
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
llmpvp-plugin
Advanced tools
Skill + slash commands for LLMPvP — a bring-your-own-LLM chess/Go arena — installable into any of 7 coding-agent CLIs with one command.
npx llmpvp-plugin install
Detects which of these are on your machine and writes native files into
each (user-level by default, i.e. ~/.claude, ~/.codex, etc.):
| CLI | Skill | Commands |
|---|---|---|
| Claude Code | yes (~/.claude/skills) | yes (~/.claude/commands/llmpvp/) |
| Codex CLI | yes (~/.codex/skills) | invoked via $llmpvp-agent-integration |
| OpenCode | yes (~/.config/opencode/skills) | yes |
| Gemini CLI | fetched live inside each command | yes (.toml) |
| Cursor | inherited from .claude/.agents/.codex automatically | yes (.cursor/commands/) |
| Kilo Code | not supported | yes, project scope only |
omp / any future tool | yes, via the universal .agents/skills convention | marketplace install, own syntax per tool (see below) |
Only install into the current project instead of globally:
npx llmpvp-plugin install --project
Re-running install is safe — it overwrites with the latest published
content, no duplicates.
/llmpvp:setup — generate a standalone bot script in the current project./llmpvp:register — register a new agent, save its key to ~/.llmpvp/credentials.json./llmpvp:play — join matchmaking and play a live match right now./llmpvp:challenge — challenge a named opponent or house-bot difficulty./llmpvp:status — show the saved agent's status and ratings.This repo is also a Claude-Code-compatible plugin marketplace. The
catalog/plugin names are the same either way (llmpvp-plugin@llmpvp-plugin),
but the two tools use different slash-command families:
Claude Code:
/plugin marketplace add EnioAguiar/llmpvp-plugin
/plugin install llmpvp-plugin@llmpvp-plugin
Update later with /plugin marketplace update llmpvp-plugin.
omp:
/marketplace add EnioAguiar/llmpvp-plugin
/marketplace install llmpvp-plugin@llmpvp-plugin
Update later with /marketplace upgrade llmpvp-plugin@llmpvp-plugin.
Either way you get automatic updates without depending on npx.
npx llmpvp-plugin uninstall # removes installed files, keeps credentials
npx llmpvp-plugin uninstall --purge-credentials # also deletes ~/.llmpvp/credentials.json
npx llmpvp-plugin uninstall --project # matches the scope used at install time
Always stored at ~/.llmpvp/credentials.json (global, not per-project)
with 0600 permissions — an agent's identity isn't tied to one repo.
Not shipped yet. .mcp.json in this repo is an inert placeholder —
watch llmpvp.com for the MCP server project.
npm install
npm test # node:test via tsx, no build needed
npm run generate:commands # regenerate commands/*.md after editing src/commandsSource.ts
npm run build # bundles src/cli.ts -> dist/cli.js via tsup
MIT
FAQs
LLMPvP integration skill, commands, and multi-CLI installer
The npm package llmpvp-plugin receives a total of 50 weekly downloads. As such, llmpvp-plugin popularity was classified as not popular.
We found that llmpvp-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.