Install
$ agentstack add skill-stevesolun-ctx-toolbox ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
toolbox
Named bundles of skills/agents that run before (pre) or after (post) a development task. Learn patterns from past work and propose new bundles. Invoke slash, pre-commit, session-end, or file-save.
Quick reference
| Task | Command | |--------------------------------------------|-----------------------------------------| | Seed 5 starter toolboxes | python src/toolbox.py init | | List available toolboxes | python src/toolbox.py list | | Inspect one | python src/toolbox.py show ship-it | | Activate (global) | python src/toolbox.py activate ship-it| | Export for sharing | python src/toolbox.py export ship-it | | Import a shared toolbox | python src/toolbox.py import file.yaml| | Validate config | python src/toolbox.py validate |
Starter templates
| Name | When to use | |-------------------|-----------------------------------------------------------------| | ship-it | End-of-feature: 7-expert council on the change set | | security-sweep | Security audit with guardrail blocking HIGH findings | | refactor-safety | Refactors with graph-informed blast radius | | docs-review | When touching Markdown or API docs | | fresh-repo-init | Blank repo: run intent interview and scaffold |
Data model
Global: ~/.claude/toolboxes.json. Per-repo (overrides global): /.toolbox.yaml.
Each toolbox declares:
pre— skills/agents to load before work startspost— agents that form the council after work endsscope.analysis—diff|full|graph-blast|dynamictrigger—slash,pre_commit,session_end, orfile_saveglobbudget.max_tokens/budget.max_seconds— hard stop on runaway costdedup.policy—fresh(always re-run) orcached(reuse within window)guardrail— if true, block commit on HIGH findings
Invoke when
- User says "I'm done with this feature" or commits a feature branch.
- User opens a fresh repo (triggers
fresh-repo-initsuggestion). - User touches security-sensitive paths (triggers
security-sweepfile_save). - User asks "what toolboxes do I have?" or "run the council".
Reasoning
See docs/toolbox/index.md, docs/toolbox/starters.md, and docs/toolbox/verdicts.md for the current toolbox contract, starter bundles, and guardrail behavior.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: stevesolun
- Source: stevesolun/ctx
- License: MIT
- Homepage: https://stevesolun.github.io/ctx/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.