
Research
/Security News
Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.
agent-powerups
Advanced tools
Local-first CLI for browsing, validating, running, and explicitly writing agent powerups.
Oh My Zsh for coding agents.
Quickstart · Plugin Bundles · Installation · Security Model · Contributing
Agent Powerups is an Oh My Zsh-style collection of reusable skills, slash commands, MCP configs, hooks, AGENTS.md templates, and workflows for coding agents.
Today, this repo ships:
apx) with runnable local checksapx plugins inspectionapx profiles for curated skill/plugin setsNative install is direct for humans. Safety boundaries stay around external tools, secrets, shell profiles, and MCP enablement.
| Path | Status | Notes |
|---|---|---|
skills/ | shipped | Reusable agent workflows such as systematic-debugging and writing-plans |
mcp/ | shipped | Local-first GitHub MCP config with check, smoke, and explicit install commands |
agents-md/ | shipped | Starter AGENTS.md templates |
commands/ | shipped | Review-first command prompts plus safe runnable checks |
hooks/ | shipped | Review-before-use hook recipes plus safe runnable checks |
workflows/ | shipped | Scenario guides |
plugins/ | shipped | 17 plugin bundles (3 stable, 10 beta, 4 experimental) with local-first discovery, validation, native install, and marketplace metadata |
scripts/ | shipped | Validation and tool-check helpers for this repo |
examples/ | shipped | Minimal safe setup examples |
npm install -g agent-powerups
apx install claude --full
This installs the apx CLI globally and runs a full Claude Code setup — copies skills, plugins, and commands into ~/.claude/ and patches your CLAUDE.md. Use --dry-run to preview changes first.
git clone https://github.com/yeaight7/agent-powerups.git
cd agent-powerups
npm install
npm run build
npm link
apx doctor
apx doctor --full
apx list
apx info markitdown-file-intake
apx commands run ship-check
apx hooks run no-secrets-preflight --all
apx mcp check github-local --target generic
apx mcp smoke github-local --json
apx mcp install github-local --target codex --dry-run
apx install codex --dry-run
apx install codex
apx install claude
apx install gemini
apx install codex --full
apx install codex --verbose
Default native install copies all root skills and plugin bundles into the selected agent root. Human output shows counts by default; use --verbose for per-file paths. --full also stages support assets under agent-powerups/ and updates existing global instructions with a backup.
apx plugins list
apx plugins info dev-vitals
apx plugins validate --all
apx plugins install dev-vitals --target codex --dry-run
apx ask-codex "Return OK only" --json
apx ask-claude "Return OK only" --json
apx ask-gemini "Return OK only" --json
apx relay init second-opinion
apx relay start second-opinion --provider gemini
apx relay ask second-opinion "Review this plan" --json
apx relay status second-opinion
apx relay stop second-opinion
apx profiles list
apx profiles info safe-core
apx profiles plan safe-core --target codex
apx check markitdown-file-intake
apx check graphify
apx check ask-codex
apx check ask-claude
apx check ask-gemini
Preview supported dependency installers before asking for approval:
apx check defuddle --install-missing --dry-run
apx check markitdown-file-intake --install-missing --dry-run
apx check graphify --install-missing --dry-run
apx install markitdown-file-intake --target codex --dry-run
apx install ask-claude --target codex --dry-run
apx setup codex --dry-run
apx setup codex --mode minimal --yes # bootstrap only
apx setup codex --mode recommended --yes # main agent setup (recommended)
apx setup codex --mode full --yes # broad staging
apx install <codex|claude|claude-code|gemini> [--verbose]
apx install <codex|claude|claude-code|gemini> --full [--verbose]
Default manual install:
skills/ -> <agent-root>/skills/<agent-root>/plugins/<agent-root>/extensions/Give your agent access to this repo and ask it to run:
apx list
apx profiles list
apx setup <codex|claude-code|gemini> --mode recommended --yes
Agent will inspect available skills/plugins, propose a plan, and apply it.
