🚀 Socket Launch Week Day 5:Introducing Repository Access Permissions and Custom Roles.Learn more
Sign In

oh-my-customcode

Package Overview
Dependencies
Maintainers
1
Versions
333
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install
Potential malware was recently detected in this package.

Affected versions:

0.87.30.94.00.96.00.113.00.118.0
+4 more

oh-my-customcode

Batteries-included agent harness for Claude Code

latest
Source
npmnpm
Version
1.0.14
Version published
Weekly downloads
1.6K
-47.44%
Maintainers
1
Weekly downloads
 
Created
Source
oh-my-customcode banner

oh-my-customcode

Your AI Agent Stack. Compiled, Not Configured.

npm version License: MIT CI Security Audit

한국어 문서 (Korean)

49 agents. 117 skills. 23 rules. One command.

npm install -g oh-my-customcode && cd your-project && omcustom init

Philosophy

oh-my-customcode is built on two ideas:

1. Agent systems are compiled, not configured.

Compile Conceptoh-my-customcode
Source code.claude/skills/ — reusable knowledge and workflows
Build artifacts.claude/agents/ — executable specialists assembled from skills
Compilermgr-sauron (R017) — structural verification and integrity
Spec.claude/rules/ — constraints and build rules
LinkerRouting skills — connect agents to tasks
Standard libraryguides/ — shared reference documentation

Skills are source. Agents are compiled output. Sauron verifies the build. This separation means skills evolve independently of agents, and agents can be recompiled from updated skills at any time.

Compilation Metaphor

2. If it can't be done, make it work.

When no specialist exists for a task, oh-my-customcode does not fail. It creates one.

User: "Review this Terraform module"
  → Routing: no terraform expert found
  → mgr-creator discovers: infra-aws-expert skills + docker-best-practices guide
  → Creates: infra-terraform-expert.md
  → Executes the review immediately
  → Agent persists for future use

This is not a fallback. It is the design. The system treats missing expertise as a build problem — find the right skills, compile a new agent, execute.

How It Works

Orchestration

The main conversation acts as a singleton orchestrator (R010). It never writes files directly. Every action is delegated through routing skills to specialized agents.

User (natural language)
  → Routing skill (intent detection, confidence scoring)
    → Specialized agent (isolated execution)
      → Result returned to orchestrator
        → Response to user

Four routing skills cover the full domain:

System Architecture

Routing SkillRoutes To
secretary-routingManager agents (mgr-), system agents (sys-)
dev-lead-routingLanguage, backend, frontend, tooling, DB, infra, arch agents
de-lead-routingData engineering agents (de-*)
qa-lead-routingQA team (qa-planner, qa-writer, qa-engineer)

Model Selection

Each agent runs on the model optimized for its task:

ModelWhenExamples
opusComplex reasoning, architectureDesign review, research synthesis
sonnetImplementation, general tasksCode generation, agent creation
haikuFast validation, searchFile search, count verification

The reasoning-sandwich pattern formalizes this: opus for pre-analysis, sonnet for implementation, haiku for post-verification.

Parallel Execution

Independent tasks run in parallel (R009). Up to 4 concurrent agents per message:

Agent(lang-golang-expert):sonnet  ┐
Agent(lang-python-expert):sonnet  ├─ All spawned in one message
Agent(qa-engineer):sonnet         │
Agent(arch-documenter):haiku      ┘

Agents (49)

CategoryCountAgents
Languages6lang-golang, lang-python, lang-rust, lang-kotlin, lang-typescript, lang-java21
Backend6be-fastapi, be-springboot, be-go-backend, be-express, be-nestjs, be-django
Frontend5fe-vercel, fe-vuejs, fe-svelte, fe-flutter, fe-design
Data Engineering6de-airflow, de-dbt, de-spark, de-kafka, de-snowflake, de-pipeline
Database4db-supabase, db-postgres, db-redis, db-alembic
Tooling4tool-npm, tool-optimizer, tool-bun, slack-cli
Architecture2arch-documenter, arch-speckit
Infrastructure2infra-docker, infra-aws
QA3qa-planner, qa-writer, qa-engineer
Security1sec-codeql
Managers6mgr-creator, mgr-updater, mgr-supplier, mgr-gitnerd, mgr-sauron, mgr-claude-code-bible
System3sys-memory-keeper, sys-naggy, tracker-checkpoint

Each agent declares its tools, model, memory scope, and limitations in YAML frontmatter. Tool budgets are enforced per agent type for accuracy.

Skills (117)

CategoryCountIncludes
Best Practices24Go, Python, TypeScript, Kotlin, Rust, React, FastAPI, Spring Boot, Django, Flutter, Docker, AWS, Postgres, Redis, Kafka, dbt, Spark, Snowflake, Airflow, pipeline-architecture-patterns, alembic, and more
Routing4secretary, dev-lead, de-lead, qa-lead
Workflow14structured-dev-cycle, deep-plan, research, evaluator-optimizer, dag-orchestration, worker-reviewer-pipeline, reasoning-sandwich, pipeline, fsd, and more
Development8dev-review, dev-refactor, analysis, create-agent, intent-detection, web-design-guidelines, omcustom-takeover, skill-extractor
Operations9update-docs, audit-agents, sauron-watch, monitoring-setup, fix-refs, release-notes, and more
Memory3memory-save, memory-recall, memory-management
Package3npm-publish, npm-version, npm-audit
Optimization3optimize-analyze, optimize-bundle, optimize-report
Security3adversarial-review, cve-triage, jinja2-prompts
Other7claude-native, vercel-deploy, skills-sh-search, result-aggregation, writing-clearly-and-concisely, and more

Skills use a 3-tier scope system: core (universal), harness (agent/skill maintenance), package (project-specific).

Commands

All commands are invoked inside the Claude Code conversation.

Development

CommandWhat it does
/dev-reviewCode review against best practices
/dev-refactorRefactor for structure and patterns
/structured-dev-cycle6-stage development: plan → verify → implement → verify → compound → done
/deep-planResearch-validated planning
/research10-team parallel analysis with cross-verification
/sdd-devSpec-Driven Development workflow
/ambiguity-gatePre-routing ambiguity analysis
/adversarial-reviewAttacker-mindset security code review
/pipelineExecute YAML-defined pipelines
/pipeline resumeResume a halted pipeline from last failure point

Agent Management

CommandWhat it does
/omcustom:analysisAnalyze project, auto-configure agents and skills
/omcustom:create-agentCreate a new agent
/omcustom-takeoverExtract canonical spec from existing agent or skill
/omcustom:audit-agentsAudit agent dependencies
/omcustom:update-docsSync project structure and documentation
/omcustom:sauron-watchFull structural verification (5+3 rounds)
/omcustom-feedbackSubmit feedback as GitHub issue

Web UI

CommandWhat it does
/omcustom:webControl built-in Web UI (start, stop, status, open)

Package & Release

CommandWhat it does
/omcustom:npm-publishPublish to npm
/omcustom:npm-versionSemantic versioning
/omcustom:npm-auditDependency security audit
/omcustom-release-notesGenerate release notes from git history

Memory & System

CommandWhat it does
/omcustom:monitoring-setupOTel monitoring toggle
/omcustom:loopAuto-continue background agent workflows (3-continue safety limit)
/omcustom:listsShow all commands
/omcustom:statusSystem health check

Rules (23)

PriorityCountPurpose
MUST14Safety, permissions, agent design, identification, orchestration, verification, completion, enforcement
SHOULD8Interaction, error handling, memory, HUD, ecomode, ontology routing, wiki sync, verification ladder
MAY1Optimization

Key rules: R010 (orchestrator never writes files), R009 (parallel execution mandatory), R017 (sauron verification before push), R020 (completion verification before declaring done), R021 (advisory-first enforcement model).

Guides (57)

Reference documentation covering best practices, architecture decisions, and integration patterns. Located in guides/ at project root, covering topics from agent design to CI/CD to observability.

Safety

oh-my-customcode includes security and lifecycle hooks:

HookTriggerAction
secret-filterBash, Read outputDetects AWS keys, API tokens, private keys, bearer tokens
audit-logEdit, Write, Bash, AgentAppend-only JSONL at ~/.claude/audit.jsonl
schema-validatorWrite, Edit, Bash inputValidates tool inputs, flags dangerous patterns
PostCompactContext compactionReinjects enforced rules (R007–R018, R021) — prevents rule amnesia

Security hooks are advisory (exit 0). They warn but never block.

CLI

omcustom init                  # Interactive setup wizard (language, framework, team mode)
omcustom init --lang ko        # Initialize with Korean
omcustom init --from-snapshot  # Install from pre-configured team snapshot
omcustom sync                  # Detect drift between .claude/ state and lockfile
omcustom sync --check          # Check for drift without applying changes
omcustom sync --export         # Export current state as team snapshot
omcustom update                # Update to latest
omcustom list                  # List components
omcustom doctor                # Verify installation
omcustom doctor --fix          # Auto-fix issues
omcustom security              # Scan for security issues
omcustom projects              # List managed projects with version status
omcustom update --all          # Batch update all outdated projects
omcustom serve                 # Start built-in Web UI
omcustom serve-stop            # Stop Web UI

Project Structure

your-project/
├── CLAUDE.md                   # Entry point
├── .claude/
│   ├── agents/                 # 49 agent definitions
│   ├── skills/                 # 117 skill modules
│   ├── rules/                  # 23 governance rules (R000-R023)
│   ├── hooks/                  # 15 lifecycle hook scripts
│   ├── schemas/                # Tool input validation schemas
│   ├── specs/                  # Extracted canonical specs
│   ├── contexts/               # 4 shared context files
│   └── ontology/               # Knowledge graph for RAG
└── guides/                     # 57 reference documents

External Tool Integrations

RTK is automatically installed during omcustom init for 60-90% token savings. Other tools are optional:

ToolPurposeInstallStatus
RTK60-90% token savings on CLI outputAuto-installed via omcustom initRecommended
Codex CLIOpenAI Codex hybrid workflowsnpm i -g @openai/codexOptional
Gemini CLIGoogle Gemini hybrid workflowsnpm i -g @google/gemini-cliOptional

When installed, each tool is auto-detected at session start and its features become available. When not installed, all commands gracefully fall back to Claude-native alternatives.

Development

bun install          # Install dependencies
bun run dev          # Development mode
bun test             # Run tests
bun run build        # Production build

Requirements: Node.js >= 18.0.0, Claude Code CLI.

License

MIT

No expert? Create one. Connect knowledge. Execute.

Made with care by baekenough

Keywords

claude

FAQs

Package last updated on 23 Jun 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts