C

CutWater

yourakshaw/cutwater · v0.1.0 · Agent Skills

by YourAKShawOwner verifiedAwesome AI Plugins

Agent skill that audits GitHub repositories and guides issue-first development from branches and commits to pull requests

Follow0
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is CutWater a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • Agent Skills
  • 1 skill

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

What is CutWater?

CutWater is a published agent skills plugin for AI coding agents that works with Claude Code and Agent Skills, developed by YourAKShaw and distributed through the HOL AI plugin registry. Agent skill that audits GitHub repositories and guides issue-first development from branches and commits to pull requests.

Canonical slug
yourakshaw/cutwater
Version
v0.1.0 · updated Nov 13, 2026

Registry snapshot

Owner verification
Verified on HOL as @YourAKShaw
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Partial scan
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
84

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
93/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/YourAKShaw/CutWater
Source commit
e1e793cec25d…
Publisher verified
Yes
Owner verified
@YourAKShaw
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Partial scan
Security result
93
Score from finished checks
0
High findings

Some checks did not finish: Cisco skill scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
codex-plugin-scanner
Grade
A · Excellent
Version
3.24.2
codex:hol-plugin-scanner-djFKHG / cisco-skill-scanner: failedcodex:hol-plugin-scanner-djFKHG / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

6/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

6/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the cutwater entry from the cutwater marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall cutwater@cutwater.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "cutwater",
  "displayName": "cutwater",
  "version": "0.1.0",
  "description": "A GitHub-native, issue-first SDLC workflow: audit and set up a repository, then drive every task as issue, branch, Conventional Commits and a pull request the user merges.",
  "author": {
    "name": "Ayush Kumar Shaw",
    "url": "https://github.com/YourAKShaw"
  },
  "homepage": "https://github.com/YourAKShaw/CutWater#readme",
  "repository": "https://github.com/YourAKShaw/CutWater",
  "license": "MIT",
  "keywords": [
    "github",
    "gh cli",
    "issue-first",
    "conventional commits",
    "pull requests",
    "sdlc",
    "repository setup"
  ],
  "interface": {
    "displayName": "cutwater",
    "developerName": "YourAKShaw"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/YourAKShaw/CutWater
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

File inventory

.claude-plugin/marketplace.json

file

411 bytes

c6234773d0efab7c…

.claude-plugin/plugin.json

file

655 bytes

98dcc5ad59df2d5c…

.codex-plugin/plugin.json

plugin-manifest

704 bytes

4c28fcd5f01b1801…

.github/dependabot.yml

file

368 bytes

d9f444f67b40d5bc…

eslint.config.mjs

file

621 bytes

65cf4f4b4014de2f…

LICENSE

file

1,432 bytes

d05427df65626272…

package-lock.json

file

63,007 bytes

4e888c0cd9ef1694…

package.json

file

1,325 bytes

9580cc8be60a5390…

README.md

file

10,022 bytes

e5f8e6c135846ba9…

SECURITY.md

file

2,253 bytes

332ce74df787b743…

skills/cutwater/agents/openai.yaml

skill

469 bytes

e002ade13caa9f79…

skills/cutwater/assets/client-rules/claude-code-settings.json

skill

635 bytes

e99d345de3fe1fd5…

skills/cutwater/assets/community/CODE_OF_CONDUCT.md

skill

8,491 bytes

b34f433222fc5236…

skills/cutwater/assets/community/CONTRIBUTING.md

skill

2,192 bytes

c6621cb95ed3f118…

skills/cutwater/assets/community/README.md

skill

1,005 bytes

a06e2486f51f9c38…

skills/cutwater/assets/community/SECURITY.md

skill

1,084 bytes

e2d028fb1bf1a823…

skills/cutwater/assets/dependabot.yml

skill

394 bytes

d9f167f0141b34a0…

skills/cutwater/assets/issue-bodies/bug.md

skill

664 bytes

6bc9526faf67f040…

skills/cutwater/assets/issue-bodies/chore.md

skill

588 bytes

feeb8e64577e4a46…

skills/cutwater/assets/issue-bodies/docs.md

skill

438 bytes

21bf82106a87b067…

skills/cutwater/assets/issue-bodies/feature.md

skill

585 bytes

c55720abcb7a5560…

skills/cutwater/assets/issue-forms/bug.yml

skill

1,877 bytes

5bd802428042b515…

skills/cutwater/assets/issue-forms/chore.yml

skill

1,403 bytes

e33feb4754b6bf6e…

skills/cutwater/assets/issue-forms/config.yml

skill

410 bytes

43cbe599dfeb4f7b…

skills/cutwater/assets/issue-forms/docs.yml

skill

927 bytes

4ed2ace596449a33…

skills/cutwater/assets/issue-forms/feature.yml

skill

1,577 bytes

bbc60fc47bfe1137…

skills/cutwater/assets/labels.json

skill

2,308 bytes

d46adc9924a8d198…

skills/cutwater/assets/licenses/Apache-2.0.txt

skill

11,358 bytes

c95bae1d1ce0235e…

skills/cutwater/assets/licenses/GPL-3.0.txt

skill

35,150 bytes

e57f1c320b8cf879…

skills/cutwater/assets/licenses/MIT.txt

skill

1,070 bytes

45651d6af45c674b…

skills/cutwater/assets/manifest.schema.json

skill

2,736 bytes

1ef4e05e323cd71e…

skills/cutwater/assets/pr/PULL_REQUEST_TEMPLATE.md

skill

718 bytes

8d047f144bbbeecf…

skills/cutwater/assets/repo/renovate.json

skill

106 bytes

7748ea026d07812c…

skills/cutwater/assets/rulesets/default-branch.json

skill

605 bytes

0f149cc481176aa8…

skills/cutwater/assets/workflows/ci-generic.yml

skill

682 bytes

8f03185307092059…

skills/cutwater/assets/workflows/ci-go.yml

skill

829 bytes

54132fdb63285992…

skills/cutwater/assets/workflows/ci-node.yml

skill

856 bytes

5fffff0e60a869ec…

skills/cutwater/assets/workflows/ci-python.yml

skill

1,112 bytes

01ebf1595e0ddb44…

skills/cutwater/assets/workflows/release.yml

skill

581 bytes

5df8ea148287d4b0…

skills/cutwater/references/extensions.md

skill

3,293 bytes

eea58d11a9bcafb5…

skills/cutwater/references/gh-commands.md

skill

5,727 bytes

f68299cf544498ff…

skills/cutwater/references/init-checklist.md

skill

7,728 bytes

74e16071d56439a1…

skills/cutwater/references/interruptions.md

skill

4,552 bytes

5eb943f40d603cc5…

skills/cutwater/references/interview.md

skill

4,768 bytes

dc01f45fbe023191…

skills/cutwater/references/security.md

skill

5,990 bytes

f7630d367c17a20a…

skills/cutwater/references/task-lifecycle.md

skill

6,743 bytes

c5c901f47e60b4d0…

skills/cutwater/references/wiki.md

skill

2,500 bytes

a2d761f12a84dce6…

skills/cutwater/scripts/cutwater.mjs

skill

125,455 bytes

116c15b1f6325f71…

skills/cutwater/scripts/README-scripts.md

skill

973 bytes

483962b2fd4bf441…

skills/cutwater/SKILL.md

skill

10,739 bytes

4051727cee7133a0…

tsconfig.json

file

575 bytes

e49b9eb6a5546641…

CutWater — Frequently asked questions

What is CutWater?
CutWater is an AI plugin in the HOL registry. Agent skill that audits GitHub repositories and guides issue-first development from branches and commits to pull requests.
How do I install CutWater?
Install CutWater in your harness: Claude Code — /plugin marketplace add YourAKShaw/CutWater; Any agent — npx [email protected] add YourAKShaw/CutWater. Full step-by-step guidance is on the HOL plugin page.
How do I install CutWater in HOL Guard?
To install CutWater in HOL Guard, start with hol-guard plugin install yourakshaw/cutwater --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install CutWater in Claude Code?
To install CutWater in Claude Code, start with /plugin marketplace add YourAKShaw/CutWater. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for CutWater computed?
CutWater has a HOL Trust Score of 84 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/yourakshaw%2Fcutwater/trust
Who publishes CutWater?
CutWater is published by YourAKShaw and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins