jko-claude-plugins

skill
Security Audit
Pass
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 10 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This project provides a collection of coding guidelines, anti-patterns, and review rules formatted as agent skills. It helps AI coding assistants write consistent, high-quality code across six specific tech stacks including Rust, Python, ESP32 C++, Swift, and .NET.

Security Assessment
The overall risk is Low. The codebase acts as a set of instructions and guidelines rather than an executable application. It does not request dangerous system permissions or access sensitive user data. A light automated scan of 12 files found no dangerous patterns, malicious code, or hardcoded secrets. Because its primary function is to act as a reference text for AI agents, the attack surface is virtually nonexistent. There is no indication of unwanted shell command execution or rogue network requests.

Quality Assessment
The quality and maintenance of this repository are highly encouraging. It is licensed under the permissive MIT license, allowing for broad usage and modification. The project is actively maintained, with the most recent push occurring today. While the community footprint is small, it has garnered 10 GitHub stars, showing a baseline of peer interest. It follows the shared Agent Skills specification, meaning it integrates cleanly with popular tools like Claude Code, GitHub Copilot CLI, and OpenAI Codex CLI.

Verdict
Safe to use.
SUMMARY

Claude Code plugin marketplace — Rust, ESP32 C++, Python backend, SwiftUI, dead code detection

README.md

jko-claude-plugins

License: MIT Plugins: 6 Commands: 19

These are the guidelines and patterns I use across my projects. They help coding agents review code, catch mistakes, and stay consistent with how I actually want things built. Each plugin covers a stack I work in.

Skills use the shared Agent Skills specification — install as full plugins or individual skills.

Works with

Claude Code GitHub Copilot CLI OpenAI Codex CLI OpenCode

Plugins

Plugin Skill Cmds What it covers
rust rust 5 Ownership, async, unsafe, error handling, type design, anti-patterns
esp32-cpp esp32 4 FreeRTOS, ESP-IDF/PlatformIO, peripherals, memory, all ESP32 variants
python-backend python-backend 3 Litestar, FastAPI, SQLAlchemy, hexagonal architecture, async patterns
dotnet-backend dotnet-backend 4 Pure .NET 10 backend review for Kestrel hosting, REST, SignalR, EF Core, and DI
swiftui swiftui 1 iOS/macOS/visionOS patterns, Liquid Glass, accessibility
dead-code dead-code 2 Unused imports, functions, classes, duplicates, any language

Install

Claude Code

# Add the marketplace
claude plugin marketplace add johnkozaris/jko-claude-plugins

# Install whichever plugins you want
claude plugin install rust@jko-claude-plugins
claude plugin install esp32-cpp@jko-claude-plugins
claude plugin install python-backend@jko-claude-plugins
claude plugin install dotnet-backend@jko-claude-plugins
claude plugin install swiftui@jko-claude-plugins
claude plugin install dead-code@jko-claude-plugins

Or try one without installing:

claude --plugin-dir /path/to/jko-claude-plugins/plugins/rust

GitHub Copilot CLI

# Add the marketplace
copilot plugin marketplace add johnkozaris/jko-claude-plugins

# Install a plugin
copilot plugin install rust@jko-claude-plugins

OpenAI Codex CLI

Codex installs skills directly — no plugin marketplace.

# Inside Codex, install a skill directory from GitHub
$skill-installer install https://github.com/johnkozaris/jko-claude-plugins/tree/main/plugins/rust/skills/rust-expert
$skill-installer install https://github.com/johnkozaris/jko-claude-plugins/tree/main/plugins/esp32-cpp/skills/esp32-expert
$skill-installer install https://github.com/johnkozaris/jko-claude-plugins/tree/main/plugins/python-backend/skills/python-backend-expert
$skill-installer install https://github.com/johnkozaris/jko-claude-plugins/tree/main/plugins/dotnet-backend/skills/dotnet-backend-expert
$skill-installer install https://github.com/johnkozaris/jko-claude-plugins/tree/main/plugins/swiftui/skills/swiftui-expert
$skill-installer install https://github.com/johnkozaris/jko-claude-plugins/tree/main/plugins/dead-code/skills/dead-code-expert

OpenCode

Install skills via skills.sh or copy manually.

