davepoon/plugins/thumbgate/skills/thumbgate
plugins/thumbgate/skills/thumbgate/SKILL.md
# ThumbGate — Pre-Action Gates for AI Coding Agents ## What it does ThumbGate adds deterministic pre-action gates to AI coding agents. Before any destructive operation executes, ThumbGate checks it against enforceable rules. ## Key features - **33 pre-action gates** — block destructive actions (force-push, mass delete, destructive SQL) before they execute - **Thumbs up/down feedback** — type "thumbs down" and the mistake becomes a prevention rule - **Budget enforcement** — action count + time
$ install --global
skillsauthnpx skillsauth add davepoon/buildwithclaude plugins/thumbgate/skills/thumbgateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 18, 2026, 2:35 AM186.6s1 file scanned
SKILL.md
ThumbGate — Pre-Action Gates for AI Coding Agents
What it does
ThumbGate adds deterministic pre-action gates to AI coding agents. Before any destructive operation executes, ThumbGate checks it against enforceable rules.
Key features
- 33 pre-action gates — block destructive actions (force-push, mass delete, destructive SQL) before they execute
- Thumbs up/down feedback — type "thumbs down" and the mistake becomes a prevention rule
- Budget enforcement — action count + time limits prevent runaway sessions
- Self-protection — agent cannot disable its own governance
- NIST/SOC2 compliance tags — enterprise-ready gate rules
Installation
npx thumbgate
Usage
Start a Claude Code session with ThumbGate installed. When the agent does something wrong, type "thumbs down" — ThumbGate captures the mistake, distills a lesson, and creates a prevention rule that blocks the pattern from repeating.
Related Skills
davepoon/drill-status
development
VerifiedTrustedCommunity
Show drill-me learning progress — topics studied, cards due for review, weakest concepts, and what to study next. Use when the user asks what's due, how their learning is going, or for their drill-me status.
3,050SKILL.mdUpdated Jun 13, 2026
davepoon/drill-me
development
VerifiedTrustedCommunity
Teach the user a topic as an adaptive tutor — retrieval practice, spaced repetition with decay, and persistent memory in ~/.drill-me/. Use when the user wants to learn or be drilled on something, says "drill me on X", "teach me X", or wants to study a topic, a codebase, or a document.
3,050SKILL.mdUpdated Jun 13, 2026
davepoon/tracedocs
development
VerifiedTrustedCommunity
Turn any codebase into evidence-grounded Markdown docs plus a machine-readable index.json. Every claim cites its source; never invents deployment steps.
3,044SKILL.mdUpdated Jun 11, 2026
davepoon/whats-next
tools
VerifiedTrustedCommunity
Assesses the current state of the startup project and recommends what to focus on next. Use when there is a need or a question from the user to understand what the next steps are or what to focus on next.
3,021SKILL.mdUpdated Jun 5, 2026