arc-kit

Name: arc-kit
Author: tractorjuice

Warning

The Enterprise Architecture Governance Harness — strategy, architecture, delivery, and assurance using AI coding assistants

2,253stars

282forks

JavaScript

Installation

# Add to your Claude Code skills
git clone https://github.com/tractorjuice/arc-kit

Getting Started

Guides for using ai agents skills like arc-kit.

Caveman: Cut Claude Token Use by 65%
How agent-side prompt compression works, when to use it, and when not to.
What is an AI Skills Marketplace?
Definitions, how marketplaces work, and how to choose between them in 2026.
Getting Started with AI Skills

Security ReportWarning

Last scanned: 6/20/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "basic-ftp: basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "dompurify: DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ws: ws: Uninitialized memory disclosure",
      "severity": "high"
    }
  ],
  "status": "WARNING",
  "scannedAt": "2026-06-20T07:50:09.414Z",
  "npmAuditRan": true,
  "pipAuditRan": true,
  "promptInjectionRan": true
}

Compare with similar skills

See how arc-kit compares with popular alternatives.

arc-kit vs ecc

See comparison

arc-kit vs hermes agent

See comparison

README.md

Frequently Asked Questions

What is arc-kit?

arc-kit is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by tractorjuice. The Enterprise Architecture Governance Harness — strategy, architecture, delivery, and assurance using AI coding assistants. It has 2,253 GitHub stars.

Is arc-kit safe to use?

arc-kit returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.

How do I install arc-kit?

Clone the repository with "git clone https://github.com/tractorjuice/arc-kit" and add it to your Claude Code skills directory (see the Installation section above).

What programming language is arc-kit written in?

arc-kit is primarily written in JavaScript. It is open-source under tractorjuice on GitHub, so you can review or fork the full source.

Are there alternatives to arc-kit?

Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh arc-kit against similar tools.

AI Courses · Agentic AI, LLM Engineering & MCP

Beginner to professional · First lesson free · Lifetime access

20% off

Comments (0)

to leave a comment.

No comments yet. Be the first to share your thoughts!

Related Skills

ECC

by affaan-m

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

277,496

Developers Also Liked

Based on votes and bookmarks from developers who liked this skill

napi

by nanoapi-io

Software architecture tooling for the AI age

323

harness-anything harmonist

⚠️ Third-Party Software Notice

This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.

Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.

Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.

Read the Terms of Service

ArcKit: The Enterprise Architecture Governance Harness

Build better enterprise architecture through structured strategy, design, delivery, and assurance workflows.

ArcKit is a toolkit for enterprise architects that transforms architecture governance from scattered documents into a systematic, AI-assisted workflow for:

🏛️ Establishing and enforcing architecture principles
👥 Analyzing stakeholder drivers, goals, and outcomes
🛡️ Risk management (HM Treasury Orange Book)
💼 Business case justification (HM Treasury Green Book SOBC)
📋 Creating comprehensive requirements documents
🗄️ Data modeling with ERD, GDPR compliance, and data governance
🔬 Technology research with build vs buy analysis (web search powered)
☁️ Azure-specific research using Microsoft Learn MCP for authoritative documentation
🗺️ Strategic planning with Wardley Mapping
📊 Generating visual architecture diagrams (Mermaid)
🤝 Managing vendor RFP and selection processes
✅ Conducting formal design reviews (HLD/DLD)
🔧 ServiceNow service management design
🔗 Maintaining requirements traceability
📎 Citation traceability for external documents (inline [DOC-CN] markers with source quotes)

ArcKit produces DRAFT artefacts for qualified people to review, not legal, regulatory, clinical, or security advice. See What ArcKit does not do.

Quick Start

Installation

Claude Code (premier experience) — install the ArcKit plugin (requires v2.1.287+):

First, make sure Claude Code is on the latest version:

claude install latest

Then in Claude Code:

/plugin marketplace add tractorjuice/arckit-claude

Then install from the Discover tab, or via CLI. The marketplace ships 17 plugins — install only the overlays you need:

# Core (76 commands — UK Government civilian + generic enterprise)
claude plugin install arckit@arckit-claude

# Core + UAE federal
claude plugin install arckit arckit-uae

# Broad overlay set (UK + UAE + FR + CA + EU + AT + AU + US + UK-NHS + UK-GCloud)
claude plugin install arckit arckit-{uae,fr,ca,eu,at,au,us,uk-nhs,uk-gcloud}

# Enterprise architecture and AI agent governance overlays
claude plugin install arckit arckit-togaf-adm arckit-agent-architecture

The standalone tractorjuice/arckit-claude marketplace hosts all Claude Code plugins: the arckit core plugin, regional overlays, sector overlays, the TOGAF ADM and AI agent architecture overlays, the arckit-fde tooling plugin, and the public-but-proprietary arckit-uk-gcloud supplier overlay. The 14 community plugins (arckit-uae, arckit-fr, arckit-ca, arckit-eu, arckit-at, arckit-au, arckit-au-energy, arckit-us, arckit-uk-finance, arckit-uk-nhs, arckit-uk-gcloud, arckit-togaf-adm, arckit-agent-architecture, arckit-oaa) require the arckit core plugin. arckit-au-energy (sector) additionally requires arckit-au (jurisdiction), which it composes — install with claude plugin install arckit arckit-au arckit-au-energy. arckit-uk-gcloud is a proprietary, Claude Code only supplier-side G-Cloud bid-authoring overlay — it is public for installation and inspection, but not MIT licensed and not distributed to the non-Claude extension formats. One tooling plugin — arckit-fde — is a lean, Claude Code only plugin with one command, /arckit-fde:create, that generates a brandable (white-label) Forward Deploy Engineering consulting website into docs/ (GitHub Pages ready), with UK Public Sector and Generic market presets; no dependencies, not converted to non-Claude formats, no governance doc-types.

The older tractorjuice/arc-kit marketplace remains available for compatibility, but new Claude Code installs should use tractorjuice/arckit-claude. Claude Code is the primary development platform for ArcKit and provides the most complete experience: all official commands, autonomous research agents, automation hooks, bundled MCP servers (AWS Knowledge, Microsoft Learn, Google Developer Knowledge, govreposcrape, uk-tenders), and automatic updates via the marketplace. See Why Claude Code? below.

Why v2.1.287? It adds Claude mods, which ArcKit uses to draw a status line above the prompt: how many projects and artefacts you have, how many are DRAFT, and how many reviews are overdue. It also fixes plugin SessionStart hooks not running in new cloud sessions, which skipped ArcKit's session set-up and version check there.

The floor also carries earlier releases ArcKit depends on:

Models

v2.1.284 adds Claude Sonnet 5.5 (claude-sonnet-5-5), the default Sonnet model on the Anthropic API, with 1M context; earlier clients cannot select it. Like Opus 5.5 it always thinks and defaults to effort: medium, so ArcKit's effort: max commands run at max on it.

v2.1.280 adds Claude Opus 5.5 (claude-opus-5-5), the default Opus model. It always thinks, so ArcKit's effort: max commands can no longer be quietly sent as high by a session with thinking off, and the Effective Effort row in each artefact's Build Provenance is accurate.

v2.1.219 adds Claude Opus 5 (claude-opus-5), with 1M context and fast mode, which earlier clients cannot select (superseded as the default by Opus 5.5).

v2.1.197 makes Claude Sonnet 5 the default, with native 1M context.

Security and permissions

v2.1.251 stops the file tools (Read, Write, Edit) following a symlink swapped inside the working directory after the permission check, and makes Grep and Glob honour Read() deny rules through a symlinked search path. That is the same class of bypass the v2.1.222–v2.1.224 fixes closed for Bash, and the class ArcKit's file-protection and secret-file-scanner gates sit in front of.

v2.1.234 stops Claude Code's MCP diagnostics printing resolved secrets. ArcKit bundles two keyed MCP servers whose ${user_config.*} API keys sit in request headers. On a session with no keys configured those connections fail by design, so ArcKit routinely produces exactly the diagnostics this fixed.

v2.1.222 stops PreToolUse auto-allow hooks bypassing tool restrictions inside background agent tasks, which became load-bearing when v2.1.232 made subagent spawns background by default.

v2.1.223 and v2.1.224 close Bash permission-check bypasses, a sandbox denyRead/denyWrite trailing-slash bypass, and a bug where project paths over 200 characters resolved into another project's session directory. v2.1.224 also surfaces sandbox violation details in Bash results.

v2.1.172 fixes wildcard-domain WebFetch rules (WebFetch(domain:*.gov.uk)) that never matched subdomains on earlier clients. That is the exact shape ArcKit recommends for confining research-agent traffic in OFFICIAL-SENSITIVE deployments.

Effort and thinking

v2.1.251 sends Opus 5 effort: xhigh/max as high when thinking is off instead of failing, so ArcKit's effort: max commands complete on thinking-off sessions.

v2.1.221 fixes WebSearch returning a 400 at effort: xhigh/max when thinking is disabled, which silently broke ArcKit's effort: max commands and its three max-effort research agents for anyone running with thinking off.

Plugin loading and agents

v2.1.246 fixes four plugin-loading bugs that hit ArcKit's exact layout: /reload-plugins counted 0 skills for plugins that define skills under skills/*/SKILL.md, hook error messages showed a literal ${CLAUDE_PLUGIN_ROOT} instead of the resolved path, the plugin cache created duplicate SHA-named directories, and claude plugin update <bare-name> failed.

v2.1.200 fixes project-scoped plugin loading from git worktrees and claude agents --plugin-dir <dir> visibility, which makes ArcKit's branch and test-repo workflows reliable.

v2.1.198–v2.1.199 fix background-subagent reliability, parent error propagation and hook stderr visibility, which matter to /arckit:build, reader/writer handoffs and hook diagnosis.

Older fixes: v2.1.156 Opus 4.8 thinking-block fix, v2.1.154 plugin defaultEnabled: false, v2.1.144 session-title and headless Skill tool fixes, v2.1.143 plugin dependency enforcement, v2.1.139 hook args: string[], v2.1.129 monitor layout and prompt-cache fixes, v2.1.121 MCP/provenance hook unlocks, v2.1.118–v2.1.119 release/telemetry unlocks, and the earlier /context, Auto mode, plugin update, MCP leak, retry and subagent working-directory fixes.

Gemini CLI — install the ArcKit extension:

gemini extensions install https://github.com/tractorjuice/arckit-gemini

Zero-config: all 76 official commands, templates, scripts, and bundled MCP servers (AWS Knowledge, Microsoft Learn). Updates via gemini extensions update arckit.

GitHub Copilot (VS Code) — install the ArcKit CLI and scaffold prompt files:

# Install with pip
pip install git+https://github.com/tractorjuice/arc-kit.git

# Scaffold a project with Copilot prompt files
arckit init my-project --ai copilot

Creates .github/prompts/arckit-*.prompt.md (165 prompt files — the 76 official commands plus the comm