by sangrokjung
oh-my-zsh for Claude Code — 16 agents, 35 commands, 32 skills, 21 safety hooks in one install. v4.0 adds an adversarial review loop: a second agent that never sees the first one's reasoning. MIT.
# Add to your Claude Code skills
git clone https://github.com/sangrokjung/claude-forgeLast scanned: 5/8/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-08T06:00:26.372Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}claude-forge is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by sangrokjung. oh-my-zsh for Claude Code — 16 agents, 35 commands, 32 skills, 21 safety hooks in one install. v4.0 adds an adversarial review loop: a second agent that never sees the first one's reasoning. MIT. It has 815 GitHub stars.
Yes. claude-forge passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/sangrokjung/claude-forge" and add it to your Claude Code skills directory (see the Installation section above).
claude-forge is primarily written in Shell. It is open-source under sangrokjung on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh claude-forge against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
v4.0.0 (August 2026) — Leads with the adversarial verification loop: every behavioral change is checked by a fresh, independent reviewer (
adversarial-reviewer) that did not write the code and does not see the maker's reasoning — maker≠checker until the checker issuesAPPROVE. This is not theoretical: building v4.0 itself, the loop caught three real defects in the maintainer's own PRs (#58, #61) — a CI parity guard that passed on its own regression, the same guard's fix carrying an identical hole one level down, and a dependency ceiling that silently pinned a year-old release. Full worked example with the actual envelopes:docs/VERIFICATION-LOOP.md. Also ships a reliability pack (unattended API-error auto-resume, session relay across/compact, doom-loop + edit-time verify hooks, an opt-in pre-commit secret guard, and the sharedlibs/hook-guard.shthey build on — wiring guide:docs/RELIABILITY.md), a debugging escalation chain (systematic-debugger→rca-debugger→escalation-fixer), task-grade routing (/workflow-classifysizes work S/M/L/XL and routes documentation + verification depth accordingly), and Korean prose quality guardrails (translation-ese/AI-idiom avoidance at generation time, not just cleanup). 16 agents, 35 commands, 32 skills, 21 hooks, 14 rules. See MIGRATION.md.v3.1.1 (hotfix, August 2026) — Fixes plugin install failing to load entirely (
Hook load failed: expected record, received undefined). If/plugin install claude-forgeshowed✘ failed to loadand none of the skills, agents or commands appeared, upgrade to 3.1.1. Also restores Windowsinstall.ps1parity (statusLine andscripts/were never copied). See #52, #57, #50.
v3.1.0 released (June 2026) — Adds loop-forge (turn a repetitive task into a reusable, self-guarding slash command) and a full beginner-friendly rewrite of this README with diagrams. Built on v3.0.2 (LLM-readable install) and v3.0.1 (Anthropic 2026 standard alignment: Hooks 21+ events, Subagent frontmatter v2, Skills/Commands hybrid policy, 4-server MCP minimum). See MIGRATION.md.
Plain English version: Claude Code is an AI coding assistant that lives in your terminal. Out of the box it is capable but bare — like a new employee who knows how to code but has no company procedures, no safety checklists, no templates, and no specialist colleagues to call on.
Claude Forge is the equipment pack for that assistant. One install gives it:
/plan, /tdd, /code-review) that trigger full workflowsThe oh-my-zsh analogy: oh-my-zsh is a free add-on that turns a plain terminal into a colorful, plugin-packed power tool — without changing what the terminal fundamentally does. Claude Forge does the same thing for Claude Code.
| Without Claude Forge | With Claude Forge |
|---|---|
| Claude Code writes code, but you have to remind it about tests, security, and docs every time | Automated pipeline: plan → test → review → verify → ship, all connected |
| No safety net — Claude can run dangerous commands or leak secrets by accident | 6-layer hook system blocks risky actions before they happen |
| One AI doing everything alone | 16 specialist agents working in parallel (planner, architect, security reviewer, adversarial reviewer…) |
| Hours assembling your own config | 5-minute install, everything pre-wired |
| Updates require manual copy-paste | git pull — done |

Open a Claude Code session and run two commands:
/plugin marketplace add sangrokjung/claude-forge
/plugin install claude-forge
This gets you commands and most skills right away. Agents, hooks, rules, and MCP connections need Option B.
Update later: /plugin update claude-forge
One line in your terminal:
curl -fsSL https://raw.githubusercontent.com/sangrokjung/claude-forge/main/install.sh | bash
Or if you prefer to clone first:
git clone --recurse-submodules https://github.com/sangrokjung/claude-forge.git
cd claude-forge
./install.sh # fresh install
# or
./install.sh --upgrade # safe migration from v2.1
Windows users: Run .\install.ps1 in PowerShell as Administrator.
| What you get | Option A (/plugin install) |
Option B (./install.sh) |
|---|---|---|
| Commands (35 shortcuts) | ✅ | ✅ |
| Skills (32 saved procedures) | ⚠️ partial | ✅ |
| Agents (16 specialists) | ❌ | ✅ |
| Hooks (21 safety checks) | ❌ | ✅ |
| Rules (14 behavior guidelines) | ❌ | ✅ |
| MCP connections (4 tools) | ❌ | ✅ |
Recommendation: Use Option B unless you only need a taste of commands and skills.
If Claude Forge helps you, a star on GitHub helps others find it.

Here is everything bundled in Claude Forge, explained in plain language:
| What | Count | Plain English |
|---|---|---|
| Agents (specialist colleagues) | 16 | Each one is an AI focused on a single job — planner, architect, security checker, test guide, database expert, adversarial reviewer, and more. Claude calls the right one automatically. |
| Commands (shortcut buttons) | 35 | Type /plan and Claude creates a full implementation plan. Type /tdd and it writes tests first, then code. All 35 are pre-built shortcuts for common developer tasks. |
| Skills (saved procedures) | 32 | Step-by-step playbooks Claude follows automatically — like a recipe it has memorized. loop-forge turns any repetitive task into a reusable slash command in seconds; review-loop runs the maker≠checker verification cycle. |
| Hooks (silent safety checks) | 21 built-in + 9 opt-in examples | These run before and after every action Claude takes. They block leaked passwords, dangerous database commands, and unsafe remote scripts — and, new in v4.0, they auto-resume a session after a retryable API error and nudge you when you're stuck editing the same file. Covers 21 lifecycle events. |
| Rules (behavior guidelines) | 14 | Written instructions Claude reads at the start of every session — coding style, security principles, git workflow conventions, when the verification loop is mandatory, and more. |
| MCP connections (external tools) | 4 | Browser automation (Playwright), live library docs (context7), web page reader (jina-reader), and Chrome DevTools for performance audits. |
| Agent | What it does |
|---|---|
| planner | Creates detailed implementation plans for complex features. Waits for your sign-off be |