Skip to content

Repository files navigation

Agent-Builder

A curated, machine-validated multi-harness AI Agent Registry & Awesome List — Plugins, Skills, MCP Servers, Prompts, DESIGN.md systems, and Agent Presets for OpenCode, Claude Code, Codex, and more.

Awesome Registry JSON WebUI NPM

Quick Start

node bin/agent-builder.js serve
# then open the printed local URL, or use the hosted WebUI above

Note: @heretek-ai/agent-builder is not published on the npm registry yet (npm view still 404s — a known gap, AB-6.1). Do not use npx @heretek-ai/agent-builder; run from source as above or npm pack until npm publish lands.

Registry stats: 66 entries (4 agent, 3 design-md, 8 mcp-server, 15 plugin, 3 prompt, 33 skill) across the taxonomy below.

Table of Contents

1. Plugins & Extensions (By Harness)

plugins

Native harness plugins, lifecycle hooks, memory extensions, and statuslines.

OpenCode Plugins

plugins/opencode

OpenCode v1 & v2 plugins, custom tools, and session hooks.

Name Tagline Harnesses Languages/Platforms Tools
Awesome OpenCode Catalog Upstream awesome list of OpenCode plugins, agents, and configs. [opencode] — —
OpenCode Native Toolchain Official OpenCode runtime: custom tools, hooks, and plugin API. [opencode] — —
OpenCode Session Hooks Plugin Session lifecycle hooks and custom tools for OpenCode. [opencode] — —
pi-weave Local-first Markdown memory and knowledge graph for Pi and OpenCode: preserve decisions, recall sessions, and explore… [opencode] — —

Claude Code Plugins

plugins/claude-code

Claude Code slash-command bundles, hook scripts, and marketplace plugins.

Name Tagline Harnesses Languages/Platforms Tools
Awesome Claude Code Resources Community catalog of Claude Code commands, agents, and hooks. [claude-code] — —
Claude Code Runtime Official Claude Code CLI: slash commands, hooks, and MCP support. [claude-code] — —
Claude Code Slash Bundle Slash-command bundle and hook scripts for Claude Code. [claude-code] — —

Codex Plugins & Extensions

plugins/codex

Codex CLI wrappers, sandbox profiles, and orchestration extensions.

Name Tagline Harnesses Languages/Platforms Tools
Codex CLI Runtime Official Codex CLI: sandbox profiles and skill wiring. [codex] — —
Codex Orchestrator Extension Multi-step orchestration profiles for Codex CLI sessions. [codex] — —

Gemini CLI Extensions

plugins/gemini-cli

Extensions and tool bridges for Gemini CLI.

Name Tagline Harnesses Languages/Platforms Tools
Gemini CLI Extension Bridge Extensions and tool bridges for Gemini CLI agents. [gemini-cli] — —

Cursor & Windsurf Extensions

plugins/cursor-windsurf

IDE-integrated agent plugins and rule packs.

Name Tagline Harnesses Languages/Platforms Tools
Cursor Rules Pack Community rule packs and IDE agent plugins for Cursor. [cursor] [windsurf] — —

Cross-Harness Bridges & Multiplexers

plugins/cross-harness

Multi-agent routers, harness adapters, and cross-provider bridges.

Name Tagline Harnesses Languages/Platforms Tools
Harness Adapter Kit Adapter patterns for running one agent across harnesses. [opencode] [claude-code] [codex] [universal] — —
LiteLLM Router Bridge Multi-provider LLM router bridging harnesses to 100+ models. [opencode] [claude-code] [codex] [universal] — —
Pi Coding Agent Harness Minimal, extensible terminal AI coding agent harness with Codemode & MCP. [opencode] [claude-code] [codex] [universal] typescript, linux, macos, windows —
Pi Code Review Extension Practical /review and /end-review workflow extension for Pi. [universal] typescript, linux, macos, windows —

2. Agent Skills (By Subject & Domain)

skills

Installable SKILL.md playbooks and domain-specific instruction bundles.

2.1 Coding & Programming Languages

skills/coding

C & C++

skills/coding/c-cpp

Modern C++20/23, CMake, embedded C, memory safety, and sanitizer workflows.

Name Tagline Harnesses Languages/Platforms Tools
Modern C++ Playbook Modern C++20/23, CMake, and sanitizer workflows. [opencode] [claude-code] [universal] cpp, c —

Rust

skills/coding/rust

Cargo workspaces, unsafe auditing, async Tokio, lifetime refactoring, and FFI.

Name Tagline Harnesses Languages/Platforms Tools
Rust Secure Coding Skill Cargo workspaces, unsafe auditing, and Tokio patterns. [opencode] [claude-code] [universal] rust —

Lua & Neovim / Game Scripting

skills/coding/lua

LuaJIT, Neovim plugin development, LÖVE2D, and embedded Lua scripting.

Name Tagline Harnesses Languages/Platforms Tools
Lua and Neovim Scripting Skill LuaJIT, Neovim plugins, and embedded Lua scripting. [opencode] [universal] lua —

Python

skills/coding/python

Asyncio, Pydantic, packaging (uv/poetry), type-checking, and FastAPI services.

Name Tagline Harnesses Languages/Platforms Tools
Python FastAPI Service Skill Asyncio, Pydantic v2, and FastAPI service patterns. [opencode] [claude-code] [codex] [universal] python —
Python Packaging with uv Skill Modern Python packaging, workspaces, and type-checking with uv. [opencode] [universal] python —

TypeScript & JavaScript

skills/coding/typescript-js

Node.js, Bun, Deno, strict TypeScript type-level programming, and ESM bundling.

Name Tagline Harnesses Languages/Platforms Tools
Strict TypeScript Patterns Skill Strict type-level TypeScript, ESM bundling, and Bun/Node APIs. [opencode] [claude-code] [universal] typescript, javascript —

Go (Golang)

skills/coding/go

Concurrent Go services, gRPC, profiling, and zero-allocation patterns.

Name Tagline Harnesses Languages/Platforms Tools
Go Concurrent Services Skill Concurrent Go services, gRPC, profiling, and zero-alloc patterns. [opencode] [claude-code] [universal] go —

Zig & Low-Level Systems

skills/coding/zig-systems

Zig build system, custom allocators, bare-metal, and OS kernel development.

Name Tagline Harnesses Languages/Platforms Tools
Zig Systems Playbook Skill Zig build system, custom allocators, and bare-metal patterns. [opencode] [universal] zig —

Java, Kotlin & C# (.NET)

skills/coding/jvm-dotnet

JVM performance, Spring/Ktor, .NET Core, and enterprise backend patterns.

Name Tagline Harnesses Languages/Platforms Tools
JVM Spring Patterns Skill Spring Boot services, JVM tuning, and enterprise backend patterns. [opencode] [universal] java, kotlin —

SQL & Database Engineering

skills/coding/sql-databases

PostgreSQL, ClickHouse, SQLite, query optimization, and schema migrations.

Name Tagline Harnesses Languages/Platforms Tools
SQL Query Optimization Skill PostgreSQL tuning, EXPLAIN plans, and schema migrations. [opencode] [universal] sql —

Shell, Bash & CLI Tooling

skills/coding/shell-cli

POSIX shell, Zsh, PowerShell, and TUI/CLI ergonomics.

Name Tagline Harnesses Languages/Platforms Tools
Shell & CLI Ergonomics Skill POSIX shell, formatting, and TUI/CLI design patterns. [opencode] [universal] shell, bash, linux, macos —

2.2 Design, UI/UX & Client Platforms

skills/design

WebUI & Frontend Frameworks

skills/design/webui

React, Next.js, Vue, Svelte, Tailwind CSS, accessibility (WCAG), and motion design.

Name Tagline Harnesses Languages/Platforms Tools
WebUI Frontend Patterns React, Tailwind, and accessible motion design patterns. [opencode] [claude-code] [universal] typescript, javascript —

Desktop Apps — Windows

skills/design/desktop-windows

WinUI 3, WPF, Win32 COM automation, and Windows installer packaging.

Name Tagline Harnesses Languages/Platforms Tools
Windows Desktop Patterns Skill WinUI 3, WPF, and Windows packaging workflows. [opencode] [universal] windows —

Desktop Apps — macOS

skills/design/desktop-macos

AppKit, SwiftUI for macOS, AppleScript/JXA automation, and notarization.

Name Tagline Harnesses Languages/Platforms Tools
macOS SwiftUI Patterns Skill AppKit, SwiftUI for macOS, and notarization pipelines. [opencode] [universal] swift, macos —

Desktop Apps — Linux

skills/design/desktop-linux

GTK4, Qt/QML, Wayland/X11 compositors, Flatpak, and systemd desktop integration.

Name Tagline Harnesses Languages/Platforms Tools
Linux Desktop Patterns GTK4, Qt/QML, Flatpak, and Wayland integration. [opencode] [universal] linux —

Desktop Apps — Cross-Platform

skills/design/desktop-cross-platform

Tauri, Electron, Flutter Desktop, and Dear ImGui.

Name Tagline Harnesses Languages/Platforms Tools
Tauri Cross-Platform Desktop Skill Tauri, IPC bridges, and cross-platform desktop builds. [opencode] [universal] rust, typescript, windows, macos, linux —

Mobile — Android

skills/design/mobile-android

Jetpack Compose, Kotlin Android SDK, ADB automation, and Gradle build tuning.

Name Tagline Harnesses Languages/Platforms Tools
Android Compose Patterns Jetpack Compose, ADB automation, and Gradle tuning. [opencode] [universal] kotlin, android —

Mobile — iOS & iPadOS

skills/design/mobile-ios

SwiftUI, UIKit, Xcode build pipelines, XCUITest, and TestFlight workflows.

Name Tagline Harnesses Languages/Platforms Tools
iOS SwiftUI Pipelines Skill SwiftUI, networking layers, and Xcode/TestFlight workflows. [opencode] [universal] swift, ios —

Mobile — Cross-Platform

skills/design/mobile-cross-platform

React Native, Expo, and Flutter mobile patterns.

Name Tagline Harnesses Languages/Platforms Tools
Flutter Cross-Platform Mobile Skill Flutter widgets, state management, and store releases. [opencode] [universal] dart, android, ios —

2.3 CyberSecurity & Assurance

skills/cybersecurity

Reverse Engineering

skills/cybersecurity/reverse-engineering

Ghidra, IDA Pro, Binary Ninja, radare2/rizin, firmware unpacking, and protocol decompilation.

Name Tagline Harnesses Languages/Platforms Tools
Ghidra RE Workflows Ghidra, rizin, and firmware unpacking workflows. [opencode] [claude-code] [universal] — —

Malware Analysis & Triage

skills/cybersecurity/malware-analysis

Static/dynamic binary triage, YARA rule authoring, deobfuscation, and sandbox detonation analysis.

Name Tagline Harnesses Languages/Platforms Tools
Malware Triage Playbook Static/dynamic triage, YARA, and sandbox detonation. [opencode] [universal] — —

Security Auditing & Code Review

skills/cybersecurity/security-auditing

SAST/DAST triage, threat modeling, smart contract auditing, and differential vulnerability discovery.

Name Tagline Harnesses Languages/Platforms Tools
Secure Code Audit Skill SAST/DAST triage, threat modeling, and audit checklists. [opencode] [claude-code] [universal] — —

Web, API & Network Pentesting

skills/cybersecurity/web-network-pentesting

Authorized offensive testing, Burp Suite workflows, SSRF/IDOR auditing, and protocol fuzzing.

Name Tagline Harnesses Languages/Platforms Tools
Web & API Pentesting Skill Authorized web/API testing: SSRF, IDOR, and Burp workflows. [opencode] [universal] — —

Cloud Security, Supply Chain & Hardening

skills/cybersecurity/cloud-devsecops

IAM least-privilege, container hardening, SBOM/cosign verification, and secret scanning.

Name Tagline Harnesses Languages/Platforms Tools
Cloud & Supply-Chain Hardening Skill IAM least-privilege, cosign verification, and secret scanning. [opencode] [universal] — —

DFIR & Threat Intelligence

skills/cybersecurity/dfir-threat-intel

Log forensics, incident response playbooks, OSINT, and detection engineering.

Name Tagline Harnesses Languages/Platforms Tools
DFIR & Incident Playbooks Skill Log forensics, IR playbooks, and detection engineering. [opencode] [universal] — —

2.4 DevOps, Cloud & Infrastructure

skills/devops-cloud

Docker, Kubernetes & Service Mesh

skills/devops-cloud/containers-k8s

Container builds, Helm, Kubernetes operators, and cluster debugging.

