materializer.js, scripts/skill-packs.js, scripts/skill-quality-tracker.js, scripts/skool-reader.js, scripts/skill-rag-router.js, scripts/slow-loop.js, scripts/social-analytics/cleanup-zernio-duplicates.js, scripts/social-analytics/db/marketing-db.js, scripts/slo-alert-engine.js, scripts/slopsquat-guard.js, scripts/social-analytics/cli-entrypoint.js, scripts/social-analytics/generate-instagram-card.js, scripts/social-analytics/generate-applyops-instagram-card.js, scripts/social-analytics/instagram-thumbgate-post.js, scripts/social-analytics/engagement-audit.js, scripts/social-analytics/digest.js, scripts/social-analytics/generate-slides.js, scripts/social-analytics/install-growth-automation.js, scripts/social-analytics/load-env.js, scripts/social-analytics/mcp-server.js, scripts/social-analytics/notify.js, scripts/social-analytics/platform-limits.js, scripts/social-analytics/normalizer.js, scripts/social-analytics/pollers/github.js, scripts/social-analytics/pollers/instagram.js, scripts/social-analytics/pollers/reddit.js, scripts/social-analytics/pollers/plausible.js, scripts/social-analytics/poll-all.js, scripts/social-analytics/pollers/linkedin.js, scripts/social-analytics/pollers/threads.js, scripts/social-analytics/pollers/youtube.js, scripts/social-analytics/post-ledger.js, scripts/social-analytics/pollers/zernio.js, scripts/social-analytics/post-video.js, scripts/social-analytics/pollers/tiktok.js, scripts/social-analytics/publish-latest-release-article.js, scripts/social-analytics/publishers/bluesky.js, scripts/social-analytics/publish-instagram-thumbgate.js, scripts/social-analytics/publish-applyops-instagram.js, scripts/social-analytics/publish-latest-release-fallbacks.js, scripts/social-analytics/publish-thumbgate-launch.js, scripts/social-analytics/publishers/devto.js, scripts/social-analytics/publishers/linkedin-comment.js, scripts/social-analytics/publishers/hashnode.js, scripts/social-analytics/publishers/instagram.js, scripts/social-analytics/publishers/linkedin-quote-post.js, scripts/social-analytics/publishers/linkedin.js, scripts/social-analytics/publishers/youtube.js, scripts/social-analytics/publishers/threads.js, scripts/social-analytics/publishers/x.js, scripts/social-analytics/publishers/tiktok.js, scripts/social-analytics/publishers/medium.js, scripts/social-analytics/publishers/reddit.js, scripts/social-analytics/store.js, scripts/social-analytics/run-publish-thumbgate-launch.js, scripts/social-analytics/publishers/zernio.js, scripts/social-analytics/run-digest.js, scripts/social-analytics/schedule-thumbgate-campaign.js, scripts/social-analytics/reconcile-thumbgate-campaign.js, scripts/social-analytics/utm.js, scripts/social-analytics/zernio-status.js, scripts/social-analytics/verify-marketing-agent-campaign.js, scripts/social-analytics/sync-launch-assets.js, scripts/social-analytics/verify-latest-release-posts.js, scripts/social-bluesky-prospecting.js, scripts/social-quality-gate.js, scripts/social-reply-monitor-bluesky.js, scripts/sonar-review-hotspots.js, scripts/social-reply-monitor.js, scripts/solver-parity.js, scripts/social-post-hourly.js, scripts/state-backup.js, scripts/statusline-context.js, scripts/statusline-cache-read.js, scripts/spec-gate.js, scripts/star-history.js, scripts/statusline-cache-path.js, scripts/statusline-links.js, scripts/statusline-local-stats.js, scripts/statusline-tower.js, scripts/statusline-lesson.js, scripts/statusline.sh, scripts/statusline-meta.js, scripts/stripe-credentials.js, scripts/strands-harness-doctor.js, scripts/stripe-business-identity-probe.js, scripts/stripe-checkout-diagnostic.js, scripts/stripe-bootstrap-saas-catalog.js, scripts/stealth-memory-injection-gate.js, scripts/stripe-payment-link-update.js, scripts/stripe-revenue-catalog.js, scripts/stripe-sync-product-images.js, scripts/stripe-revenue-catalog-audit.js, scripts/stripe-live-status.js, scripts/stripe-revenue.js, scripts/sync-branch-protection.js, scripts/structured-prompt-driven.js, scripts/swarm-coordinator.js, scripts/subagent-profiles.js, scripts/student-consistent-training.js, scripts/switchyard-router.js, scripts/sync-telemetry-from-prod.js, scripts/sync-github-about.js, scripts/sync-version.js, scripts/sync-gh-secrets-from-env.sh, scripts/sync-repository-rulesets.js, scripts/synthetic-customer-panel.js, scripts/synthetic-data-provenance.js, scripts/synthetic-dpo.js, scripts/telemetry-analytics.js, scripts/task-context-result.js, scripts/tailscale-p2p-doctor.js, scripts/task-outcomes.js, scripts/tessl-export.js, scripts/temporal-decay-weighting.js, scripts/test-coverage.js, scripts/test-all.js, scripts/thumbgate-bench.js, scripts/thompson-sampling.js, scripts/thumbgate-daily-discoveries-publish.js, scripts/thumbgate_session_start.sh, scripts/thumbgate-search.js, scripts/thumbgate-daily-discoveries-publish.sh, scripts/thumbgate-spend-guard.js, scripts/thumbgate-board-loop.js, scripts/token-savings.js, scripts/tool-kpi-tracker.js, scripts/tool-contract-validator.js, scripts/tier-budget-guard.js, scripts/token-shunt-honesty.js, scripts/token-tco.js, scripts/trajectory-scorer.js, scripts/unicode-tag-block-normalize.js, scripts/triage-savings-calculator.js, scripts/typesafe-typed-questions.js, scripts/tool-registry.js, scripts/train_from_feedback.py, scripts/unified-revenue-rollup.js, scripts/upstream-contribution-engine.js, scripts/user-profile.js, scripts/validate-feedback.js, scripts/validate-social-post.js, scripts/universal-claim-evaluator.js, scripts/verification-loop.js, scripts/verify-npm-githead.js, scripts/validate-workflow-contract.js, scripts/verify-marketing-pages-deployed.js, scripts/verifier-scoring.js, scripts/vector-store.js, scripts/vulnerability-pre-action-diode.js, scripts/verify-obsidian-setup.sh, scripts/visitor-journey.js, scripts/verify-run.js, scripts/webhook-delivery.js, scripts/warm-outreach-targets.js, scripts/workflow-gate-checkpoint.js, scripts/weekly-auto-post.js, scripts/workflow-runs.js, scripts/wire-proof-gate.js, scripts/workflow-intake-queue.js, scripts/workflow-notebook.js, scripts/workos-production-guard.js, scripts/workspace-agent-routines.js, scripts/workload-identity-honesty.js, scripts/workspace-evolver.js, scripts/workflow-sentinel.js, scripts/workflow-sprint-intake.js, scripts/workspace-search-route.js, scripts/xmemory-lite.js, scripts/zai-smoke.js

