davepoon/plugins/thumbgate/skills/thumbgate
plugins/thumbgate/skills/thumbgate/SKILL.md
# ThumbGate — Pre-Action Gates for AI Coding Agents ## What it does ThumbGate adds deterministic pre-action gates to AI coding agents. Before any destructive operation executes, ThumbGate checks it against enforceable rules. ## Key features - **33 pre-action gates** — block destructive actions (force-push, mass delete, destructive SQL) before they execute - **Thumbs up/down feedback** — type "thumbs down" and the mistake becomes a prevention rule - **Budget enforcement** — action count + time
$ install --global
skillsauthnpx skillsauth add davepoon/buildwithclaude plugins/thumbgate/skills/thumbgateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 18, 2026, 2:35 AM186.6s1 file scanned
SKILL.md
ThumbGate — Pre-Action Gates for AI Coding Agents
What it does
ThumbGate adds deterministic pre-action gates to AI coding agents. Before any destructive operation executes, ThumbGate checks it against enforceable rules.
Key features
- 33 pre-action gates — block destructive actions (force-push, mass delete, destructive SQL) before they execute
- Thumbs up/down feedback — type "thumbs down" and the mistake becomes a prevention rule
- Budget enforcement — action count + time limits prevent runaway sessions
- Self-protection — agent cannot disable its own governance
- NIST/SOC2 compliance tags — enterprise-ready gate rules
Installation
npx thumbgate
Usage
Start a Claude Code session with ThumbGate installed. When the agent does something wrong, type "thumbs down" — ThumbGate captures the mistake, distills a lesson, and creates a prevention rule that blocks the pattern from repeating.
Related Skills
davepoon/anti-ui-slop
development
VerifiedTrustedCommunity
Stop coding agents from shipping generic UI. Use UIZZE's 800,000+ real web and iOS screens to build product-specific interfaces, define a design contract, cover required states, and run a hard finish gate. Use for web or iOS UI design, implementation, redesign, critique, and pre-ship review in Codex, Claude Code, Cursor, Copilot, and other coding agents.
3,220SKILL.mdUpdated Jul 27, 2026
davepoon/theboardroom
development
VerifiedTrustedCommunity
Convene an AI executive board of directors (CEO, CFO, COO, CLO, CISO sub-agent personas) to vet a business idea, product concept, new service offering, M&A target, or operational initiative — and deliver an integrated board memo with a Go/No-Go recommendation. Use this skill whenever the user wants an idea vetted, stress-tested, or reviewed from multiple executive perspectives; asks to "present this to the board," "run this by the boardroom," "vet this idea," "poke holes in this plan," or "prep me for a board meeting"; or shares a business plan, pitch, proposal, or initiative document and asks for structured executive feedback. Also trigger when the user asks for a Go/No-Go decision, risk review across finance/legal/security/operations, or preparation for presenting an initiative to real leadership.
3,183SKILL.mdUpdated Jul 16, 2026
davepoon/travel-agent-skill
data-ai
VerifiedTrustedCommunity
私人旅行管家 — 从出发地到目的地的完整行程规划+攻略导出。 输入出发地、目的地、天数、预算、风格偏好，自动输出闭环行程， 包含交通推荐、酒店推荐、美食路线、每日预算，并可选生成攻略。 当用户提到「做攻略」「旅行规划」「旅游计划」「行程安排」时使用。
3,180SKILL.mdUpdated Jul 15, 2026
davepoon/ontoly-software-graph
tools
VerifiedTrustedCommunity
Use Ontoly's deterministic Software Graph and MCP server for codebase architecture, request tracing, dependency analysis, and impact analysis.
3,180SKILL.mdUpdated Jul 15, 2026