需通过 npx 拉取最新包,未全局安装时每次都要联网下载;--mod 需 Claude Code 2.1.287+,--plugin 需 2.1.288+;1.31.0 起移除了 --plugins、--agents 等多个旧参数,需改用替代方式
claude-code-templates
davila7MIT活跃维护Claude Code 组件的开源注册表与命令行工具,集中管理 agents、commands、skills、hooks、MCP 和配置,省去手动拼装和查找的麻烦。
Open-source registry and CLI for Claude Code components: agents, commands, skills, hooks, MCPs, settings and mods
npx claude-code-templates@latest
npx claude-code-templates@latest --skill creative-design/frontend-designREADME 未说明
Claude Code 组件开源目录与 CLI,一条命令装好技能、子代理、命令、钩子和 MCP
Claude Code 组件的开源注册表与命令行工具,集中管理 agents、commands、skills、hooks、MCP 和配置,省去手动拼装和查找的麻烦。
核心能力
- 收录 1980+ 组件,覆盖技能、代理、命令、MCP、钩子等类型
- 安装时把文件写到正确位置并合并已有配置而非覆盖
- 支持一条命令组合安装多个组件,构成完整技术栈
- 内置 --analytics 与 --chats 本地面板查看会话与用量
- 提供 --health-check 诊断 Claude Code 安装与项目配置
容易踩的坑
- v1.29.7最新正式版2026-10-09 · 2026-10-09 15:31 UTC
Security
- Fix command injection in the analytics Console Bridge (port 3334) —
GHSA-4jm9-m3fr-9jpx, reported by @manus-pi. Affected 1.11.0 through
1.29.6. Terminal input is spawned with argv and passed through the
environment instead of interpolated into
expect/osascriptsource, the macOSdo scriptfallback is removed, and the WebSocket handshake now requires a loopback peer, the local dashboard origin and a per-process token. - Same class, found by the follow-up audit:
--health-check,--command-stats,--hook-stats,--mcp-stats, global agent wrappers and--clone-sessionno longer pass text from project files, downloaded components or arguments through a shell. The Claude API proxy (port 3335) binds to loopback and refuses browser and non-loopback requests. A setting component can only write files under.claude/.
Changed
- Mods: removed the early-access warning and the
CLAUDE_CODE_ENABLE_FUNCTION_HOOKSinstruction; Claude Code 2.1.287+ loads mods by default.
- Fix command injection in the analytics Console Bridge (port 3334) —
GHSA-4jm9-m3fr-9jpx, reported by @manus-pi. Affected 1.11.0 through
1.29.6. Terminal input is spawned with argv and passed through the
environment instead of interpolated into
- v1.29.6v1.29.6 — Claude Mods: --mod installs Anthropic-layout plugins, 24 mods2026-09-17 · 2026-09-17 01:14 UTC
查看更新说明
Function Hooks become Claude Mods. Anthropic renamed the feature, shipped it behind an early-access flag in Claude Code >= 2.1.259, and published the source of its three built-in mods plus the full TypeScript declarations (anthropics/claude-code#91870,
mods/). This release aligns the CLI, the catalog and the site with what actually ships.Install
npx claude-code-templates@latest --mod security/secret-redactor--moddownloads the whole plugin directory (like a skill) and writes it verbatim to.claude/skills/<name>/, which Claude Code auto-loads as<name>@skills-dir:.claude/skills/secret-redactor/ ├── .claude-plugin/plugin.json # name, description, userConfig, author, license ├── hooks/ │ ├── hooks.json # { "modules": ["./secret-redactor.ts"] } │ └── secret-redactor.ts └── README.mdThen run Claude Code with the flag:
CLAUDE_CODE_ENABLE_FUNCTION_HOOKS=1 claude # or, for one session with hot reload: claude --plugin-dir .claude/skills/secret-redactor--function-hookstill works as a hidden alias of--mod.What changed
CLI
- New
--mod <category/name>flag (comma-separated values supported). Recursive download of the plugin directory via the GitHub API, verbatim write, and validation ofplugin.json,hooks/hooks.jsonand that every module listed inmodulescame down. - Post-install output explains the flag,
claude plugin validate/claude plugin test, and how to set options viapluginConfigs[name].optionsin user settings. - Download tracking type is now
mod.
Components: 24 mods, all typechecked against Anthropic's real API
- Every mod is now a complete plugin in Anthropic's layout
(
cli-tool/components/mods/{category}/{name}/). - The 10 existing modules were rewritten against the real
$API and runtime-tested on Claude Code 2.1.272:$.fs.read,$.http.fetch→{status, ok, text},$.ui.ask,{ deny }/{ result }+context,Box/TextUI primitives,{ refuse }onplugin.register. - Options must be declared in
plugin.jsonuserConfigand are read from user or managed settings (never project settings). Declared and documented for every mod. cli-tool/components/mods/types/claude-code.d.ts(as/plugin-typeswrites it) plus atsconfig.json; CI runstscon every mod (mods-typecheck.yml).
14 new game mods (
games/)cc-arcadevendored as-is (MIT, Seza Akgün), with a fix for$.clock.now()returning a Promise in the current API.- One mod per cc-arcade game with its own slash command:
/tetris,/snake,/2048,/minesweeper,/flappy,/pong,/invaders,/typing,/doom,/pet. - Three originals written for aitmpl:
pacman(scatter/chase ghost AI, power pellets, tunnel),tool-defense(a tower defense where every tool call Claude makes spawns an enemy shaped by the tool) anddiff-invaders(every Edit/Write's added lines become the alien formation, drawn with the code's own characters).
Site
/function-hooks→ /mods (Beta). Old URLs redirect. A mod's page shows the README and the full file tree; "Send to repo" writes the entire plugin.
The catalog
Mod What it does security/block-destructive-commandsDenies rm -rf /, force push, hard reset, destructive SQLsecurity/secret-redactorRedacts keys, tokens, JWTs and connection strings in tool output security/protected-paths-guardDenies edits to .env, lockfiles, CI workflows, private keys security/large-edit-confirmationAsks before editing a file over N lines (fail-closed) productivity/npm-to-pnpm-rewriterRewrites npm/npx to pnpm, yarn or bun productivity/webfetch-cacheServes repeated WebFetch calls from a session cache `observability/universal-a - New
- v1.29.5v1.29.5 — Function Hooks: install TypeScript hooks from the catalog2026-09-09 · 2026-09-09 02:41 UTC
查看更新说明
Function Hooks land in the CLI. This release ships the
--function-hookflag, which installs any of the 10 function hooks from the catalog as a local Claude Code plugin.Function hooks are Claude Code's proposed fifth hook type (anthropics/claude-code#91870): instead of a shell command that can only allow, deny or inject text, you write a TypeScript module whose hooks take
($, e, next)— Express/Koa middleware, but for tool calls. They can rewrite a tool's input, return their own result in place of the tool, keep state, and draw UI.Install
npx claude-code-templates@latest --function-hook security/secret-redactorThat writes the plugin to
.claude/skills/<name>/:.claude/skills/secret-redactor/ ├── .claude-plugin/plugin.json └── hooks/ ├── hooks.json # { "modules": ["./secret-redactor.ts"] } └── secret-redactor.tsThen run Claude Code with the experimental flag:
CLAUDE_CODE_ENABLE_FUNCTION_HOOKS=1 claude --plugin-dir .claude/skills/secret-redactorThe 10 hooks
Hook What it does security/block-destructive-commandsDenies rm -rf /, force push, hard reset, destructive SQLsecurity/secret-redactorRedacts keys, tokens, JWTs and connection strings in tool output security/protected-paths-guardDenies edits to .env, lockfiles, CI workflows, private keys security/large-edit-confirmationAsks before editing a file over N lines productivity/npm-to-pnpm-rewriterRewrites npm/npx to pnpm, yarn or bun productivity/webfetch-cacheServes repeated WebFetch calls from a session cache observability/universal-audit-logJSON line per event, including denials ui/tool-timing-badgeTimes every tool call, draws a badge on the ToolUse row integrations/websearch-to-exaReplaces built-in WebSearch with Exa enterprise/admin-capability-lockdownWithholds http/processfrom$, allowlists pluginsBrowse them at aitmpl.com/function-hooks.
Experimental — read this first
Function hooks are not a shipped Claude Code feature. They are a proposal, and the environment variable, the
moduleskey and every$API name may change.That said, the engine is already compiled into Claude Code 2.1.266, and we verified it:
security/secret-redactorruns unmodified against the real binary, redaction fires on bothBashandRead, and a follow-up command carrying a redacted placeholder is denied before execution.Two limits worth knowing about
secret-redactor: it matches by shape, soPASSWORD=hunter2passes untouched; and its connection-string pattern stops at the@, so credentials are removed but host, port and database name are not.The full write-up, including the
$surface found in the 2.1.266 binary: Function Hooks in Claude Code.Also in this release
- Blog article corrected against a real 2.1.266 binary (#875)
- Function Hooks section, catalog entries and dashboard listing (#867)
Full changelog: https://github.com/davila7/claude-code-templates/compare/v1.29.2...v1.29.5
- v1.28.3v1.28.3 - Plugin Skills Support in Skills Manager2025-11-15 · 2025-11-15 20:41 UTC
查看更新说明
🎯 Skills Manager: Plugin Skills Support
The Skills Manager Dashboard now detects and displays skills installed from Claude Code plugins!
✨ New Features
-
3-Source Skill Detection: Skills Manager now scans three locations:
- 📁 Personal:
~/.claude/skills/- Manually installed skills - 📂 Project:
.claude/skills/- Project-specific skills - 🔌 Plugin:
~/.claude/plugins/marketplaces/*/plugins/*/skills/*/- Plugin-installed skills
- 📁 Personal:
-
Plugin Skills Integration: Skills installed via
/plugin install <skill>@<marketplace>now appear automatically in the dashboard
🔧 Improvements
-
Fixed Filter Counts: Filter badges now show consistent totals regardless of active filter
- All (5) shows total count
- Personal (4) shows personal count
- Project (0) shows project count
- Plugin (1) shows plugin count
-
Enhanced Logging: Detailed console output for troubleshooting skill detection:
- Shows directories being scanned
- Displays marketplace and plugin counts
- Reports successful skill loads
- Identifies missing SKILL.md files
📊 Usage
```bash
Launch Skills Manager
npx claude-code-templates@latest --skills-manager
Opens dashboard at http://localhost:3337
Now shows skills from all three sources!
```
🐛 Bug Fixes
- Fixed filter count numbers changing incorrectly when switching filters
- Skills installed from marketplaces now properly detected
- Improved error handling for missing directories
📦 What's Changed
- Added `loadPluginSkills()` method to scan marketplace installations
- Updated `updateStats()` to use total counts instead of filtered counts
- Enhanced logging throughout skill detection process
Full Changelog: https://github.com/davila7/claude-code-templates/compare/v1.28.2...v1.28.3
🤖 Generated with Claude Code
-
- v1.27.0v1.27.0 - Docker Sandbox Provider2025-11-02 · 2025-11-02 21:35 UTC
查看更新说明
🐳 Docker Sandbox Provider - Version 1.27.0
Execute Claude Code in isolated local Docker containers with complete control over your development environment.
✨ New Features
Docker Sandbox Provider
- Fully Local Execution: Run Claude Code in isolated Docker containers
- Claude Agent SDK Integration: Correct async generator implementation for reliable code generation
- Multi-Directory File Detection: Automatically finds and exports generated files from
/appand/tmp - Specialized Agent Support: Works with all 160+ agents from the marketplace
- Automated Execution:
--yesflag for CI/CD and scripting workflows - Custom Environments: Bring your own Docker images
📦 What's Included
Core Files
Dockerfile- Node.js 22 Alpine base image with development toolsdocker-launcher.js- Container lifecycle orchestrationexecute.js- Claude SDK execution with async generator supportpackage.json- Runtime dependenciesREADME.md- Complete documentation and troubleshooting guide
Web Documentation
- Docker provider section on component pages
- Provider comparison table (E2B vs Cloudflare vs Docker)
- Installation instructions and prerequisites
- Usage examples and best practices
🚀 Usage
Basic Usage
npx claude-code-templates@latest \ --sandbox docker \ --prompt "Write a REST API with Express" \ --yesWith Specialized Agent
npx claude-code-templates@latest \ --sandbox docker \ --agent programming-languages/javascript-pro \ --prompt "Create a function to add two numbers" \ --yes📋 Requirements
- Docker Desktop installed and running
- Anthropic API key configured
- Node.js 14+ (for CLI)
📊 Provider Comparison
Feature E2B Cloudflare Docker Location ☁️ Cloud 🌍 Edge 🏠 Local Setup Easy Easy Medium Best For Full stack Serverless Local dev API Keys Anthropic + E2B Anthropic Anthropic 🔧 Technical Improvements
- Correct SDK Usage: Implemented async generator iteration for
query() - Enhanced File Search: Scans multiple directories with
findcommand - Smart Prompts: Informs Claude about working directory context
- Flag Support:
--yesflag now works correctly for sandbox execution - Error Handling: Comprehensive error messages and troubleshooting
🐛 Bug Fixes
- Fixed async generator iteration in Claude Agent SDK
- Fixed
--yesflag not skipping agent selection prompts - Fixed file detection to include
/tmpdirectory - Removed misleading "works offline" messaging
📚 Documentation
- Component Page: https://aitmpl.com/component.html (Docker tab)
- README:
cli-tool/components/sandbox/docker/README.md - NPM: https://www.npmjs.com/package/claude-code-templates
🎯 Use Cases
- Local development without cloud dependencies
- Testing code in isolated environments
- Custom Docker environments with specific tools
- CI/CD integration with containerized testing
- Offline development (after initial setup)
📈 Stats
- Package Size: 375.9 kB
- Total Files: 92
- New Files: 5 (Docker sandbox components)
- Lines Changed: 1,671 insertions, 62 deletions
🔗 Links
- NPM Package: https://www.npmjs.com/package/claude-code-templates
- Documentation: https://aitmpl.com
- GitHub: https://github.com/davila7/claude-code-templates
💬 Feedback
Found a bug or have a feature request? Open an issue
Full Changelog: https://github.com/davila7/claude-code-templates/compare/v1.26.4...v1.27.0
🤖 Generated with Claude Code
用户点评
登录用户的真实使用记录,可按版本和硬件筛选还没有人点评。第一个说出真实体验的人最有价值。
About
Claude Code is configured through small files: skills, subagents, slash commands, hooks, MCP servers and settings. Claude Code Templates collects more than 1,980 of them in one catalog at aitmpl.com, where you can search, preview every file a component writes, and combine several components into a single install command. The CLI writes each file to the right place and merges existing configuration instead of overwriting it.
Every pull request is checked by Claude Code's plugin validator and scanned by NVIDIA SkillSpector.
Quickstart
Runs with npx, no global install needed.
# Browse the catalog and install interactively
npx claude-code-templates@latest
# Install one component
npx claude-code-templates@latest --skill creative-design/frontend-design
# Install a stack in one command
npx claude-code-templates@latest \
--agent development-team/frontend-developer \
--command testing/generate-tests \
--mcp integration/github-integration
Add --yes to skip the confirmation prompt. Every component page on aitmpl.com shows its exact install command.
npx claude-code-templates@latest --skill creative-design/frontend-design
npx claude-code-templates@latest --agent development-tools/code-reviewer
npx claude-code-templates@latest --command performance/optimize-bundle-size
npx claude-code-templates@latest --mcp database/postgresql-integration
npx claude-code-templates@latest --setting mcp/mcp-timeouts
npx claude-code-templates@latest --hook git/conventional-commits
npx claude-code-templates@latest --mod security/secret-redactor # Claude Code 2.1.287+
npx claude-code-templates@latest --loop engineering/docs-sweep-loop # also installs the components the loop uses
npx claude-code-templates@latest --plugin productivity/champion-kit # via the aitmpl marketplace, Claude Code 2.1.288+
What's in the catalog
| Type | Count | What it is | Examples |
|---|---|---|---|
| Skills | 918 | Reusable capabilities with progressive disclosure | PDF processing, frontend design, code review |
| Agents | 422 | Subagents specialized in one domain | Security auditor, frontend developer, database architect |
| Commands | 288 | Custom slash commands | /generate-tests, /optimize-bundle-size, /security-audit |
| MCPs | 119 | External service integrations | GitHub, PostgreSQL, Stripe, Supabase, Sentry |
| Settings | 80 | Claude Code configuration | Timeouts, permissions, status lines |
| Hooks | 63 | Automation triggers | Conventional commits, blocking direct pushes |
| Mods | 50 | Plugins that change Claude Code's own interface and behavior | Secret redaction, protected paths, terminal games |
| Loops | 18 | Autonomous workflows with a goal, an interval and a stop condition | Docs sweep, build-test-fix, adversarial review |
| Templates | 14 | Complete project configurations | Language and framework setups |
| Sandboxes | 11 | Launchers that run Claude Code in an isolated environment (reference only, see cli-tool/components/sandbox/) | E2B, Cloudflare, Docker |
| Plugins | 1 | Whole Claude Code plugins, installed from the aitmpl marketplace | Champion Kit |
Live counts: dashboard/public/counts.json.
Local tools
The CLI also ships three local tools. The two dashboards listen on 127.0.0.1 only, because they serve your conversation history.
| Command | What it does |
|---|---|
npx claude-code-templates@latest --analytics | Real-time session monitoring and usage metrics at localhost:3333 |
npx claude-code-templates@latest --chats | Read and search your conversations in a mobile-friendly UI at localhost:9876 |
npx claude-code-templates@latest --health-check | Diagnose your Claude Code installation and project setup |
To open the conversation browser from another device, forward the port over SSH: ssh -L 9876:localhost:9876 <host>.
--plugins, --skills-manager, --command-stats, --hook-stats, --mcp-stats, --agents, --chats-mobile, --teams, --2025, --studio, --sandbox, --tunnel, --create-agent, --list-agents, --update-agent, --remove-agent and --clone-session were removed. Running one prints what replaced it. To see what is installed in each scope, use the stack viewer mod (--mod ui/stack-viewer, then /stack in Claude Code). Details in the CHANGELOG.
Documentation
Guides, the CLI reference and the catalog API live at docs.aitmpl.com.
Contributing
Contributions are welcome. Read the contributing guide to add a skill, agent, command, MCP, setting, hook or mod, and the Code of Conduct before you open a pull request.
Sponsors and programs
Sponsors
Open source programs
Support the project
Everyone who supports the project is listed at aitmpl.com/supporters.
Attribution
The catalog includes components from these sources. Each keeps its original license and attribution.
| Source | License | Contributes |
|---|---|---|
| K-Dense-AI/claude-scientific-skills (K-Dense Inc.) | MIT | 139 scientific skills for biology, chemistry, medicine and computational research |
| anthropics/skills | See repo | 21 official Anthropic skills |
| anthropics/claude-code | See repo | 10 skills from development guides and examples |
| obra/superpowers (Jesse Obra) | MIT | 14 workflow skills |
| alirezarezvani/claude-skills (Alireza Rezvani) | MIT | 36 professional role skills |
| wshobson/agents | MIT | 48 agents |
| hesreallyhim/awesome-claude-code | CC0 1.0 | 21 commands |
| mehdi-lamrani/awesome-claude-skills | Apache 2.0 | Community skills |
| NerdyChefsAI Skills | MIT | Specialized enterprise skills |
| move-code-quality-skill | MIT | |
| cocoindex-claude | Apache 2.0 |