
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
agent-coach
Advanced tools
A coach for your Claude Code agent — analyzes sessions to improve your repo and generate better PRs.
A coach for your Claude Code agent — analyzes sessions to improve your repo and generate better PRs.
Each command reads your latest session, extracts the signal, and gives you — or the active Claude Code agent — something to act on.
npm install -g agent-coach
agent-coach setup
setup installs slash commands into ~/.claude/commands/. After restarting Claude Code, all commands are available in any session.
Run commands inside a Claude Code session. agent-coach automatically picks up the current session — no path needed.
Evaluate a quality dimension and tell Claude what to do with the findings:
/environment fix the issues you find
/instructions update CLAUDE.md based on these findings
/navigation suggest structural improvements
/contract tighten the types
/tests add missing coverage
/verification document the verification commands in CLAUDE.md
Turn the session into a PR description or a saved file for repo history:
/contribution write a PR description from this
/contribution --save and commit the file
| Command | What it evaluates |
|---|---|
environment | Clean setup — deps, env vars, build and test commands |
instructions | CLAUDE.md quality — are agents told what they need? |
navigation | Codebase orientation — can an agent find things quickly? |
contract | Type and schema surface — are data shapes explicit? |
tests | Test safety net — do tests give an agent confidence? |
verification | Self-verification — can an agent confirm its own work? |
All commands work outside Claude Code too, with an explicit session file:
agent-coach environment ~/.claude/projects/.../session.jsonl
agent-coach contribution --save ~/.claude/projects/.../session.jsonl
FAQs
A coach for your Claude Code agent — analyzes sessions to improve your repo and generate better PRs.
We found that agent-coach demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.