V

VibeRaven

viberaven/viberaven · v1.7.6 · Development & Workflow

by VibeRavenAwesome AI Plugins

Skill pack and plugin that give coding agents architecture, provider and release context, with repository check-and-fix workflows for Vercel and Supabase apps

InstallSourceClaim this plugin
Follow0
Trust Score77Security scanPartialComponents18
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is VibeRaven a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • Claude Code
  • Antigravity CLI
  • Cursor
  • 18 skills

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is VibeRaven?

VibeRaven is a published development & workflow plugin for AI coding agents that works with Codex, Claude Code, Antigravity CLI and Cursor, developed by VibeRaven and distributed through the HOL AI plugin registry. Skill pack and plugin that give coding agents architecture, provider and release context, with repository check-and-fix workflows for Vercel and Supabase apps.

Canonical slug
viberaven/viberaven
Version
v1.7.6 · updated Nov 4, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Partial scan
Digest verified
Yes
18 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

77

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
40/100
MCP server setup
100/100
Plugin Security
91/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/ohad6k/VibeRaven
Source commit
b83b4eef7055…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Partial scan
Security result
91
Score from finished checks
0
High findings

Some checks did not finish: Cisco skill scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
codex-plugin-scanner
Grade
A · Excellent
Version
3.24.2
codex:hol-plugin-scanner-rHsoHA / cisco-skill-scanner: failedcodex:hol-plugin-scanner-rHsoHA / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

13/16

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

28/31

9 checks

[codex:.] Security

13/16

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

[gemini:.] Gemini Extension

15/15

3 checks

[gemini:.] Security

13/16

6 checks

[gemini:.] Operational Security

N/A

5 checks · not applicable

[gemini:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSINGReported 3 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the viberaven entry from the viberaven-plugins marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall viberaven@viberaven-plugins.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "viberaven",
  "version": "1.7.6",
  "description": "VibeRaven Studio and architecture/production-context skills for AI-built apps.",
  "author": {
    "name": "VibeRaven",
    "url": "https://github.com/ohad6k/VibeRaven"
  },
  "homepage": "https://github.com/ohad6k/VibeRaven",
  "repository": "https://github.com/ohad6k/VibeRaven",
  "license": "MIT",
  "keywords": [
    "ai-built-apps",
    "production-context",
    "release-drift",
    "provider-context",
    "skills"
  ],
  "skills": "./",
  "interface": {
    "displayName": "VibeRaven",
    "developerName": "VibeRaven",
    "shortDescription": "Give agents architecture, release, and provider context before fixes.",
    "longDescription": "Open the VibeRaven Studio with npx -y [email protected], or install the skills pack so coding agents follow one senior-engineer flow: architecture, version/release context, provider boundary, MCP/Studio context, then the smallest safe fix.",
    "category": "Developer Tools",
    "capabilities": [
      "Instructions",
      "Skills",
      "Local Studio",
      "Architecture context",
      "Production context"
    ],
    "websiteURL": "https://github.com/ohad6k/VibeRaven",
    "defaultPrompt": [
      "Use architecture-context at the start of real app work to ask low-level product questions, then route answered work to architecture-plan before a fix.",
      "Use the VibeRaven flow: architecture questions -> architecture plan -> version/release context -> provider boundary -> MCP/Studio context -> scoped fix.",
      "Ask concise missing-context questions before planning when architecture, last working version, provider, or deploy target is unclear.",
      "Use production-context to maintain .viberaven/production-context.md.",
      "Use what-broke to find what changed and which architecture boundary is affected before editing.",
      "Use go-live when the user wants GitHub push, Vercel deploy, and live URL proof."
    ],
    "brandColor": "#7c3aed"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/ohad6k/VibeRaven
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

18 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • viberaven

    .agents/skills/viberaven/SKILL.md

    Use for Supabase RLS and migrations, grants and 42501 errors, a service role key in client code, Vercel env vars, Stripe webhook signature checks, or a Vercel + Supabase review before deploy. Choose local repository checks or hosted SQL/error guidance by the actual tools available. Local checks are free: no login or API key.

    Raw SKILL.md

  • viberaven

    .claude/skills/viberaven/SKILL.md

    Use for Supabase RLS and migrations, grants and 42501 errors, a service role key in client code, Vercel env vars, Stripe webhook signature checks, or a Vercel + Supabase review before deploy. Choose local repository checks or hosted SQL/error guidance by the actual tools available. Local checks are free: no login or API key.

    Raw SKILL.md

  • architecture-context

    agent-skills/architecture-context/SKILL.md

    Use when an AI coding agent starts real app work, product feature design, provider work, migrations, auth, billing, storage, webhooks, deploys, or any task where unclear architecture could cause broad or unsafe changes.

    Raw SKILL.md

  • architecture-plan

    agent-skills/architecture-plan/SKILL.md

    Use when VibeRaven architecture questions have been answered, a feature/fix has unclear boundaries, or an agent needs to turn product answers plus repo evidence into a workstream architecture plan before editing.

    Raw SKILL.md

  • go-live

    agent-skills/go-live/SKILL.md

    Use when a user wants an AI-built local project pushed to GitHub and deployed live on Vercel with the least friction, while keeping git, secrets, provider setup, and live proof explicit.

    Raw SKILL.md

  • production-context

    agent-skills/production-context/SKILL.md

    Use when changing, reviewing, debugging, deploying, or documenting production-sensitive work involving providers, releases, migrations, auth, billing, webhooks, env vars, incidents, rollback notes, fragile customer paths, or architecture boundaries.

    Raw SKILL.md

  • vercel-supabase-launch-check

    agent-skills/vercel-supabase-launch-check/SKILL.md

    Use when an AI-built app on Vercel and Supabase (Lovable, Bolt, v0, Cursor or Claude Code output) is about to launch or be handed to a client, or when the user asks whether Supabase tables are missing RLS, whether a policy lets everyone read or write, whether a service role or secret key leaked into client code or a NEXT_PUBLIC_ variable, why env vars differ in production, or why a Stripe webhook fails after deploy. Runs the free local VibeRaven repo check, with no login and no database credentials. Not a live database or penetration test, and not for other stacks.

    Raw SKILL.md

  • viberaven

    agent-skills/viberaven/SKILL.md

    Use for Supabase RLS and migrations, grants and 42501 errors, a service role key in client code, Vercel env vars, Stripe webhook signature checks, or a Vercel + Supabase review before deploy. Choose local repository checks or hosted SQL/error guidance by the actual tools available. Local checks are free: no login or API key.

    Raw SKILL.md

  • what-broke

    agent-skills/what-broke/SKILL.md

    Use when an AI agent needs to stop guessing, find which version broke an app, compare releases, read git tags/diffs/changelogs, and connect the code change to provider context such as database, storage, deployment, and external runtime behavior before editing.

    Raw SKILL.md

  • prelaunch-check

    plugins/viberaven-hosted/skills/prelaunch-check/SKILL.md

    Review Supabase migrations for row-access and grant gaps, inspect a public GitHub app's migrations from a chat without a terminal, or check a local Vercel and Supabase repository before release. Use the tools actually connected. Not for general SQL, unrelated stacks, or proof of live database security.

    Raw SKILL.md

  • prelaunch-check

    plugins/viberaven/skills/prelaunch-check/SKILL.md

    Use when the user has an AI-built app that deploys on Vercel and uses Supabase and asks whether it is ready to launch or hand off, wants to find Supabase migrations that create tables without RLS, or pastes a production error about RLS, env vars, the database connection, the service role key or a Stripe webhook. Not for other stacks, general SQL or deployment questions, or one local error.

    Raw SKILL.md

  • architecture-context

    skills/architecture-context/SKILL.md

    Use when an AI coding agent starts real app work, product feature design, provider work, migrations, auth, billing, storage, webhooks, deploys, or any task where unclear architecture could cause broad or unsafe changes.

    Raw SKILL.md

  • architecture-plan

    skills/architecture-plan/SKILL.md

    Use when VibeRaven architecture questions have been answered, a feature/fix has unclear boundaries, or an agent needs to turn product answers plus repo evidence into a workstream architecture plan before editing.

    Raw SKILL.md

  • go-live

    skills/go-live/SKILL.md

    Use when a user wants an AI-built local project pushed to GitHub and deployed live on Vercel with the least friction, while keeping git, secrets, provider setup, and live proof explicit.

    Raw SKILL.md

  • production-context

    skills/production-context/SKILL.md

    Use when changing, reviewing, debugging, deploying, or documenting production-sensitive work involving providers, releases, migrations, auth, billing, webhooks, env vars, incidents, rollback notes, fragile customer paths, or architecture boundaries.

    Raw SKILL.md

  • vercel-supabase-launch-check

    skills/vercel-supabase-launch-check/SKILL.md

    Use when an AI-built app on Vercel and Supabase (Lovable, Bolt, v0, Cursor or Claude Code output) is about to launch or be handed to a client, or when the user asks whether Supabase tables are missing RLS, whether a policy lets everyone read or write, whether a service role or secret key leaked into client code or a NEXT_PUBLIC_ variable, why env vars differ in production, or why a Stripe webhook fails after deploy. Runs the free local VibeRaven repo check, with no login and no database credentials. Not a live database or penetration test, and not for other stacks.

    Raw SKILL.md

  • viberaven

    skills/viberaven/SKILL.md

    Use for Supabase RLS and migrations, grants and 42501 errors, a service role key in client code, Vercel env vars, Stripe webhook signature checks, or a Vercel + Supabase review before deploy. Choose local repository checks or hosted SQL/error guidance by the actual tools available. Local checks are free: no login or API key.

    Raw SKILL.md

  • what-broke

    skills/what-broke/SKILL.md

    Use when an AI agent needs to stop guessing, find which version broke an app, compare releases, read git tags/diffs/changelogs, and connect the code change to provider context such as database, storage, deployment, and external runtime behavior before editing.

    Raw SKILL.md

File inventory

.agents/skills/viberaven/SKILL.md

skill

19,604 bytes

2dbadd5d4dedd149…

.claude-plugin/marketplace.json

file

356 bytes

866383c620a66662…

.claude-plugin/plugin.json

file

271 bytes

e47f712288fd5e39…

.claude/skills/viberaven/SKILL.md

skill

19,604 bytes

2dbadd5d4dedd149…

.codex-plugin/plugin.json

plugin-manifest

1,822 bytes

5c6ab02a22218535…

.cursor-plugin/marketplace.json

file

352 bytes

723b8e25f8dda0e9…

.cursor/rules/viberaven-core.mdc

file

1,097 bytes

d9722958db68ec27…

.cursor/rules/viberaven-deploy.mdc

file

349 bytes

de4a0c0a8607cda0…

.cursor/rules/viberaven-payments.mdc

file

465 bytes

94bda405095ef7ee…

.cursor/rules/viberaven-supabase-rls.mdc

file

362 bytes

7e25eae6e3bd3e7a…

agent-skills/architecture-context/agents/openai.yaml

file

372 bytes

dea798afe0d94d5c…

agent-skills/architecture-context/SKILL.md

skill

6,447 bytes

bd425d0b138d6db9…

agent-skills/architecture-plan/agents/openai.yaml

file

326 bytes

4329861489f0537b…

agent-skills/architecture-plan/SKILL.md

skill

4,181 bytes

df400c315eb93b59…

agent-skills/go-live/agents/openai.yaml

file

281 bytes

3f43049b310b7ddb…

agent-skills/go-live/SKILL.md

skill

6,465 bytes

8f4e60c0e491ffe6…

agent-skills/production-context/agents/openai.yaml

file

377 bytes

2fc645eb10213aa9…

agent-skills/production-context/SKILL.md

skill

2,639 bytes

aaccf50f0eee0abd…

agent-skills/README.md

file

3,243 bytes

a1e90c33f292a340…

agent-skills/scripts/verify-skill.mjs

file

9,351 bytes

03ee95e65e4d9672…

agent-skills/vercel-supabase-launch-check/SKILL.md

skill

4,455 bytes

6738134fb7b6e255…

agent-skills/viberaven/agents/openai.yaml

file

280 bytes

1721f2ef4a4e38a0…

agent-skills/viberaven/SKILL.md

skill

19,550 bytes

9a7764eb1e8426d5…

agent-skills/what-broke/agents/openai.yaml

file

258 bytes

ad1c5c3cf18a2f69…

agent-skills/what-broke/SKILL.md

skill

4,714 bytes

ba77610a17790f46…

AGENTS.md

file

7,835 bytes

9b05b8066b510d44…

CLAUDE.md

file

5,450 bytes

df3098547406ceb2…

commands/viberaven-help.toml

file

402 bytes

2d89cefa60f916f2…

commands/viberaven-launch.toml

file

342 bytes

05864934c3ebac3b…

commands/viberaven-production-context.toml

file

392 bytes

b72817613fa61371…

commands/viberaven-work.toml

file

648 bytes

93a6a933841169e0…

gemini-extension.json

file

484 bytes

cb7d9db3a0449372…

GEMINI.md

file

5,438 bytes

1546c7fea783fc10…

LICENSE

file

1,456 bytes

da81b3e327aa769c…

plugins/viberaven-hosted/skills/prelaunch-check/SKILL.md

skill

3,882 bytes

9bbda25a838db2d1…

plugins/viberaven/skills/prelaunch-check/SKILL.md

skill

2,164 bytes

63a61a954ca4589f…

prompts/compare-last-two-releases.md

file

3,155 bytes

2bc1accd82d1758b…

README.md

file

21,934 bytes

85cedc1633945066…

skills/architecture-context/agents/openai.yaml

skill

380 bytes

e3d36468afdc348e…

skills/architecture-context/SKILL.md

skill

6,595 bytes

52777d2e0abe9b69…

skills/architecture-plan/agents/openai.yaml

skill

331 bytes

df8dd2fc7b4f5629…

skills/architecture-plan/SKILL.md

skill

4,300 bytes

fafc4cd2676ebdb8…

skills/go-live/agents/openai.yaml

skill

289 bytes

22acc0b874d368a3…

skills/go-live/SKILL.md

skill

6,465 bytes

8f4e60c0e491ffe6…

skills/production-context/agents/openai.yaml

skill

385 bytes

f9d919c0de57db3d…

skills/production-context/SKILL.md

skill

2,730 bytes

302cde2ad5dbaaa2…

skills/vercel-supabase-launch-check/SKILL.md

skill

4,455 bytes

6738134fb7b6e255…

skills/viberaven/agents/openai.yaml

skill

280 bytes

1721f2ef4a4e38a0…

skills/viberaven/SKILL.md

skill

19,550 bytes

9a7764eb1e8426d5…

skills/what-broke/agents/openai.yaml

skill

266 bytes

482790ee8f71f8d3…

skills/what-broke/SKILL.md

skill

4,797 bytes

6fa5c6e55e555ae5…

VibeRaven — Frequently asked questions

What is VibeRaven?
VibeRaven is an AI plugin in the HOL registry. Skill pack and plugin that give coding agents architecture, provider and release context, with repository check-and-fix workflows for Vercel and Supabase apps.
How do I install VibeRaven?
Install VibeRaven in your harness: Codex — codex plugin marketplace add ohad6k/VibeRaven; Claude Code — /plugin marketplace add ohad6k/VibeRaven; Cursor — npx [email protected] add ohad6k/VibeRaven. Full step-by-step guidance is on the HOL plugin page.
How do I install VibeRaven in HOL Guard?
To install VibeRaven in HOL Guard, start with hol-guard plugin install viberaven/viberaven --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install VibeRaven in Codex?
To install VibeRaven in Codex, start with codex plugin marketplace add ohad6k/VibeRaven. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install VibeRaven in Claude Code?
To install VibeRaven in Claude Code, start with /plugin marketplace add ohad6k/VibeRaven. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for VibeRaven computed?
VibeRaven has a HOL Trust Score of 77 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/viberaven%2Fviberaven/trust
Who publishes VibeRaven?
VibeRaven is published by VibeRaven and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from VibeRaven.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins