Stop That Shit icon

Stop That Shit

stop-that-shit-contributors/stop-that-shit · v0.2.5 · Development & Workflow

Local-first scope guard for Codex with explicit task modes, before-action checks, and bounded dependency, hash, and subagent decisions.

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Stop That Shit a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • Claude Code
  • 4 skills
  • Runs hooks on agent events

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Stop That Shit?

Stop That Shit is a published development & workflow plugin for AI coding agents that works with Codex and Claude Code, developed by Stop That Shit contributors and distributed through the HOL AI plugin registry. Local-first scope guard for Codex with explicit task modes, before-action checks, and bounded dependency, hash, and subagent decisions.

Canonical slug
stop-that-shit-contributors/stop-that-shit
Version
v0.2.5 · updated Nov 10, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Partial scan
Digest verified
Yes
4 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

88

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
92/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/lennney/stop-that-shit
Source commit
32fff44ecea4…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Partial scan
Security result
92
Score from finished checks
0
High findings

Some checks did not finish: Cisco skill scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
codex-plugin-scanner
Grade
A · Excellent
Version
3.24.2
codex:hol-plugin-scanner-lOoxpx / cisco-skill-scanner: failedcodex:hol-plugin-scanner-lOoxpx / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

28/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

15/15

3 checks

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the stop-that-shit entry from the stop-that-shit marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall stop-that-shit@stop-that-shit.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "stop-that-shit",
  "version": "0.2.5",
  "description": "Keep Codex tasks bounded and reduce defensive wording with local-first guardrails and two Skills.",
  "author": {
    "name": "Stop That Shit contributors",
    "url": "https://github.com/lennney"
  },
  "homepage": "https://github.com/lennney/stop-that-shit",
  "repository": "https://github.com/lennney/stop-that-shit",
  "license": "MIT",
  "keywords": [
    "codex",
    "scope-control",
    "overengineering",
    "guardrail"
  ],
  "skills": "./",
  "hooks": "./hooks/codex-hooks.json",
  "interface": {
    "displayName": "Stop That Shit(别再造史了)",
    "developerName": "Stop That Shit contributors",
    "shortDescription": "Bound agent work and reduce defensive writing.",
    "longDescription": "Stop That Shit runs locally. Its Guard blocks covered unneeded actions, and its optional STSS Skill reduces defensive wording in decision-facing text.",
    "category": "Productivity",
    "capabilities": [
      "Local",
      "Guardrail"
    ],
    "websiteURL": "https://github.com/lennney/stop-that-shit",
    "privacyPolicyURL": "https://github.com/lennney/stop-that-shit/blob/main/PRIVACY.md",
    "termsOfServiceURL": "https://github.com/lennney/stop-that-shit/blob/main/LICENSE",
    "brandColor": "#D92D20",
    "composerIcon": "./assets/stop-icon.svg",
    "logo": "./assets/stop-icon.svg",
    "defaultPrompt": [
      "$stop-that-shit review -- Review this diff. Report findings; do not edit.",
      "$stop-that-shit change -- Fix the failing test only.",
      "$stop-that-shit lock change agents=0 -- Make the requested change without delegation.",
      "$stss rewrite -- Make this proposal direct."
    ]
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/lennney/stop-that-shit
Marketplace path
.claude-plugin/marketplace.json
Source path
plugins/lennney/stop-that-shit
Install policy
AVAILABLE

Skills

4 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • stop-that-shit

    codex-plugin/skills/stop-that-shit/SKILL.md

    Complete requested work while preventing speculative defenses and scope creep. Use when considering extra hardening, reviewing possible overengineering, resolving repeated verification loops, following explicit task boundaries, or when the user invokes Stop That Shit. Ordinary use of validation, retries, or dependencies alone is not a trigger.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • stss

    codex-plugin/skills/stss/SKILL.md

    Reduce defensive disclaimers, stacked hedging, and self-protective narration when drafting, rewriting, or auditing proposals, articles, case studies, captions, and other reader-facing prose. Use when defensive wording is requested for review or appears in a draft, including wording the assistant adds. Preserve meaningful limits; do not perform general style cleanup or ordinary code work.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • stop-that-shit

    skills/stop-that-shit/SKILL.md

    Complete requested work while preventing speculative defenses and scope creep. Use when considering extra hardening, reviewing possible overengineering, resolving repeated verification loops, following explicit task boundaries, or when the user invokes Stop That Shit. Ordinary use of validation, retries, or dependencies alone is not a trigger.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • stss

    skills/stss/SKILL.md

    Reduce defensive disclaimers, stacked hedging, and self-protective narration when drafting, rewriting, or auditing proposals, articles, case studies, captions, and other reader-facing prose. Use when defensive wording is requested for review or appears in a draft, including wording the assistant adds. Preserve meaningful limits; do not perform general style cleanup or ordinary code work.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.agents/plugins/marketplace.json

file

417 bytes

c46d40655139ea1e…

.claude-plugin/marketplace.json

file

457 bytes

a5ca1857055ec9fa…

.claude-plugin/plugin.json

file

613 bytes

6a7dd9248b78d968…

.codex-plugin/plugin.json

plugin-manifest

1,557 bytes

2dd264e0951b9fe3…

assets/stop-icon.svg

asset

727 bytes

db9b6faed9b2d900…

codex-plugin/skills/stop-that-shit/agents/openai.yaml

file

263 bytes

e899bc82bf4aa161…

codex-plugin/skills/stop-that-shit/SKILL.md

skill

9,037 bytes

d2c9fbe048652dde…

codex-plugin/skills/stss/agents/openai.yaml

file

311 bytes

2452069609a07d4a…

codex-plugin/skills/stss/references/examples.md

file

7,597 bytes

7c007d45cc5a9ae1…

codex-plugin/skills/stss/SKILL.md

skill

4,694 bytes

7c969f970a8b095b…

hooks/codex-hooks.json

file

1,670 bytes

7062223d3b23ad02…

hooks/hooks.json

file

2,340 bytes

4d91f299427a35b8…

hooks/stop-that-shit-claude.cjs

file

1,069 bytes

e3e3d46feac31beb…

hooks/stop-that-shit.cjs

file

1,025 bytes

f3c98367790c95f7…

LICENSE

file

1,448 bytes

bf607d4014953395…

package-lock.json

file

11,179 bytes

51e7485570b6376b…

package.json

file

2,912 bytes

14f6022553ad86a7…

README.md

file

14,325 bytes

a4782b15b969da68…

SECURITY.md

file

1,371 bytes

acbaf171cff0c9e2…

skills/stop-that-shit/agents/openai.yaml

skill

263 bytes

e899bc82bf4aa161…

skills/stop-that-shit/SKILL.md

skill

9,037 bytes

d2c9fbe048652dde…

skills/stss/agents/openai.yaml

skill

311 bytes

2452069609a07d4a…

skills/stss/references/examples.md

skill

7,597 bytes

7c007d45cc5a9ae1…

skills/stss/SKILL.md

skill

4,694 bytes

7c969f970a8b095b…

Stop That Shit — Frequently asked questions

What is Stop That Shit?
Stop That Shit is an AI plugin in the HOL registry. Local-first scope guard for Codex with explicit task modes, before-action checks, and bounded dependency, hash, and subagent decisions.
How do I install Stop That Shit?
Install Stop That Shit in your harness: Codex — codex plugin marketplace add lennney/stop-that-shit; Claude Code — /plugin marketplace add lennney/stop-that-shit; Any agent — npx [email protected] add lennney/stop-that-shit. Full step-by-step guidance is on the HOL plugin page.
How do I install Stop That Shit in HOL Guard?
To install Stop That Shit in HOL Guard, start with hol-guard plugin install stop-that-shit-contributors/stop-that-shit --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install Stop That Shit in Codex?
To install Stop That Shit in Codex, start with codex plugin marketplace add lennney/stop-that-shit. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install Stop That Shit in Claude Code?
To install Stop That Shit in Claude Code, start with /plugin marketplace add lennney/stop-that-shit. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for Stop That Shit computed?
Stop That Shit has a HOL Trust Score of 88 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/stop-that-shit-contributors%2Fstop-that-shit/trust
Who publishes Stop That Shit?
Stop That Shit is published by Stop That Shit contributors and listed on HOL.

Directory acceptance

Listed in 1 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins