Agent Toolbox is a public collection of reusable engineering skills for Claude Code and Codex. It ships four independently installable plugins and keeps host-neutral skill instructions in one source tree.
| Plugin | Skills | Purpose | Runtime dependency |
|---|---|---|---|
toolbox |
20 | Research, review, testing, delivery, browser operations, and engineering decisions | Per-skill; see each SKILL.md |
done |
1 | Repository-defined quality gate, with a Claude Code Stop adapter | Git, Bash, Python 3 |
gog |
2 | Read-only Google Calendar and Chat workflows | gog |
github-operations |
2 | Guarded GitHub Project provisioning and Issue creation | Python 3.11+, gh |
adr, ai-native-engineering, ascii-diagram, autopilot, behavioral-testing, browser-operations, claude-review, cloudflare-data-pipeline, cloudflare-worker-cd, codebase-audit, codex-review, context-handoff, e2e-capability-verification, git-worktrees, html-artifact, progress-report, structured-text-parsing, technical-research, typescript-project-foundation, done, gog-calendar, gog-chat-readonly, github-project-provisioning, and github-issue-create.
/plugin marketplace add MasashiFukuzawa/agent-toolbox
/plugin install toolbox@agent-toolbox
/plugin install done@agent-toolbox
/plugin install gog@agent-toolbox
/plugin install github-operations@agent-toolbox
Use /plugin to update or uninstall a plugin. Claude Code discovers the marketplace from .claude-plugin/marketplace.json.
Add this Git repository as a plugin marketplace in Codex, then install toolbox, done, gog, or github-operations from the agent-toolbox marketplace. Codex reads .agents/plugins/marketplace.json; the exact UI or CLI command depends on the installed Codex release.
The done Stop hook is Claude Code-specific. In Codex, invoke the done skill before reporting repository changes complete.
- Skills never include credentials, personal paths, organization-specific identifiers, or non-public operational details.
- Browser profiles and Google OAuth data remain outside the repository.
gogskills permit read-only commands only and wrap untrusted Workspace content.- Repository checks validate frontmatter, manifests, local links, trigger metadata, and common secret patterns. CI also runs gitleaks.
Review a skill's guardrails before using it with authenticated services or write-capable tools.
Python 3.11+ and uv are required for repository tooling.
uv sync --dev
uv run ruff check .
uv run pytest
uv run python -m scripts.validate
uv run python -m scripts.trigger_eval --check
bash -n plugins/done/scripts/quality-gate-stop.shSee CONTRIBUTING.md for contribution rules and SECURITY.md for vulnerability reporting.
Apache-2.0. See LICENSE.