Agent setup docs:
python scripts/validate-skills.py
python scripts/validate-catalog.py
python scripts/check-requirements.py
Current shipped skills:
agent-config-security-auditagent-harness-designagent-runtime-patternsagent-session-forensicsai-slop-cleanerask-claudeask-codexask-geminiautonomous-delivery-pipelinebigquery-cost-auditbrainstormingbrowser-automation-safetybug-huntbuild-fix-minimal-diffchangelog-generatorcodebase-migration-batchescontext-compressioncontext-retrieval-loopdata-qualitydbt-incremental-strategy-auditdbt-preflightdbt-strategydefuddledeploy-pipeline-runbookdispatching-parallel-agentsenvironment-doctorfilesystem-mcp-guardrailsfinishing-a-development-branchgh-address-commentsgithub-ci-failure-triagegraphifyhard-won-skill-extractorjson-canvaslocal-rag-mcpmanaged-codebase-contextmarkitdown-file-intakemcp-server-buildermetric-impact-analyzermodel-routingno-fluffparallel-execution-enginepersistent-completion-looppr-review-ci-looppr-triageprompt-evaluation-runnerreceiving-code-reviewred-team-eval-authoringrelay-clauderelay-codexrelay-geminirelease-readiness-protocolrepo-maprequesting-code-reviewrequirements-clarifierreview-comment-style-miningsafe-refactorsearch-before-buildingskill-authoring-guideskill-evaluation-workbenchsql-business-logic-reviewstructured-code-search-mcpsubagent-team-orchestrationsystematic-debuggingtest-driven-developmentusing-git-worktreesusing-powerupsverification-before-completionwebapp-visual-testingworktree-session-managerwriting-planswriting-skillsCurrent shipped scripts:
scripts/validate-skills.pyscripts/validate-catalog.pyscripts/check-requirements.pyCurrent shipped MCP configs:
github-localgithub-remotecontext7sequential-thinkingplaywrightfilesystem-repo-scopedmemoryfetchtimegit-localpostgres-readonlysupabasevercelcloudflare-docsexa-searchatlassianbrowserbasee2b-sandboxCurrent shipped AGENTS.md templates:
typescript-apppython-librarydbt-projectml-projectopen-source-maintainerCurrent shipped command packs:
build-fixchangelogdebugdoctorimplementmcp-checkmcp-smokeplanreleasereviewship-checktriageusing-powerupsvisual-reviewCurrent shipped hook examples:
Safety:
no-secrets-preflightdestructive-bash-guardenv-file-mutation-approvaldependency-reviewQuality:
validation-requiredtest-gatelint-checkconsole-log-checkgenerated-file-warninglarge-diff-warningbuild-analysis-postdesign-quality-checkmigration-review-requiredtodo-fixme-blockerpre-commit-quality-checkquality-gate-after-edittypescript-post-edit-checkdoc-file-warningProductivity:
handoff-summaryhandoff-completeness-checksession-context-restoresession-logsession-compaction-helpersession-lifecycle-stateauto-commit-messagedev-server-tmux-guardCloud:
cloud-cli-guardMCP:
mcp-config-change-approvalmcp-write-guardmcp-elicitation-guardCurrent shipped examples:
minimal-setup-examplecodex-setup-exampleclaude-code-setup-exampleCurrent shipped workflows:
feature-iterationagent-relayCurrent shipped plugin bundles (stable):
dev-vitalsdebugging-diagnosticsquality-gatesCurrent shipped plugin bundles (beta):
codebase-maintenancedata-engineeringdocumentation-systemsmachine-learning-opscodebase-intelligencespec-driven-developmentspec-quality-gatescontext-efficiencytool-integrationsmemory-optimizationCurrent shipped plugin bundles (experimental):
software-engineeringagentic-systemssecurity-guardrailsagent-evaluation-labSchema details: docs/catalog-schema.md
Compatibility claims in this repo are intentionally narrow:
| Asset class | Shipped today | Compatibility claim |
|---|---|---|
Root skills/ | yes | Generic text-based skills; some also mention known agent surfaces |
mcp/ | yes | 18 MCP configs for local and remote servers (GitHub, Supabase, Vercel, Cloudflare, Exa, Atlassian, Browserbase, E2B, and more); github-local has a full check/smoke/install flow |
agents-md/ | yes | Plain text templates |
commands/ | yes | Review-first markdown command prompts; Claude Code and Codex targets where provided |
hooks/ | yes | Documentation recipes only; not installed automatically |
workflows/ | yes | Plain text scenario guides |
plugins/ | yes | 17 plugin bundles (3 stable, 10 beta, 4 experimental) with native install, marketplace metadata, and apx plugins inspection |
scripts/ | yes | Generic Python scripts |
examples/ | yes | Plain text setup examples only |
More detail: docs/compatibility.md
Most shipped skills are pure text and need no extra installation.
Current optional external tools used by shipped skills:
| Skill | Tool | Required | Install |
|---|---|---|---|
ask-codex | Codex CLI (codex) | yes for local advisor workflow | install/configure Codex CLI |
ask-claude | Claude Code CLI (claude) | yes for local advisor workflow | install/configure Claude Code CLI |
ask-gemini | Gemini CLI (gemini) | yes for local advisor workflow | install/configure Gemini CLI |
markitdown-file-intake | Microsoft MarkItDown (markitdown) | yes for conversion workflow | python -m pip install markitdown |
defuddle | Defuddle CLI (defuddle) | yes for Defuddle workflow | npm install -g defuddle |
graphify | Upstream Graphify CLI + Python package (graphify, graphifyy) | yes for graph workflow | uv tool install graphifyy or pipx install graphifyy or python -m pip install graphifyy |
pr-triage | GitHub CLI (gh) | optional | platform package manager |
Tool policy:
More detail: docs/tool-requirements.md and docs/installation.md
npm install
npm run build
npm link
apx doctor
apx doctor --full --json
apx list
apx info markitdown-file-intake
apx check markitdown-file-intake
apx check graphify
apx ask-codex "Explain this code" --json
apx ask-claude "Review this patch" --json
apx ask-gemini "Brainstorm test cases" --json
apx relay start second-opinion --provider gemini --json
apx relay ask second-opinion "Review this plan" --json
apx relay stop second-opinion --json
apx ship-check --json
apx no-secrets-preflight --all --json
apx using-powerups
apx install codex --dry-run
apx install codex
apx install claude
apx install gemini
apx install codex --full
apx install markitdown-file-intake --target codex --dry-run
apx setup codex --dry-run
apx setup claude-code --dry-run
apx setup gemini --dry-run
apx setup codex --mode recommended --yes
apx setup claude-code --mode recommended --yes
apx setup gemini --mode recommended --yes
apx install <agent> is now the primary manual install path and writes native skills/plugins by default. apx setup <agent> remains for compatibility and agent-curated setup; it is still dry-run by default unless --yes is passed.
Extra surfaces:
apx mcp list
apx mcp print github-local --target claude-code
apx mcp check github-local --target claude-code --json
apx mcp smoke github-local --json
apx mcp install github-local --target codex --dry-run
apx mcp install github-local --target claude-code --dry-run
apx mcp write github-local --target generic --dest .agent-powerups/github-local.json
apx agents-md list
apx agents-md print typescript-app
apx commands list
apx commands print ship-check --target generic
apx commands run ship-check --full
apx hooks list
apx hooks print no-secrets-preflight
apx hooks run no-secrets-preflight --path README.md
apx workflows list
apx workflows print feature-iteration
apx plugins list
apx plugins info dev-vitals
apx plugins validate --all
apx plugins install dev-vitals --target codex --dry-run
apx profiles list
apx profiles info safe-core
apx profiles plan safe-core --target codex
apx relay init second-opinion
apx relay start second-opinion --provider gemini --json
apx relay ask second-opinion "Review this plan" --json
apx relay status second-opinion --json
apx relay stop second-opinion --json
To explicitly copy a skill into a local Codex-visible folder, choose the destination yourself:
apx install ask-claude --target codex --dest .agent-powerups/installed/ask-claude
Plugin bundles ship under plugins/. They are registered in both .claude-plugin/marketplace.json and .codex-plugin/marketplace.json. Gemini CLI uses local extensions; each plugin bundle includes gemini-extension.json and GEMINI.md.
apx plugins list to discover bundlesapx plugins info <name> to inspect a single bundleapx plugins validate --all to verify bundle structureapx plugins install <name> --target <codex|claude-code|generic> --dry-run before any writeapx install <codex|claude|gemini> for full manual native installReview assets before loading them into a trusted agent environment.
See SECURITY.md and docs/security-model.md.
Contribution guide: CONTRIBUTING.md
Acknowledgements: ACKNOWLEDGEMENTS.md
MCP configs: docs/mcp-configs.md
Roadmap: docs/roadmap.md
FAQs
Local-first CLI for browsing, validating, running, and explicitly writing agent powerups.
The npm package agent-powerups receives a total of 51 weekly downloads. As such, agent-powerups popularity was classified as not popular.
We found that agent-powerups demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.

Security News
Rolldown paused Rust React Compiler integration after a 5MB binary size increase raised concerns about shipping React-specific code to all Vite users.

Security News
/Research
Mini Shai-Hulud expands into the Go ecosystem after hitting LeoPlatform npm packages and targeting GitHub Actions workflows.