by tractorjuice
The Enterprise Architecture Governance Harness — strategy, architecture, delivery, and assurance for AI coding assistants
# Add to your Claude Code skills
git clone https://github.com/tractorjuice/arc-kitLast scanned: 6/20/2026
{
"issues": [
{
"type": "npm-audit",
"message": "basic-ftp: basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dompurify: DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-06-20T07:50:09.414Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}arc-kit is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by tractorjuice. The Enterprise Architecture Governance Harness — strategy, architecture, delivery, and assurance for AI coding assistants. It has 2,093 GitHub stars.
arc-kit returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/tractorjuice/arc-kit" and add it to your Claude Code skills directory (see the Installation section above).
arc-kit is primarily written in JavaScript. It is open-source under tractorjuice on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh arc-kit against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
Build better enterprise architecture through structured strategy, design, delivery, and assurance workflows.
ArcKit is a toolkit for enterprise architects that transforms architecture governance from scattered documents into a systematic, AI-assisted workflow for:
[DOC-CN] markers with source quotes)Claude Code (premier experience) — install the ArcKit plugin (requires v2.1.200+):
First, make sure Claude Code is on the latest version:
claude install latest
Then in Claude Code:
/plugin marketplace add tractorjuice/arckit-claude
Then install from the Discover tab, or via CLI. The marketplace ships 15 plugins — install only the overlays you need:
# Core (75 commands — UK Government civilian + generic enterprise)
claude plugin install arckit@arckit-claude
# Core + UAE federal
claude plugin install arckit arckit-uae
# Broad overlay set (UK + UAE + FR + CA + EU + AT + AU + US + UK-NHS + UK-GCloud)
claude plugin install arckit arckit-{uae,fr,ca,eu,at,au,us,uk-nhs,uk-gcloud}
# Enterprise architecture and AI agent governance overlays
claude plugin install arckit arckit-togaf-adm arckit-agent-architecture
The standalone tractorjuice/arckit-claude marketplace hosts all Claude Code plugins: the arckit core plugin, regional overlays, sector overlays, the TOGAF ADM and AI agent architecture overlays, the arckit-fde tooling plugin, and the public-but-proprietary arckit-uk-gcloud supplier overlay. The 13 community plugins (arckit-uae, arckit-fr, arckit-ca, arckit-eu, arckit-at, arckit-au, arckit-au-energy, arckit-us, arckit-uk-finance, arckit-uk-nhs, arckit-uk-gcloud, arckit-togaf-adm, arckit-agent-architecture) require the arckit core plugin. arckit-au-energy (sector) additionally requires arckit-au (jurisdiction), which it composes — install with claude plugin install arckit arckit-au arckit-au-energy. arckit-uk-gcloud is a proprietary, Claude Code only supplier-side G-Cloud bid-authoring overlay — it is public for installation and inspection, but not MIT licensed and not distributed to the non-Claude extension formats. One tooling plugin — arckit-fde — is a lean, Claude Code only plugin with one command, /arckit-fde:create, that generates a brandable (white-label) Forward Deploy Engineering consulting website into docs/ (GitHub Pages ready), with UK Public Sector and Generic market presets; no dependencies, not converted to non-Claude formats, no governance doc-types.
The older tractorjuice/arc-kit marketplace remains available for compatibility, but new Claude Code installs should use tractorjuice/arckit-claude. Claude Code is the primary development platform for ArcKit and provides the most complete experience: all official commands, autonomous research agents, automation hooks, bundled MCP servers (AWS Knowledge, Microsoft Learn, Google Developer Knowledge, govreposcrape, uk-tenders), and automatic updates via the marketplace. See Why Claude Code? below.
Why v2.1.200? v2.1.200 fixes project-scoped plugin loading from git worktrees and
claude agents --plugin-dir <dir>visibility for plugin agents/skills, which makes ArcKit's branch and test-repo workflows reliable. It also carries the v2.1.198-v2.1.199 background-subagent reliability, parent error-propagation, and hook stderr-visibility fixes that matter to/arckit:build, reader/writer handoffs, and hook diagnosis. v2.1.197 makes Claude Sonnet 5 the default Claude Code model with native 1M context, while v2.1.172 fixed wildcard-domainWebFetchpermission rules (WebFetch(domain:*.gov.uk)) that never matched subdomains on earlier clients — the exact shape ArcKit recommends for confining research-agent traffic in OFFICIAL-SENSITIVE deployments. The floor also carries forward the v2.1.156 Opus 4.8 thinking-block fix, v2.1.154 plugindefaultEnabled: false, v2.1.144 session-title and headless Skill tool fixes, v2.1.143 plugin dependency enforcement, v2.1.139 hookargs: string[], v2.1.129 monitor layout and prompt-cache fixes, v2.1.121 MCP/provenance hook unlocks, v2.1.118-v2.1.119 release/telemetry unlocks, and the earlier/context, Auto mode, plugin update, MCP leak, retry, and subagent working-directory fixes.
Gemini CLI — install the ArcKit extension:
gemini extensions install https://github.com/tractorjuice/arckit-gemini
Zero-config: all 75 official commands, templates, scripts, and bundled MCP servers (AWS Knowledge, Microsoft Learn). Updates via gemini extensions update arckit.
GitHub Copilot (VS Code) — install the ArcKit CLI and scaffold prompt files:
# Install with pip
pip install git+https://github.com/tractorjuice/arc-kit.git
# Scaffold a project with Copilot prompt files
arckit init my-project --ai copilot
Creates .github/prompts/arckit-*.prompt.md (80 prompt files), .github/agents/arckit-*.agent.md (10 custom agents), and .github/copilot-instructions.md (repo-wide context). Invoke commands in Copilot Chat as /arckit-requirements, /arckit-stakeholders, etc.
Codex CLI — install the ArcKit CLI:
# Install with pip
pip install git+https://github.com/tractorjuice/arc-kit.git
# Or with uv
uv tool install arckit-cli --from git+https://github.com/tractorjuice/arc-kit.git
# Or run without installing
uvx --from git+https://github.com/tractorjuice/arc-kit.git arckit init my-project
Mistral Vibe CLI — link the ArcKit extension:
# Clone the standalone extension repository
git clone https://github.com/tractorjuice/arckit-vibe.git
cd arckit-vibe
# Create extensions directory and link
mkdir -p ~/.vibe/extensions/
ln -s $(pwd) ~/.vibe/extensions/arckit
Zero-config: 75 official commands as skills, 10 specialized agents, all templates, and bundled MCP servers (AWS Knowledge, Microsoft Learn, Google Developer Knowledge, GovRepoScrape).
Latest Release: v6.3.0
ArcKit can exchange Markdown knowledge bundles using an Open Knowledge Format-shaped frontmatter layer:
/arckit:export-okf copies ArcKit ARC-*.md artifacts into an OKF bundle with portable type, title, resource, tags, timestamp, and arckit metadata./arckit:import-okf scans an OKF bundle, writes .arckit/tmp/okf-import-report.json, and materializes safe imports as RSCH review notes by default.ARCKIT_OKF_FRONTMATTER=1 or .arckit/config.json containing { "okfFrontmatter": true }.| Platform | Claude Code Plugin | Gemini CLI Extension | GitHub Copilot | Codex / OpenCode CLI | Mistral Vibe |
|---|---|---|---|---|---|
| macOS | Full support | Full support | Full support | Full support | Full support |
| Linux | Full support | Full support | Full support | Full support | Full support |
| Windows (WSL2) | Full support | Full support | Full support | Full support | Full support |
| Windows (native) | Full support | Full support | Full support | Partial | Full support |
Windows users: The Claude Code plugin, Gemini CLI extension, GitHub Copilot prompt files, and Mistral Vibe extension work natively on all platforms. For Codex CLI / OpenCode CLI on native Windows (without WSL), some commands containing inline bash snippets may require Git Bash or [WSL2](https:/