
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
gomarble-agent
Advanced tools
GoMarble marketing agent for Claude Code and Codex CLI. Connects the host to the GoMarble MCP server (OAuth) and ships 37 skills covering Google Ads, Meta, GA4, Shopify, Search Console, and document generation, plus 5 slash commands.
The GoMarble marketing agent, packaged as a plugin for Claude Code and Codex CLI.
Installing it connects the host to the GoMarble MCP server (OAuth) and adds:
In a Claude Code session, run these two slash commands:
/plugin marketplace add gomarble-ai/gomarble-agent
/plugin install gomarble-agent
Then:
/mcp
Authorize gomarble through the browser OAuth flow. One-time.
In your terminal:
codex plugin marketplace add gomarble-ai/gomarble-agent
Then start Codex, open the Plugins panel, find gomarble-agent under the gomarble-agent marketplace, and install/enable it. Finally:
codex mcp login gomarble
Same OAuth flow, one-time.
When a new version is released, run /plugin marketplace upgrade gomarble-agent (Claude) or codex plugin marketplace upgrade gomarble-agent (Codex). The SessionStart hook will also prompt you on the first session of an outdated install.
| Command | What it does |
|---|---|
/gomarble-agent:meta-ads-audit <acct> | 30-day audit: pixel/CAPI, fatigue, audience splits, ROAS/CPA, budget |
/gomarble-agent:meta-performance-report <acct> | 7d vs prior 7d, campaign/adset/creative breakdown |
/gomarble-agent:meta-budget-reallocation <acct> | SCALE/REDUCE/HOLD/PAUSE per campaign using 1D + 3D + 7D |
/gomarble-agent:creative-strategy <acct> | Full pattern analysis → test plan → 12-creative plan |
/gomarble-agent:creative-fatigue-detection <acct> | Per-ad fatigue scoring with refresh actions |
In Codex, just describe the task in natural language — the skills' description fields handle auto-routing.
gomarble-agent/
├── .claude-plugin/
│ ├── plugin.json # Claude Code manifest
│ └── marketplace.json # marketplace declaration (Codex reads this too)
├── .codex-plugin/
│ └── plugin.json # Codex manifest
├── .mcp.json # remote MCP, both `mcpServers` and `mcp_servers` keys
├── commands/ # 5 slash commands (Claude reads; Codex ignores)
├── hooks/
│ ├── hooks.json # registers SessionStart hook
│ └── session-start.mjs # MCP probe + version check + date injection
├── skills/ # 37 skills (both hosts read from here)
│ └── <slug>/SKILL.md
├── README.md
└── .gitignore
Each host looks for its manifest in a dedicated subfolder; everything else is shared.
| Host | Manifest | Ignores |
|---|---|---|
| Claude Code | .claude-plugin/plugin.json | .codex-plugin/ |
| Codex | .codex-plugin/plugin.json | .claude-plugin/plugin.json (but reads .claude-plugin/marketplace.json) |
skills/ — both hosts expect skills/<name>/SKILL.md.mcp.json — Claude reads mcpServers, Codex reads mcp_servers. Both keys present with identical contentcommands/ — Claude picks up slash commands; Codex has no commands/ concept# 1. Edit skills/<slug>/SKILL.md, commands/*.md, hooks, or manifests
# 2. Bump version in BOTH .claude-plugin/plugin.json AND .codex-plugin/plugin.json
# 3. Commit + tag + push
git add -A
git commit -m "Release vX.Y.Z"
git tag vX.Y.Z
git push --follow-tags
# 4. (Optional) Update https://apps.gomarble.ai/plugin/version.json so the SessionStart
# hook surfaces the update prompt to existing users:
# { "version": "X.Y.Z", "released": "YYYY-MM-DD", "notes": "What changed." }
Users run /plugin marketplace upgrade gomarble-agent (Claude) or the Codex equivalent to pull the new version.
Every session, hooks/session-start.mjs runs once and:
https://apps.gomarble.ai/mcp-api/sse for reachability; warns if downhttps://apps.gomarble.ai/plugin/version.json and prints an update prompt if outdatedAll network calls have 2.5s timeouts and silent failure modes — the hook never blocks a session.
Both hosts treat plugin hooks as non-managed — on first install users see a "trust this hook" prompt. They accept once, then it runs silently.
Users need nothing beyond the install commands. The MCP OAuth flow is handled by Claude (/mcp) and Codex (codex mcp login gomarble). Skills are edited directly in this repo — no Langfuse access needed.
mcp_servers vs mcpServers — .mcp.json ships both wrapper keys with identical content so each host finds its preferred form.FAQs
GoMarble marketing agent for Claude Code and Codex CLI. Connects the host to the GoMarble MCP server (OAuth) and ships 37 skills covering Google Ads, Meta, GA4, Shopify, Search Console, and document generation, plus 5 slash commands.
The npm package gomarble-agent receives a total of 46 weekly downloads. As such, gomarble-agent popularity was classified as not popular.
We found that gomarble-agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.