
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@erclx/aitk
Advanced tools
One source for your repos' AI conventions. Install once, sync everywhere.

If you work across more than one repository and your AI setup has started to drift between them, this is for you. The counts above are read from the catalogs when the image is built, so they're what the repo actually ships today.
Add the marketplace, then install the Claude Code plugin.
claude plugin marketplace add https://github.com/erclx/aitk
claude plugin install aitk@aitk

The skills land as /aitk:<name>. If your session was already open, run /reload-plugins to pick them up.
Several skills call the aitk CLI to read catalogs and run installs, and the plugin doesn't put it on your path. Install it from the registry.
bun install --global @erclx/aitk
Bun is the CLI runtime and has to be on your path first. Confirm the install by resolving aitk --help.
Nothing refreshes on its own. Claude Code ships auto-update off for third-party marketplaces, so an installed copy serves whatever version it was installed at until you refresh it.
claude plugin marketplace update aitk
claude plugin update aitk@aitk
aitk upgrade
The first two update the skills, the third updates the CLI, and they move independently. Restart Claude Code, or run /reload-plugins, to pick the skills up.
aitk upgrade reads the package manager off its own install path and reinstalls with that one, so you don't have to remember which put it there. It names what it detected before it runs anything, and it refuses a source checkout rather than reinstalling over your clone.
You don't have to wait until something breaks to find out you're behind. aitk sync --check and aitk claude skills drift both report the installed version against the newest published one, and neither changes its exit code over it, so an offline machine reads unknown rather than red.
To stop doing this by hand, turn auto-update on once under /plugin in the Marketplaces tab. Confirm what you are running with aitk --version and claude plugin list.
Every AI coding setup accumulates the same assets. Prompts to reuse, rules agents should follow, slash commands, skills, seed docs, sync scripts. Once you have enough projects, your copies drift and your agents stop getting consistent signals.
Three design choices shape the toolkit.
Two limits worth knowing before you install. Claude Code is the only agent runtime the plugin targets, and the CLI needs Bun on your path. Snippets are the one surface that also travels to Gemini chat.
Each domain has a canonical source in this repo and a thin install or sync CLI on your side. The links run to internal narrative, written for someone maintaining the toolkit rather than installing it, so skip them on a first pass.
DESIGN.md token shape, extract skill and its two paths, render commandSLIDES.md source, layout catalog, render command, draft skillaitk transcriptsScaffolding your first project? Start with target projects, then the AI workflow loop. Everything else answers questions that arrive later.
Working on the toolkit starts from a clone. Running the CLI doesn't, since it installs from the registry. Skip this section unless you're changing the toolkit itself.
zsh or bash 4+ (brew install bash on macOS).Clone the repo, then run the bootstrap script. It installs dependencies, links the CLI globally, and adds the Claude Code shell aliases to your ~/.zshrc.
git clone https://github.com/erclx/aitk.git
cd aitk
bun install
bun run bootstrap
The script is idempotent, so re-run it after pulling upstream changes without duplicating anything. It confirms the install by resolving aitk --help on the last step. See zshrc aliases for what each alias does.
With the CLI linked, scaffold a fresh project.
mkdir ~/my-project && cd ~/my-project
git init
aitk init
aitk init installs base tooling configs, Claude seeds, governance rules, and snippets in one pass, and scaffolds a .claude/wiki/ stub for your project's own reference pages. Governance defaults to the base stack, so a bare init lands the coding and doc-authoring rules in .claude/rules/. Each rule names the standard it answers to and reads it with aitk standards <name>, so no corpus is copied into your project. Pass --stack <name> for a framework stack, or --skip governance to leave rules out. Run aitk tooling list --json to see the catalog.
For the full journey from scaffold through adding a domain later to syncing upstream drift, see target projects.
Portfolio project. Issues are welcome. Pull requests are accepted by invitation only, so open an issue rather than a branch. Read the contributing guidelines for the local loop, the authoring split, and the commit convention before you file anything.
FAQs
Infrastructure and quality tooling for developer workflows
We found that @erclx/aitk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.