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

ThumbGate — Frequently asked questions

What is ThumbGate?
ThumbGate is an AI plugin in the HOL registry. Pre-action infrastructure firewall for AI coding agents: feedback becomes lessons and prevention rules enforced by PreToolUse hooks across Claude Code, Codex, Gemini, and MCP
How do I install ThumbGate?
Install ThumbGate in your harness: Claude Code — /plugin marketplace add IgorGanapolsky/ThumbGate; Cursor — npx skills add IgorGanapolsky/ThumbGate; Antigravity CLI — npx skills add IgorGanapolsky/ThumbGate. Full step-by-step guidance is on the HOL plugin page.
How do I install ThumbGate in Claude Code?
To install ThumbGate in Claude Code, start with /plugin marketplace add IgorGanapolsky/ThumbGate. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How do I install ThumbGate in Cursor?
To install ThumbGate in Cursor, start with npx skills add IgorGanapolsky/ThumbGate. The complete step-by-step install guide for Cursor is on the HOL plugin page.
How do I install ThumbGate in Antigravity CLI?
To install ThumbGate in Antigravity CLI, start with npx skills add IgorGanapolsky/ThumbGate. The complete step-by-step install guide for Antigravity CLI is on the HOL plugin page.
Is ThumbGate free?
Pricing for ThumbGate is published on its HOL plugin page when the maker schedules a launch.
Who publishes ThumbGate?
ThumbGate is published by IgorGanapolsky and listed on HOL.
Is ThumbGate available now?
ThumbGate availability is listed on its HOL plugin page.

Install Guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs
  1. 1

    Add the marketplace

    Run this inside a Claude Code session.

    claude code
  2. 2

    Install the plugin

    Use the plugin name and the marketplace name shown by the previous command.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell

Plugin Manifest

{
  "name": "thumbgate",
  "description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
  "version": "1.38.0",
  "author": {
    "name": "Igor Ganapolsky",
    "email": "[email protected]",
    "url": "https://thumbgate.ai"
  },
  "homepage": "https://thumbgate.ai",
  "repository": "https://github.com/IgorGanapolsky/ThumbGate",
  "license": "MIT",
  "category": "developer-tools",
  "keywords": [
    "guardrails",
    "pretooluse",
    "hooks",
    "feedback",
    "rlhf",
    "dpo",
    "agent-safety",
    "workflow-hardening",
    "claude-desktop",
    "desktop-extension",
    "mcp",
    "pre-action-checks",
    "ai-agent-safety",
    "memory"
  ],
  "skills": "./",
  "commands": "./.claude/commands/",
  "hooks": "./hooks/hooks.json",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "thumbgate",
    "developerName": "IgorGanapolsky"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 5
}

Marketplace Source

Repo URL
https://github.com/IgorGanapolsky/ThumbGate
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

Skills

86 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • article-syndication-pipeline

    .agents/skills/article-syndication-pipeline/SKILL.md

    Technical article syndication pipeline for cross-posting Dev.to articles to CoderLegion and other developer platforms with canonical URL preservation, UTM parameter attribution, and contributor onboarding compliance.

    Raw SKILL.md
  • autonomous-execution-mandate

    .agents/skills/autonomous-execution-mandate/SKILL.md

    Self-directed autonomous execution mandate and workflow skill for ThumbGate agents. Enforces zero-human-intervention task chaining, proactive CI/Trunk monitoring, automated conflict resolution, and evidence-first reporting without requiring manual prompt nudges from the user.

    Raw SKILL.md
  • aws-strands-harness-not-clone

    .agents/skills/aws-strands-harness-not-clone/SKILL.md

    >

    Raw SKILL.md
  • ci-gha-buildkite-patterns-not-clone

    .agents/skills/ci-gha-buildkite-patterns-not-clone/SKILL.md

    >

    Raw SKILL.md
  • cobble-hot-store-compare-not-clone

    .agents/skills/cobble-hot-store-compare-not-clone/SKILL.md

    >

    Raw SKILL.md
  • colab-compute-honesty-not-clone

    .agents/skills/colab-compute-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • comet-session-logger

    .agents/skills/comet-session-logger/SKILL.md

    Live session logger and observability dashboard driver for Comet browser. Ensures every PR, deployment status check, CoderLegion/Dev.to publication, and Railway production health metric is actively logged and visualized in Comet tabs.

    Raw SKILL.md
  • cyberstrike-compare-not-clone

    .agents/skills/cyberstrike-compare-not-clone/SKILL.md

    >

    Raw SKILL.md
  • datadog-llm-obs-compare-not-clone

    .agents/skills/datadog-llm-obs-compare-not-clone/SKILL.md

    >

    Raw SKILL.md
  • deeppattern-discipline-honesty-not-clone

    .agents/skills/deeppattern-discipline-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • gitlab-sandbox-allowlist-not-trust

    .agents/skills/gitlab-sandbox-allowlist-not-trust/SKILL.md

    >

    Raw SKILL.md
  • graphify

    .agents/skills/graphify/SKILL.md

    >

    Raw SKILL.md
  • halo-trace-optimize-not-clone

    .agents/skills/halo-trace-optimize-not-clone/SKILL.md

    >

    Raw SKILL.md
  • ideabrowser-connector

    .agents/skills/ideabrowser-connector/SKILL.md

    Secure IdeaBrowser agent connector with read-only vs mutating classification, zero plaintext credentials, and fail-closed pre-action diodes. Closes ThumbGate issue #3823.

    Raw SKILL.md
  • infoq-architect-honesty-not-clone

    .agents/skills/infoq-architect-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • jit-harness-compare-not-clone

    .agents/skills/jit-harness-compare-not-clone/SKILL.md

    >

    Raw SKILL.md
  • meko-datapack-honesty-not-clone

    .agents/skills/meko-datapack-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • mintlify-knowledge-honesty-not-clone

    .agents/skills/mintlify-knowledge-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • model-distress-governance

    .agents/skills/model-distress-governance/SKILL.md

    >

    Raw SKILL.md
  • nvidia-specdecode-al-doctor

    .agents/skills/nvidia-specdecode-al-doctor/SKILL.md

    >

    Raw SKILL.md
  • openui-catalog-compose-honesty

    .agents/skills/openui-catalog-compose-honesty/SKILL.md

    >

    Raw SKILL.md
  • package-manager-honesty-doctor

    .agents/skills/package-manager-honesty-doctor/SKILL.md

    >

    Raw SKILL.md
  • salt-code-policy-honesty-not-clone

    .agents/skills/salt-code-policy-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • show-me

    .agents/skills/show-me/SKILL.md

    >

    Raw SKILL.md
  • siren-mcp-governance

    .agents/skills/siren-mcp-governance/SKILL.md

    >

    Raw SKILL.md
  • skool-headless-reader

    .agents/skills/skool-headless-reader/SKILL.md

    Read, monitor, and analyze Skool communities or posts headlessly for lead discovery, customer pain, acquisition opportunities, or ThumbGate revenue research without blocking the user's browser.

    Raw SKILL.md
  • tailscale-p2p-governance-not-clone

    .agents/skills/tailscale-p2p-governance-not-clone/SKILL.md

    >

    Raw SKILL.md
  • thumbgate-board-loop

    .agents/skills/thumbgate-board-loop/SKILL.md

    >

    Raw SKILL.md
  • thumbgate-daily-discoveries

    .agents/skills/thumbgate-daily-discoveries/SKILL.md

    Autonomous daily publishing engine and monitoring skill for ThumbGate news and technical discoveries. Generates high-density engineering posts with full UTM attribution, synchronizes to Obsidian, schedules dual cron/launchd runs at 9:00 AM EST, and tracks publication ledgers.

    Raw SKILL.md
  • thumbgate

    .agents/skills/thumbgate/SKILL.md

    >-

    Raw SKILL.md
  • token-shunt-honesty-not-clone

    .agents/skills/token-shunt-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • typesafe-typed-questions-not-clone

    .agents/skills/typesafe-typed-questions-not-clone/SKILL.md

    >

    Raw SKILL.md
  • vulnerability-pre-action-diode

    .agents/skills/vulnerability-pre-action-diode/SKILL.md

    >

    Raw SKILL.md
  • zvec-grep-compare-not-clone

    .agents/skills/zvec-grep-compare-not-clone/SKILL.md

    >

    Raw SKILL.md
  • ci-failure-triage

    .claude/skills/ci-failure-triage/SKILL.md

    >

    Raw SKILL.md
  • evidence-first-answer

    .claude/skills/evidence-first-answer/SKILL.md

    Required pre-flight before answering any "why" or "are we" question about revenue, conversion, outbound, traffic, or commercial state. Forces verification of live data and distinguishes planning docs from telemetry. Triggered automatically when the CEO asks "are you sure?" — that phrase means the previous answer was wrong.

    Raw SKILL.md
  • fleet-coordination

    .claude/skills/fleet-coordination/SKILL.md

    >

    Raw SKILL.md
  • revenue-truth

    .claude/skills/revenue-truth/SKILL.md

    Fetch live ThumbGate revenue, paid orders, and funnel telemetry from production billing endpoints. Use BEFORE answering any question about money, conversion, traffic, or "why we didn't make X." Never quote planning documents as actuals.

    Raw SKILL.md
  • scope-discipline

    .claude/skills/scope-discipline/SKILL.md

    >

    Raw SKILL.md
  • task-state-ledger

    .claude/skills/task-state-ledger/SKILL.md

    >

    Raw SKILL.md
  • thumbgate

    .claude/skills/thumbgate/SKILL.md

    Pre-action checks for AI agents - capture thumbs-up/down feedback, generate prevention rules, block known-bad patterns. Use for setup, feedback capture, check debugging, or DPO training data export.

    Raw SKILL.md
  • graphify

    .hermes/skills/graphify/SKILL.md

    Use for any question about a codebase, its architecture, file relationships, or project content — especially when graphify-out/ exists, where the question should be treated as a graphify query first. Turns any input (code, docs, papers, images, videos) into a persistent knowledge graph with god nodes, community detection, and query/path/explain tools.

    Raw SKILL.md
  • thumbgate-feedback

    adapters/amp/skills/thumbgate-feedback/SKILL.md

    Capture thumbs feedback and apply prevention rules before coding

    Raw SKILL.md
  • thumbgate-pretool-gate

    distribution/agensi/thumbgate-pretool-gate/SKILL.md

    Hard-blocks secret exfiltration and repeats of a ranked lesson before a tool call, instead of warning and continuing. Use when the user asks to gate an agent, block a secret, stop a repeat mistake, capture thumbs-down feedback, check gate stats, or install ThumbGate.

    Raw SKILL.md
  • thumbgate-feedback

    plugins/amp-skill/SKILL.md

    Dual-write feedback to Amp MCP memory AND thumbgate for DPO export, analytics, and cross-platform portability

    Raw SKILL.md
  • adversarial-review

    plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md

    Run a skeptical Codex review from Claude Code that hunts for hidden regressions, unsafe assumptions, and release risk. Use before merges, deploys, migrations, or other risky changes.

    Raw SKILL.md
  • result

    plugins/claude-codex-bridge/skills/result/SKILL.md

    Print the latest saved Codex bridge result from Claude Code without rerunning Codex. Use when the user asks for the last Codex output or wants to inspect the raw bridge result.

    Raw SKILL.md
  • review

    plugins/claude-codex-bridge/skills/review/SKILL.md

    Run a Codex review from Claude Code against the current uncommitted work, a base branch diff, or a specific commit. Use when the user explicitly asks for a Codex review or second reviewer.

    Raw SKILL.md
  • second-pass

    plugins/claude-codex-bridge/skills/second-pass/SKILL.md

    Hand the current task or repo state to Codex for an independent second pass from inside Claude Code. Use when the user explicitly wants another agent to take a shot after Claude's first pass.

    Raw SKILL.md
  • setup

    plugins/claude-codex-bridge/skills/setup/SKILL.md

    Validate that the Codex bridge plugin is ready inside Claude Code. Use when the user asks to install, configure, or sanity-check Codex review from Claude.

    Raw SKILL.md
  • status

    plugins/claude-codex-bridge/skills/status/SKILL.md

    Show the latest Codex bridge artifact metadata from Claude Code. Use when the user asks whether the bridge already ran, what mode it used, or where the result was saved.

    Raw SKILL.md
  • thumbgate-feedback

    plugins/claude-skill/SKILL.md

    >

    Raw SKILL.md
  • capture-feedback

    plugins/cursor-marketplace/skills/capture-feedback/SKILL.md

    Capture structured thumbs up/down feedback with context, history-aware lesson distillation, tags, and optional rubric scores after completing a task.

    Raw SKILL.md
  • prevention-rules

    plugins/cursor-marketplace/skills/prevention-rules/SKILL.md

    Generate and review prevention rules auto-promoted from repeated failure patterns.

    Raw SKILL.md
  • programmatic-agent-runs

    plugins/cursor-marketplace/skills/programmatic-agent-runs/SKILL.md

    Govern Cursor SDK local, cloud, self-hosted, and subagent coding runs before they create branches or PRs.

    Raw SKILL.md
  • recall-context

    plugins/cursor-marketplace/skills/recall-context/SKILL.md

    Recall relevant past failures, prevention rules, and context packs before starting a coding task.

    Raw SKILL.md
  • search-lessons

    plugins/cursor-marketplace/skills/search-lessons/SKILL.md

    Search promoted lessons for corrective actions, lifecycle state, linked rules, and linked gates.

    Raw SKILL.md
  • agent-architect-kit

    skills/agent-architect-kit/SKILL.md

    Raw SKILL.md
  • Agent Memory

    skills/agent-memory/SKILL.md

    Give your agent persistent cross-session memory — recall what went wrong on similar tasks before starting, then capture whether the work succeeded or failed so repeated mistakes auto-promote into prevention rules. Runs locally via the ThumbGate MCP server (recall, capture_feedback, prevention_rules, feedback_stats) — no API key needed. Use when the user says "recall", "what went wrong last time", "remember this for next time", "capture feedback", "thumbs up/down on that", or at the start of a new task or session. Do NOT use when the user wants to force one specific mistake into an enforced block gate (use the thumbgate-guard skill), to list rules that already exist (thumbgate-rules), or to check ThumbGate wiring (thumbgate-doctor).

    Raw SKILL.md
  • applyops-deploy

    skills/applyops-deploy/SKILL.md

    Raw SKILL.md
  • article-syndication-pipeline

    skills/article-syndication-pipeline/SKILL.md

    Technical article syndication pipeline for cross-posting Dev.to articles to CoderLegion and other developer platforms with canonical URL preservation, UTM parameter attribution, and contributor onboarding compliance.

    Raw SKILL.md
  • aws-strands-harness-not-clone

    skills/aws-strands-harness-not-clone/SKILL.md

    >

    Raw SKILL.md
  • bluesky-engagement

    skills/bluesky-engagement/SKILL.md

    >

    Raw SKILL.md
  • comet-session-logger

    skills/comet-session-logger/SKILL.md

    Live session logger and observability dashboard driver for Comet browser. Ensures every PR, deployment status check, CoderLegion/Dev.to publication, and Railway production health metric is actively logged and visualized in Comet tabs.

    Raw SKILL.md
  • configure-analytics

    skills/configure-analytics/SKILL.md

    Raw SKILL.md
  • context-engineering-checklist

    skills/context-engineering-checklist/SKILL.md

    >

    Raw SKILL.md
  • gsd-ralph-context-loop

    skills/gsd-ralph-context-loop/SKILL.md

    >

    Raw SKILL.md
  • meko-datapack-honesty-not-clone

    skills/meko-datapack-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • mintlify-knowledge-honesty-not-clone

    skills/mintlify-knowledge-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • model-distress-governance

    skills/model-distress-governance/SKILL.md

    >

    Raw SKILL.md
  • pull-funnel-data

    skills/pull-funnel-data/SKILL.md

    Raw SKILL.md
  • salt-code-policy-honesty-not-clone

    skills/salt-code-policy-honesty-not-clone/SKILL.md

    >

    Raw SKILL.md
  • siren-mcp-governance

    skills/siren-mcp-governance/SKILL.md

    >

    Raw SKILL.md
  • solve-architecture-autonomy

    skills/solve-architecture-autonomy/SKILL.md

    Course-correct from over-planning to execution — when the agent has produced a plan, research, or options instead of doing work the user already approved, drop the analysis and execute the smallest end-to-end action now (branch, run, deploy, verify). Use when the user says "stop planning, just do it", "why are you researching, execute", "just ship it", "enough analysis", or pushes back that you keep proposing instead of acting on an already-decided task. Do NOT use when the task is genuinely undecided and needs a plan first, when the user explicitly asked for research/options/a design, or for routine work where no over-planning has occurred — acting on an unscoped or destructive task is its own failure.

    Raw SKILL.md
  • thumbgate-blocked

    skills/thumbgate-blocked/SKILL.md

    Show ThumbGate's enforcement record — how many risky actions were actually blocked versus warned, which gates fire most, the tokens/damage saved, and the full feedback to check to rejection pipeline. Reads live enforcement counters via the gate_stats and enforcement_matrix MCP tools (CLI fallback `npx thumbgate gate-stats`). Use when the user says "what has ThumbGate blocked", "show gate stats", "is enforcement working", "how many tokens did we save", "show the enforcement matrix", or "what got stopped". Do NOT use to list rule DEFINITIONS that exist (use the thumbgate-rules skill), to create a new rule (use the thumbgate-guard skill), or to check whether ThumbGate is installed and wired (use the thumbgate-doctor skill).

    Raw SKILL.md
  • ThumbGate Brand Voice

    skills/thumbgate-brand-voice/SKILL.md

    Make any ThumbGate-facing copy — landing/pricing/compare/guide pages, README, postinstall banners, CLI receipts, Reddit/LinkedIn/Bluesky/Threads posts, docs, outreach drafts, blog/launch content — sound like ThumbGate: direct, technical, honest, anti-hype. Use BEFORE writing or editing customer-facing or marketing text, and when the user says "write a landing page", "draft a Reddit/LinkedIn post", "write the README", "make this on-brand", "punch up this copy", or "review this copy for voice". Do NOT use for code comments, commit messages, internal notes, or non-ThumbGate copy — and never to add fabricated traction or unsupported claims (honesty is the brand).

    Raw SKILL.md
  • thumbgate-daily-discoveries

    skills/thumbgate-daily-discoveries/SKILL.md

    Autonomous daily publishing engine and monitoring skill for ThumbGate news and technical discoveries. Generates high-density engineering posts with full UTM attribution, synchronizes to Obsidian, schedules dual cron/launchd runs at 9:00 AM EST, and tracks publication ledgers.

    Raw SKILL.md
  • thumbgate-doctor

    skills/thumbgate-doctor/SKILL.md

    Health-check whether ThumbGate is actually wired into this agent — PreToolUse/SessionStart hooks installed, MCP server reachable, lesson store present, statusline, and overall agent-readiness — then report exactly what to fix. Runs the existing `npx thumbgate doctor` audit and the check_operational_integrity MCP tool. Use when the user says "is ThumbGate wired up", "thumbgate doctor", "check my guardrails are installed", "why aren't my gates firing", "is the MCP server connected", or "agent readiness". Do NOT use to view rules (use the thumbgate-rules skill), to view what was blocked (use the thumbgate-blocked skill), or to capture a new rule (use the thumbgate-guard skill) — this skill only diagnoses setup and wiring.

    Raw SKILL.md
  • thumbgate-feedback

    skills/thumbgate-feedback/SKILL.md

    >

    Raw SKILL.md
  • thumbgate-guard

    skills/thumbgate-guard/SKILL.md

    Turn the agent's most recent mistake into an enforced ThumbGate prevention rule (a PreToolUse block gate) so the same bad tool call is intercepted before it runs again, in this and every future session across Claude Code, Cursor, Codex, Gemini, Amp, and Cline. Captures the failure with the capture_feedback MCP tool, then force-promotes it via `npx thumbgate force-gate` so it is enforced, not just logged. Use when the user says "guard against this", "block this from happening again", "never do that again", "make that a rule", "stop the agent from repeating that", or right after a bad action or thumbs-down that should become a hard rule. Do NOT use to merely log a thumbs-up/down without enforcement (use the thumbgate-feedback skill), to recall prior context before starting work (use the Agent Memory skill), or to list rules that already exist (use the thumbgate-rules skill).

    Raw SKILL.md
  • thumbgate-protect

    skills/thumbgate-protect/SKILL.md

    Inspect this repo's branch and release governance (protected branches, release rules, protected-file globs) and, only when the user explicitly approves, grant a scoped, time-limited exception so a protected-file edit or publish can proceed under audit. Reads posture via the get_branch_governance MCP tool and records a narrow, expiring approval via the approve_protected_action MCP tool. Use when the user says "is main protected", "show branch governance", "what am I blocked from editing", "approve this protected change", or "let me edit a protected file just this once". Do NOT use to disable protection wholesale, to grant broad or standing exceptions, or to diagnose hook wiring (use the thumbgate-doctor skill) — this skill is for narrow, temporary, audited approvals only.

    Raw SKILL.md
  • thumbgate-rules

    skills/thumbgate-rules/SKILL.md

    List the active ThumbGate prevention rules, reliability rules, and the promoted lessons behind them, so the user can see which guardrails are currently protecting this project and WHY each one exists. Reads the live rule and lesson stores via the prevention_rules, get_reliability_rules, and search_lessons MCP tools (CLI fallback `npx thumbgate rules`). Use when the user says "what is ThumbGate protecting me from", "show my rules", "show my gates", "what has the agent learned", "list active guardrails", or "what's blocked here". Do NOT use to CREATE a new rule (use the thumbgate-guard skill), to see runtime enforcement counts of what actually fired (use the thumbgate-blocked skill), or to diagnose whether ThumbGate is wired up at all (use the thumbgate-doctor skill).

    Raw SKILL.md
  • thumbgate

    skills/thumbgate/SKILL.md

    >

    Raw SKILL.md
  • verify-pricing-surfaces

    skills/verify-pricing-surfaces/SKILL.md

    Raw SKILL.md
  • vulnerability-pre-action-diode

    skills/vulnerability-pre-action-diode/SKILL.md

    >

    Raw SKILL.md

File Inventory

.agents/plugins/marketplace.json

file

407 bytes

c83f99aa4dabad2d…

.agents/skills/article-syndication-pipeline/SKILL.md

skill

2,018 bytes

7aa9f56ab40633a1…

.agents/skills/autonomous-execution-mandate/SKILL.md

skill

2,522 bytes

bc7bbeebff3cfea5…

.agents/skills/aws-strands-harness-not-clone/SKILL.md

skill

2,145 bytes

7c3c9c35e0095f87…

.agents/skills/ci-gha-buildkite-patterns-not-clone/SKILL.md

skill

2,518 bytes

7ee3d9e2baeeb620…

.agents/skills/cobble-hot-store-compare-not-clone/SKILL.md

skill

3,033 bytes

42faaa784265f630…

.agents/skills/colab-compute-honesty-not-clone/SKILL.md

skill

2,373 bytes

255034a5c0220f2f…

.agents/skills/comet-session-logger/SKILL.md

skill

2,351 bytes

a9a667aa44a593d6…

.agents/skills/cyberstrike-compare-not-clone/SKILL.md

skill

1,443 bytes

94fd555d31ea1d74…

.agents/skills/datadog-llm-obs-compare-not-clone/SKILL.md

skill

2,695 bytes

c5f2b0e182cde5c4…

.agents/skills/deeppattern-discipline-honesty-not-clone/SKILL.md

skill

2,679 bytes

6cf2600eaffd537e…

.agents/skills/gitlab-sandbox-allowlist-not-trust/SKILL.md

skill

3,120 bytes

2f80a948fe025b2f…

.agents/skills/graphify/references/add-watch.md

file

2,959 bytes

b9d1564380ac1e6f…

.agents/skills/graphify/references/exports.md

file

3,362 bytes

ee47fae477f106d8…

.agents/skills/graphify/references/extraction-spec.md

file

7,960 bytes

f72a6d2dfa67446f…

.agents/skills/graphify/references/github-and-merge.md

file

2,177 bytes

e5ebd90c7686f503…

.agents/skills/graphify/references/hooks.md

file

1,270 bytes

7910939007ada796…

.agents/skills/graphify/references/query.md

file

13,820 bytes

fc3bfc8831a01de6…

.agents/skills/graphify/references/transcribe.md

file

3,173 bytes

676a1e39aa6d43cd…

.agents/skills/graphify/references/update.md

file

10,646 bytes

926ad025dc2bebd8…

.agents/skills/graphify/SKILL.md

skill

1,340 bytes

7a67756beee6dc63…

.agents/skills/halo-trace-optimize-not-clone/SKILL.md

skill

2,113 bytes

8a440c93b743cb3c…

.agents/skills/ideabrowser-connector/SKILL.md

skill

1,818 bytes

de30761319b2c770…

.agents/skills/infoq-architect-honesty-not-clone/SKILL.md

skill

1,390 bytes

e0905955017e7ef9…

.agents/skills/jit-harness-compare-not-clone/SKILL.md

skill

1,275 bytes

7cfc5ce83e7c3207…

.agents/skills/meko-datapack-honesty-not-clone/SKILL.md

skill

1,818 bytes

3122fc0d1be5face…

.agents/skills/mintlify-knowledge-honesty-not-clone/SKILL.md

skill

2,093 bytes

fc931dc6c938b2b5…

.agents/skills/model-distress-governance/SKILL.md

skill

2,918 bytes

9146c97a47033d49…

.agents/skills/nvidia-specdecode-al-doctor/SKILL.md

skill

1,060 bytes

b7e877d25f44758d…

.agents/skills/openui-catalog-compose-honesty/SKILL.md

skill

2,229 bytes

6a8827c60bc281d4…

.agents/skills/package-manager-honesty-doctor/SKILL.md

skill

774 bytes

8b221aa9be0dbda5…

.agents/skills/salt-code-policy-honesty-not-clone/SKILL.md

skill

3,133 bytes

19590099e8a03df3…

.agents/skills/show-me/SKILL.md

skill

1,761 bytes

5ecbc45b90f8ccff…

.agents/skills/siren-mcp-governance/SKILL.md

skill

2,249 bytes

64b56433c41e3e73…

.agents/skills/skool-headless-reader/agents/openai.yaml

file

237 bytes

7ea681784ad03297…

.agents/skills/skool-headless-reader/SKILL.md

skill

2,716 bytes

3cb4b82fd51d0db1…

.agents/skills/tailscale-p2p-governance-not-clone/SKILL.md

skill

2,373 bytes

d93488f58257c861…

.agents/skills/thumbgate-board-loop/SKILL.md

skill

2,481 bytes

c6dd15ac20da6fe9…

.agents/skills/thumbgate-daily-discoveries/SKILL.md

skill

2,815 bytes

99341bf219123ed7…

.agents/skills/thumbgate/references/gate-config.md

file

2,187 bytes

a4fff67ca4b334da…

.agents/skills/thumbgate/references/setup-guides.md

file

1,239 bytes

b5a01182667dc176…

.agents/skills/thumbgate/SKILL.md

skill

4,394 bytes

12abb0e597b15330…

.agents/skills/token-shunt-honesty-not-clone/SKILL.md

skill

2,454 bytes

ad5a363d1e139bb3…

.agents/skills/typesafe-typed-questions-not-clone/SKILL.md

skill

4,166 bytes

8d0bc29c8bda2af5…

.agents/skills/vulnerability-pre-action-diode/SKILL.md

skill

1,852 bytes

fc3a9d3cc74b908d…

.agents/skills/zvec-grep-compare-not-clone/SKILL.md

skill

1,136 bytes

9c005ab391d9bdf5…

.changeset/buyer-demo-proof.md

file

243 bytes

2ca07a56508c8595…

.changeset/config.json

file

271 bytes

29908e3bb90e2fab…

.changeset/dependabot-pr-4040.md

file

160 bytes

b23b03ced87e25ba…

.changeset/dependabot-pr-4041.md

file

153 bytes

12dae1f92986f7bd…

.changeset/dependabot-pr-4042.md

file

160 bytes

d64f295b29cd7533…

.changeset/dependabot-pr-4043.md

file

177 bytes

a5d18117828940bf…

.changeset/fix-mailer-default-from-identity.md

file

140 bytes

bc06475070574b0f…

.changeset/isolate-daily-discovery-publisher-tests.md

file

358 bytes

ed4a98b320e3c3c7…

.changeset/railway-credential-selection.md

file

195 bytes

6b975a082680921f…

.changeset/README.md

file

703 bytes

386c88f2ccb74edd…

.changeset/recover-scoped-lesson-graph.md

file

250 bytes

94a73ed152140c32…

.changeset/siren-mcp-governance.md

file

118 bytes

baecc6f4c377fd63…

.changeset/siren-posting-policy.md

file

128 bytes

d97cd836cb7427d1…

.changeset/triage-vulnerability-diode.md

file

208 bytes

4570a3964eb931ce…

.claude-plugin/bundle/icon.svg

file

950 bytes

f7f7efd157bfcba9…

.claude-plugin/bundle/server/index.js

file

1,053 bytes

bc0dd396daeb3399…

.claude-plugin/marketplace.json

file

3,418 bytes

101865ebbe8e90f1…

.claude-plugin/plugin.json

file

1,086 bytes

92b0fe5750fa9d31…

.claude-plugin/README.md

file

7,384 bytes

7db22ffdc8632fa5…

.claude/commands/dashboard.md

file

561 bytes

caf20010d28fcac2…

.claude/commands/thumbgate-blocked.md

file

1,404 bytes

c616913dd3a445fd…

.claude/commands/thumbgate-dashboard.md

file

1,059 bytes

c2c01923a764d581…

.claude/commands/thumbgate-doctor.md

file

1,415 bytes

c92869eef4d74662…

.claude/commands/thumbgate-guard.md

file

2,016 bytes

9b7254f4c764ad2f…

.claude/commands/thumbgate-protect.md

file

1,746 bytes

337a43b80300ec03…

.claude/commands/thumbgate-rules.md

file

1,363 bytes

e64cfad096edfbd7…

.claude/context-engine/knowledge-index.json

file

16,353 bytes

e37026289350889c…

.claude/memory/mistakes/2026-06-14-false-completion.md

file

340 bytes

e552a9cb1fb48170…

.claude/rules/pr-thread-policy.md

file

1,375 bytes

659b6e5ce2b4eca5…

.claude/scripts/feedback/capture-feedback.js

file

7,628 bytes

ee4a343f7cda66c4…

.claude/scripts/session-bootstrap/fleet-coordination-check.sh

file

6,768 bytes

077d1835549bfbba…

.claude/scripts/session-bootstrap/revenue-truth.sh

file

3,768 bytes

816f8d30d196b4b2…

.claude/settings.json

file

1,908 bytes

fc98c9808024d65f…

.claude/skills/ci-failure-triage/SKILL.md

skill

4,197 bytes

275f0b5e13658a93…

.claude/skills/evidence-first-answer/SKILL.md

skill

4,371 bytes

a15508b95be37a02…

.claude/skills/fleet-coordination/SKILL.md

skill

3,456 bytes

43621136ad37585c…

.claude/skills/paperbanana-diagrams.md

file

2,568 bytes

575af5f581f24dc1…

.claude/skills/revenue-truth/SKILL.md

skill

7,322 bytes

e13504e3be5c17f9…

.claude/skills/scope-discipline/SKILL.md

skill

3,235 bytes

b4287a5a4712b360…

.claude/skills/task-state-ledger/SKILL.md

skill

3,802 bytes

1a254c55dae083de…

.claude/skills/thumbgate/references/gate-config.md

file

2,187 bytes

a4fff67ca4b334da…

.claude/skills/thumbgate/references/setup-guides.md

file

1,239 bytes

b5a01182667dc176…

.claude/skills/thumbgate/SKILL.md

skill

4,157 bytes

d1d9f77373492db2…

.codex-plugin/plugin.json

plugin-manifest

910 bytes

9a3bfe8fb2e67467…

.cursor-plugin/marketplace.json

file

852 bytes

adfa449b928781da…

.gitar/config/approve.md

file

1,064 bytes

d6addb81ec03e117…

.gitar/review/thumbgate-core-review-rules.md

file

2,766 bytes

ac3b0b1c8a129d6c…

.gitar/review/thumbgate-feedback-to-rules.md

file

1,416 bytes

bd4f08a4567f4152…

.gitguardian.yaml

file

1,730 bytes

99b05a548524031d…

.github/agents/thumbgate.agent.md

file

900 bytes

28d614bd2851db4e…

.github/BOT-INTEGRATIONS.md

file

13,050 bytes

761415cf73df74b9…

.github/dependabot.yml

file

1,020 bytes

3a689a3b9290cc89…

.github/FUNDING.yml

file

108 bytes

9d48c4ad5c02aaf8…

.github/GITHUB_APP_SETUP.md

file

5,309 bytes

87fd6eecf80f3886…

Browse all 1920 files