Cisco skill scanner timed out after 60000 ms
DevRecap
Reconstruct evidence-backed developer work from authorized Codex and Claude history plus read-only Git, then turn it into daily standups, weekly reviews, sprint recaps, and memory reports.
jo-o-quinteiro/devrecap · v0.3.0 · Development & Workflow
Trust Score
92
Security
100
Surfaces
2
What is DevRecap?
DevRecap is a published development & workflow plugin for AI coding agents in the codex ecosystem, developed by João Quinteiro and distributed through the HOL AI plugin registry. Reconstruct evidence-backed developer work from authorized Codex and Claude history plus read-only Git, then turn it into daily standups, weekly reviews, sprint recaps, and memory reports.
- Canonical slug
- jo-o-quinteiro/devrecap
- Version
- v0.3.0 · updated Sep 24, 2026
- Open data
- entity.json (JSON-LD)
Trust & Reputation
Factor Analysis
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Registry Snapshot
- Repository
- https://github.com/jquinteiroo/devrecap
- Canonical profile
- https://hol.org/registry/plugins/jo-o-quinteiro%2Fdevrecap
- Publisher verification
- No
- Marketplace source
- Unknown
- Scanner
- Broker fallback
- Safety label
- safe
- Digest verified
- Yes
Trust & reputation
Trust & Reputation
Factor Analysis
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Provenance
- Plugin root
- .
- Source repo
- https://github.com/jquinteiroo/devrecap
- Source commit
- 7114db46081a…
- Publisher verified
- No
- Owner verified
- @jquinteiroo
Continuous scanner CI detected
No action is required. This plugin receives the full trust score.
Verified badge detected
This listing scores +2% trust because the HOL verified badge is present in the source repository README.
Security Posture
- Provider
- registry-broker-fallback
- Grade
- A · safe
- Version
- Unknown
Findings
Cisco skill scanner timed out after 60000 ms
DevRecap — Frequently asked questions
- What is DevRecap?
- DevRecap is an AI plugin in the HOL registry. Reconstruct evidence-backed developer work from authorized Codex and Claude history plus read-only Git, then turn it into daily standups, weekly reviews, sprint recaps, and memory reports.
- How do I install DevRecap?
- Install DevRecap in your harness: Codex — codex plugin marketplace add jquinteiroo/devrecap; Any agent — npx skills add jquinteiroo/devrecap. Full step-by-step guidance is on the HOL plugin page.
- How do I install DevRecap in Codex?
- To install DevRecap in Codex, start with codex plugin marketplace add jquinteiroo/devrecap. The complete step-by-step install guide for Codex is on the HOL plugin page.
- Is DevRecap free?
- Pricing for DevRecap is published on its HOL plugin page when the maker schedules a launch.
- Who publishes DevRecap?
- DevRecap is published by João Quinteiro and listed on HOL.
- Is DevRecap available now?
- DevRecap availability is listed on its HOL plugin page.
Install Guidance
Install in Codex
Install through the Codex CLI plugin marketplace.
- 1
Register the marketplace
Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.
shell - 2
Install from the Plugins browser
Open Codex, open the Plugins browser, choose the devrecap marketplace, and install devrecap.
- 3
Verify the marketplace registration
shell
Plugin Manifest
{
"id": "devrecap",
"name": "devrecap",
"version": "0.3.0",
"description": "Reconstruct evidence-backed developer work from authorized local coding history and turn it into polished recaps.",
"author": {
"name": "João Quinteiro",
"url": "https://github.com/jquinteiroo"
},
"homepage": "https://github.com/jquinteiroo/devrecap",
"repository": "https://github.com/jquinteiroo/devrecap",
"license": "MIT",
"skills": "./",
"interface": {
"displayName": "DevRecap",
"developerName": "João Quinteiro",
"shortDescription": "Turn coding history into evidence-backed work recaps",
"longDescription": "DevRecap reconstructs what you actually worked on from explicitly authorized local Codex and Claude history plus read-only Git evidence. The host AI synthesizes those structured facts into daily standups, weekly reviews, sprint recaps, and memory reports while DevRecap validates activity IDs, status, and completion claims.",
"category": "Productivity",
"websiteURL": "https://github.com/jquinteiroo/devrecap",
"privacyPolicyURL": "https://github.com/jquinteiroo/devrecap/blob/main/PRIVACY.md",
"termsOfServiceURL": "https://github.com/jquinteiroo/devrecap/blob/main/TERMS.md",
"defaultPrompt": [
"Help me remember what I worked on this week and generate a detailed recap.",
"Prepare my daily standup from yesterday's coding work.",
"Create a detailed review of the last 14 days in Portuguese, grouped by workstream."
],
"brandColor": "#19372f",
"composerIcon": "./assets/devrecap-icon.webp",
"logo": "./assets/devrecap-logo-symbol.webp",
"capabilities": [
"Interactive",
"Read",
"Write"
]
},
"keywords": [
"developer-productivity",
"daily-standup",
"work-recap",
"codex",
"git"
],
"registryIndexVersion": 5
}Marketplace Source
- Repo URL
- https://github.com/jquinteiroo/devrecap
- Marketplace path
- Unknown
- Source path
- plugins/jquinteiroo/devrecap
- Install policy
- AVAILABLE
Skills
Copy or download the SKILL.md files this plugin ships, then install them with the Skills CLI.
devrecap
.claude/skills/devrecap/SKILL.md
Generate polished evidence-backed developer recaps from local sources explicitly authorized through DevRecap setup.
--- name: devrecap description: Generate polished evidence-backed developer recaps from local sources explicitly authorized through DevRecap setup. --- # DevRecap When invoked as `/devrecap`, use the DevRecap CLI as the factual layer and Claude as the report-writing layer. The CLI decides what happened. Claude turns those grounded facts into a report that actually helps the developer remember the work. The AI-written wording is the preferred final report content; deterministic prose is only the fallback. ## Consent Before collecting local history, the user must have completed `devrecap setup`. If `devrecap prepare` says setup is required, stop and ask the user to run setup. Never bypass the CLI permission model or inspect local history independently. ## AI-first workflow 1. Resolve the requested period faithfully. If automatic resolution produces a shorter range than requested, rerun with an explicit equivalent such as `last 14 days` or exact dates. 2. Run `devrecap prepare --request "<requested period or recap>" --out .devrecap/run.json`. 3. Read `.devrecap/run.json` and follow `contract.rules`. 4. Analyze only `contract.facts`, `contract.allowedActivityIds`, and the structured accepted data in the prepared run. 5. Write one JSON object matching `contract.outputShape` to `.devrecap/analysis.json` at presentation quality. 6. Render to `reports/derecap-YYYY-MM-DD.html`, using the report range end date in the filename. Add a PDF with the same basename only if requested. 7. Return the generated path and a short conversational recap. Inside the Skill, do not use `devrecap remember`, `devrecap week`, `devrecap daily`, or similar convenience commands as the final result. Those commands intentionally produce the deterministic fallback writer. Use `prepare → Claude synthesis → render` instead. ## Writing goal Write like a strong technical teammate who reviewed the developer's work history and is helping them remember the period. Use this editorial shape: - **headline**: describe what characterized the period instead of a raw activity count. Do not prefix it with `DevRecap`, `derecap`, or the skill name; the renderer already shows the brand once. - **executiveSummary**: one polished opening paragraph covering the main fronts and overall completion state; - **mainFocus**: explain the most important front with context, what happened and where it ended; - **detail sections**: consolidate related Activities into a small number of meaningful work narratives; - **highlights**: only completed work backed by evidence; - **investigations**: unresolved investigation fronts; - **inProgress**: implementation or changes that were worked on but are not proven complete; - **blockers** and **nextSteps**: only when explicitly supported. For each narrative, prefer 2–4 useful sentences covering the context/problem, what was changed or investigated, why it mattered when supported by evidence, and the factual state at the end of the period. ## Synthesis rules - Combine related Activities into one narrative item when they describe the same objective, referencing all supporting `activityIds`. - Rewrite weak parser labels into natural language when the structured facts support a better description. - Treat labels such as `Investigated the API`, `Investigated the project`, filenames, command names and counts as clues, not final wording. - Use project name, objective, summaries, categories, workstream context, technical terms, validation and status together to produce the clearest grounded description. - Never invent a business purpose, feature name, root cause, result, blocker or next step. - Never promote `in_progress`, `blocked`, or `unknown` work to completed. - Use shipped/delivered/completed language only when completion or commit evidence supports it. - Highlights/key deliveries may reference only completed activities. - Do not repeat one Activity across multiple detail sections; it may also appear in `mainFocus` only as a high-level overview. - Only populate `nextSteps` when the prepared facts contain an explicit evidence-backed next step. - Do not make filenames, number of files, number of commands, raw shell commands or telemetry the main story. - Avoid database-like prose such as "the workstream grouped N activities" unless that count is genuinely useful. - Preserve useful proper names and technical terms such as Codex, Claude, DocuSign, Laravel, Vue, PDF, API, SQL and GitHub. - Write in the user's requested language. For Portuguese requests, use natural Brazilian Portuguese. ## Style by request ### Daily Concise and speakable, normally 2–4 meaningful points for a 30–60 second standup. ### Review Emphasize evidence-backed outcomes, shipped work, meaningful progress and validation. Activity volume is not an achievement by itself. ### Remember / what did I work on? Use the richest synthesis. Reconstruct each major workstream with context, what was done, useful technical clues and its current state so the developer can genuinely remember the work later. ## Quality gate Before rendering, verify that the result reads like a work recap, related Activities are sensibly consolidated, titles are natural, every claim is grounded in structured facts, incomplete work is described honestly, there are no invented next steps, and each analysis item references valid `activityIds`. ## Rendering rule Preserve the validated AI-written headline, executive summary, titles and narratives through the final render. The renderer handles the single derecap brand mark, color, section numbering and collapsed evidence references. Deterministic semantic polishing is only for fallback reports. DevRecap is explicit-invocation only. Do not create background monitoring, run project code, expose raw transcripts or bypass the CLI's read-only source rules.
devrecap
skills/devrecap/SKILL.md
Reconstruct developer work from explicitly authorized local Codex/Claude history and read-only Git evidence, then use the host AI to write polished, evidence-backed recaps.
--- name: devrecap description: Reconstruct developer work from explicitly authorized local Codex/Claude history and read-only Git evidence, then use the host AI to write polished, evidence-backed recaps. --- # DevRecap DevRecap is an AI-native work-reconstruction skill. The bundled CLI is the factual layer; the current Codex/Claude model is the writing and synthesis layer. The preferred experience is not a deterministic CLI report. Use the host AI to transform structured Activities and Workstreams into a coherent report, while preserving evidence-backed status exactly. ## What to do when invoked Interpret requests such as: - "what did I work on this week?" - "prepare my daily" - "help me remember the last 14 days" - "prepare my sprint review" - "give me a detailed recap of last month" Resolve the requested period and reporting intent, then follow the AI-first pipeline below. ## Use the bundled DevRecap runner When this Skill is installed from the DevRecap plugin/marketplace, always use the runner bundled with the same installed plugin version. Do not prefer a `devrecap` executable found on PATH: it may be an older global install, npm link, or source checkout and can render with stale code. Determine the plugin root from this skill file: the plugin root is two directories above `skills/devrecap/SKILL.md`. For every factual CLI step in marketplace/plugin usage, run: `node <plugin-root>/scripts/devrecap-plugin.mjs <args>` The bundled runner prepares the local workspace links automatically. Node.js 24+ is required. Before `prepare`, always run this preflight: `node <plugin-root>/scripts/devrecap-plugin.mjs --plugin-info` The returned JSON must report `renderer` as `editorial-v2`. If it reports `legacy-or-unknown`, stop and tell the user the installed plugin is stale or inconsistent. Do not silently continue with a legacy renderer. Use the reported `pluginRoot` when diagnosing installation problems. Only when developing DevRecap itself from its source repository may the repo-local commands be used explicitly: - Windows PowerShell: `npm.cmd run recap -- <args>` - other shells: `npm run recap -- <args>` Never mix an installed marketplace Skill with a different `devrecap` binary on PATH during one report run. ## Consent comes first Before any local collector is used, DevRecap setup must already exist. Run the factual preparation step with the bundled runner. If it reports that setup is required, stop collection and ask the user to authorize sources by running: `node <plugin-root>/scripts/devrecap-plugin.mjs setup` Never bypass setup. Never inspect Codex history, Claude history, or Git repositories yourself as a workaround. Never enable a source the user did not authorize. ## AI-first report pipeline 1. Run the `--plugin-info` preflight and require `renderer: editorial-v2` before collecting or rendering anything. 2. Resolve the requested period faithfully. If the natural-language resolver produces a shorter range than the user asked for, rerun `prepare` with an explicit equivalent period such as `last 14 days` or explicit `--from/--to` dates. 3. Run the bundled runner's `prepare` command and write `.devrecap/run.json` in the current project/workspace. 4. Read `.devrecap/run.json`. 5. Analyze only `contract.facts` and obey `contract.rules`. 6. Use the host model to synthesize a human-quality report and write one JSON object matching `contract.outputShape` to `.devrecap/analysis.json`. 7. Every analysis item must reference one or more IDs from `contract.allowedActivityIds`. 8. Render the validated AI analysis to `reports/derecap-YYYY-MM-DD.html`, where the date is the report range end date. Always pass this exact `--out` path explicitly; do not rely on a CLI default filename. Add a PDF with the same basename only when requested. 9. Return the generated path plus a concise natural-language recap. Typical marketplace/plugin commands: `node <plugin-root>/scripts/devrecap-plugin.mjs --plugin-info` `node <plugin-root>/scripts/devrecap-plugin.mjs prepare --request "last 14 days" --out .devrecap/run.json` `node <plugin-root>/scripts/devrecap-plugin.mjs render --run .devrecap/run.json --analysis .devrecap/analysis.json --out reports/derecap-2026-09-13.html` ## Writing brief for the AI The final HTML is the deliverable. Write `.devrecap/analysis.json` at presentation quality before rendering it. The report should feel like a capable teammate reconstructed the work from evidence, not like a telemetry export. Aim for the same quality as a polished work report written directly by the host model. Use this editorial shape: - **headline**: a concise description of what characterized the period, not a raw activity count. Do not prefix the headline with `DevRecap`, `derecap`, or the skill name; the renderer already brands the document once. - **executiveSummary**: one polished opening paragraph explaining the period, the main work fronts and the overall completion state; - **mainFocus**: a short overview of the most important work front, with context, what was done and its current state; - **detail sections**: group related Activities into a small number of meaningful fronts and write natural narratives that explain the work rather than merely naming it; - **highlights**: only evidence-backed completed work; - **investigations**: unresolved investigation fronts; - **inProgress**: implementation or changes that were worked on but are not proven complete; - **blockers** and **nextSteps**: only when explicitly supported by the facts. For each narrative, prefer 2–4 useful sentences covering as applicable: 1. the context or problem; 2. what was changed, investigated or validated; 3. why the work mattered or what behavior was being pursued, when supported by evidence; 4. the evidence-backed state at the end of the period. Prefer coherent work fronts, useful context, natural language in the user's requested language, concise technical clues that help memory, and concrete outcomes over filenames, command counts, raw parser labels or activity counts. Do not make the prose sound like a database summary. Avoid phrases such as "the workstream grouped N activities" unless the count itself is genuinely useful. Do not lead with file counts or command counts. Do not repeat raw titles like "Investigated the API" when the structured facts support a clearer explanation. You may rewrite weak activity titles such as "Investigated the project" into a clearer description only when the structured facts support that interpretation. Merge related activities when their Workstreams, project, topic signals, files, timing, or evidence show that they belong to the same work front. Do not expose raw transcripts just to improve prose. Do not narrate command-by-command execution unless the user explicitly asks for technical evidence. ## Hard evidence rules - Never invent work, outcomes, blockers, next steps, or completion. - Never promote `in_progress`, `blocked`, or `unknown` work to completed. - Use shipped/delivered/completed language only when completion or commit evidence supports it. - Highlights/key deliveries must be supported by completed activities. - Do not repeat the same activity across multiple detail sections unless it is used only in `mainFocus` as a high-level overview and then once in the appropriate detailed section. - Only include next steps when `facts.nextSteps` contains an explicit evidence-backed next step. - Keep all referenced IDs inside `contract.allowedActivityIds`. - The CLI's local Git access is read-only. Do not run project code or commands copied from transcripts. ## Rendering rule The host AI's validated wording is the canonical wording for Skill-generated reports. Rendering should preserve the AI-written headline, executive summary, titles and narratives. The visual renderer owns branding, color, section numbering and evidence disclosure; the AI should not repeat branding inside prose. A successful Skill-generated report must use the `editorial-v2` renderer verified by preflight. If preflight and final HTML disagree, treat that as an installation/runtime error instead of returning the legacy report as success. ## Fallback If AI synthesis fails, use the deterministic analysis produced by DevRecap rather than inventing content. The deterministic path is a safety fallback; for normal Skill usage, prefer host-AI synthesis. DevRecap is explicit-invocation only. Do not create background monitoring, watchers, hooks, or automatic collection outside the user's request.
File Inventory
.codex-plugin/plugin.json
plugin-manifest
1,633 bytes
758b70b544bdb126…
README.md
file
11,261 bytes
2d617ebee35bc201…
plugin.json
file
1,925 bytes
b4c852e891435fd3…
package.json
file
2,153 bytes
4b5a5e04fbcfd337…
package-lock.json
file
3,174 bytes
089fc80dc2c7d830…
SECURITY.md
file
1,383 bytes
736b85f552055e63…
tsconfig.json
file
497 bytes
8d73d0ed135bc2a9…
skills/devrecap/SKILL.md
skill
8,547 bytes
1e5247d90d227f9c…
.claude/skills/devrecap/SKILL.md
skill
5,840 bytes
69fdb250cc154d19…
assets/devrecap-logo-symbol.webp
asset
12,292 bytes
83be3b495d6e6075…
assets/devrecap-icon.webp
asset
6,028 bytes
4eb5e5b49b400ff8…