# Via skills.sh (auto-detects installed agents)
npx skills add johnkozaris/jko-claude-plugins --full-depth

# Or copy a skill directory manually
cp -r plugins/rust/skills/rust-expert ~/.config/opencode/skills/rust-expert

Use the shell commands above from your terminal. Inside Claude Code and Copilot CLI, the interactive /plugin ... equivalents work too.

Discovery model

The repo uses one shared skill directory per plugin and thin CLI-specific packaging around it.

Tool What it auto-discovers in a working repo How install/discovery works here
Claude Code .claude/skills/, nested .claude/skills/, .claude/commands/, .claude/agents/ Install the marketplace or load a plugin with claude --plugin-dir .... Claude uses .claude-plugin/marketplace.json at the repo root.
GitHub Copilot CLI .github/skills/, .claude/skills/, .github/agents/, .claude/agents/, .github/hooks/ Install the marketplace or a plugin with copilot plugin .... Copilot uses .github/plugin/marketplace.json and prefers .github/plugin/plugin.json when both manifest styles exist.
OpenAI Codex CLI .agents/skills/ from the current directory up to repo root, ~/.agents/skills/, /etc/codex/skills/ Install individual skill directories with $skill-installer or copy them into a scanned .agents/skills/ location. There is no Codex plugin marketplace layer here.

The important part is that all three tools discover the skill directory, not arbitrary plugins/**/skills/** paths. A skill can safely contain references/, scripts/, assets/, and other supporting files next to SKILL.md, but the parent skill directory still has to be reached through that tool's discovery or installation mechanism.

Commands

Claude Code and Copilot CLI can load the plugin command adapters in commands/. Codex and OpenCode consume the skill directories and their supporting files, not the plugin command layer.

Rust

Command What it does
/rust-critique Full code review for soundness, ownership, error handling, types, async, performance
/rust-harden Replace unwrap with proper errors, add SAFETY comments to unsafe, validate inputs
/rust-types Replace primitives with newtypes, booleans with enums, make illegal states unrepresentable
/rust-polish Pre-merge cleanup: dead code, doc comments, clippy, debug artifacts
/rust-teach One-time: scans your project and writes Rust conventions to CLAUDE.md

ESP32

Command What it does
/esp-harden Scan firmware for field failures, crashes, memory issues, and security problems
/esp-debug Help debug crashes, hangs, and peripheral issues
/esp-optimize Optimize for performance, memory, power, or binary size
/esp-teach One-time: discover hardware, find datasheets, persist context to CLAUDE.md

Python

Command What it does
/py-critique Architecture review: SOLID compliance, layer boundaries, anti-patterns, design quality
/py-harden Run the full anti-pattern catalog (AP-01 through AP-22) and fix what it finds
/py-structure Check project layout, file sizes, module splitting, hexagonal architecture compliance

.NET

Command What it does
/dotnet-critique Full backend architecture review for Kestrel-hosted REST and SignalR services
/dotnet-harden Scan for high-impact backend anti-patterns like sync-over-async and fragile state
/dotnet-structure Check solution layout, boundaries, and oversized files
/dotnet-teach One-time: scan a backend and persist conventions to CLAUDE.md

SwiftUI

Command What it does
/swift-critique Review SwiftUI code for patterns, design, accessibility, and performance

Dead Code

Command What it does
/dead-code-scan Read-only scan for unused imports, functions, classes, duplicates
/dead-code-clean Actually remove the dead code it finds

How it works

Each plugin has a SKILL.md that tells the agent what to look for and a references/ directory with the actual patterns, anti-patterns, and examples. The agent only loads the supporting files it needs for the current task, so it does not waste context.

Hook config files are scaffolded in the plugin directories, but this repo does not currently ship active runtime hooks.

Cross-tool compatibility

Feature Claude Code Copilot CLI Codex CLI OpenCode
Skills + references yes yes yes yes
Slash commands yes yes -- --
Hooks yes yes -- --
Plugin marketplace yes yes -- --

Contributing

See CONTRIBUTING.md.

License

MIT

Reviews (0)

No results found