Name Tagline Harnesses Languages/Platforms Tools
Kubernetes Debugging Skill Cluster debugging, Helm releases, and operator patterns. [opencode] [universal] linux —

Terraform, OpenTofu & Cloud IaC

skills/devops-cloud/iac-terraform

AWS, GCP, Azure, Cloudflare Workers, and declarative infrastructure modules.

Name Tagline Harnesses Languages/Platforms Tools
Terraform IaC Modules Skill Terraform/OpenTofu modules for AWS, GCP, and Azure. [opencode] [universal] — —

CI/CD Pipelines & Observability

skills/devops-cloud/ci-cd-observability

GitHub Actions, GitLab CI, OpenTelemetry, Prometheus, and incident runbooks.

Name Tagline Harnesses Languages/Platforms Tools
CI/CD & Observability Skill GitHub Actions pipelines, OpenTelemetry, and incident runbooks. [opencode] [universal] — —

2.5 AI Engineering, RAG & Data Science

skills/data-ai

Agent Architecture & Orchestration

skills/data-ai/agent-orchestration

Subagent planning, context compaction, evaluation harnesses, and MCP authoring.

Name Tagline Harnesses Languages/Platforms Tools
Agent Orchestration Patterns Skill Subagent planning, compaction, evals, and MCP authoring. [opencode] [claude-code] [codex] [universal] — —

RAG, Vector Search & Knowledge Graphs

skills/data-ai/rag-memory

Hybrid retrieval, chunking, embeddings, and persistent agent memory.

Name Tagline Harnesses Languages/Platforms Tools
RAG & Vector Search Playbook Skill Hybrid retrieval, chunking, embeddings, and agent memory. [opencode] [universal] python —

ML Training, Fine-Tuning & Science

skills/data-ai/ml-scientific

LoRA/TRL fine-tuning, benchmark evaluation, bioinformatics, and geospatial analysis.

Name Tagline Harnesses Languages/Platforms Tools
ML Fine-Tuning & Evals Skill LoRA fine-tuning, benchmark evals, and scientific ML. [opencode] [universal] python —

2.6 Testing, QA & Verification

skills/testing-qa

Browser & E2E Automation

skills/testing-qa/browser-e2e

Playwright, Cypress, Selenium, and visual regression verification.

Name Tagline Harnesses Languages/Platforms Tools
Playwright E2E Patterns Skill Browser automation, fixtures, and visual regression checks. [opencode] [claude-code] [universal] typescript —

Unit, Integration & Property Testing

skills/testing-qa/unit-property

Test generation, mutation testing, fuzzing, and deterministic fixtures.

Name Tagline Harnesses Languages/Platforms Tools
Property & Fuzz Testing Skill Property tests, mutation testing, and deterministic fixtures. [opencode] [universal] rust —

3. MCP Tools & Servers

mcp-servers

Model Context Protocol servers with introspected tool names for fine-grained per-agent scoping.

Filesystem, Terminal & OS Automation

mcp-servers/filesystem-shell

Local file operations, sandboxed command execution, and desktop automation.

Name Tagline Harnesses Languages/Platforms Tools
Filesystem & Shell MCP Server Sandboxed file operations and command execution over MCP. [opencode] [claude-code] [codex] — 3 tools

Git, GitHub & Code Intelligence

mcp-servers/git-repos

Repository management, PR workflows, AST search, and LSP bridges.

Name Tagline Harnesses Languages/Platforms Tools
GitHub Code Intelligence MCP Server Repo, PR, and issue workflows over MCP with real tool names. [opencode] [claude-code] — 4 tools

Databases & Data Warehouses

mcp-servers/databases

PostgreSQL, SQLite, ClickHouse, Supabase, Neon, and Redis MCP connectors.

Name Tagline Harnesses Languages/Platforms Tools
Postgres MCP Connector Read-only Postgres MCP server with audited tools. [opencode] [claude-code] — 3 tools

Browser Automation, Search & Scraping

mcp-servers/browser-web

Playwright, Chrome CDP, Firecrawl, Crawlbase, and SerpApi MCP servers.

Name Tagline Harnesses Languages/Platforms Tools
Firecrawl Scrape MCP Server Search, scrape, and crawl the web from agents via MCP. [opencode] [claude-code] — 3 tools

Security, Reverse Engineering & Analysis

mcp-servers/security-re

Ghidra MCP, binary analysis, vulnerability scanners, and log auditing servers.

Name Tagline Harnesses Languages/Platforms Tools
Ghidra RE MCP Server Binary analysis via Ghidra: functions, strings, decompilation. [opencode] [claude-code] — 3 tools

Design, Figma & UI Tooling

mcp-servers/design-ui

Figma, Stitch, Storybook, and screenshot diffing MCP servers.

Name Tagline Harnesses Languages/Platforms Tools
Figma Design MCP Server Design context, components, and screenshots from Figma. [opencode] [claude-code] — 3 tools

Cloud, Containers & Observability

mcp-servers/cloud-devops

Cloudflare, Kubernetes, Docker, Sentry, and Datadog MCP servers.

Name Tagline Harnesses Languages/Platforms Tools
Kubernetes Observability MCP Server Cluster inspection: pods, deployments, and logs over MCP. [opencode] [claude-code] — 3 tools

Knowledge Bases, Docs & Comms

mcp-servers/knowledge-productivity

Obsidian, Notion, NotebookLM, Slack, and Google Workspace MCP servers.

Name Tagline Harnesses Languages/Platforms Tools
Notion Knowledge MCP Server Docs and knowledge-base search over MCP. [opencode] [claude-code] — 3 tools

4. DESIGN.md Systems

design-md

Drop-in DESIGN.md brand and UI system specs (inspired by Google Stitch & VoltAgent/awesome-design-md).

AI Platforms & Developer Tools

design-md/ai-dev-tools

Terminal-first, dark-mode, and high-contrast engineering design systems.

Name Tagline Harnesses Languages/Platforms Tools
Terminal Dev Design System Terminal-first dark-mode DESIGN.md for dev tools. [universal] — —

SaaS, Dashboards & Productivity

design-md/saas-productivity

Clean editorial workspaces, data-dense analytics, and collaborative UI systems.

Name Tagline Harnesses Languages/Platforms Tools
SaaS Dashboard DESIGN.md Clean editorial dashboards and analytics workspace specs. [universal] — —

Fintech, Media & Consumer Brands

design-md/fintech-consumer

High-trust financial interfaces, editorial media, and consumer web aesthetics.

Name Tagline Harnesses Languages/Platforms Tools
Fintech Editorial DESIGN.md High-trust financial interfaces and editorial media specs. [universal] — —

5. System Prompts & Personas

prompts

Curated system prompts, meta-prompts, and reasoning workflows.

Software Architecture & Code Review Prompts

prompts/coding-architecture

System prompts for refactoring, architecture critique, and spec authoring.

Name Tagline Harnesses Languages/Platforms Tools
Architecture Review Prompt Refactoring, architecture critique, and spec authoring prompts. [universal] [opencode] [claude-code] — —

Security & Adversarial Audit Prompts

prompts/security-research

Red-team, threat-modeling, and multi-subagent code audit prompts.

Name Tagline Harnesses Languages/Platforms Tools
Adversarial Audit Prompt Red-team multi-subagent code audit prompt. [opencode] [claude-code] [universal] — —

Product, UI/UX & Technical Writing Prompts

prompts/product-design

Design critique, documentation, and specification interview prompts.

Name Tagline Harnesses Languages/Platforms Tools
Design Critique Prompt Design critique, documentation, and spec-interview prompts. [universal] — —

6. Complete Agent Presets & Multi-Agent Teams

agents

Ready-to-run scoped agent configurations combining a prompt, allowed skills, and scoped MCP tools.

Language & Stack Specialist Agents

agents/coding-specialists

Pre-scoped Rust, C++, Python, and Full-Stack subagents.

Name Tagline Harnesses Languages/Platforms Tools
Full-Stack Polyglot Agent Pre-scoped Python/TS/Go coding specialist with GitHub MCP. [opencode] — —

Security, RE & Malware Triage Agents

agents/security-auditors

Least-privilege security auditing and reverse-engineering agents.

Name Tagline Harnesses Languages/Platforms Tools
DB Security Auditor Agent Least-privilege database security auditor agent. [opencode] — —

UI/UX & Cross-Platform Design Agents

agents/design-frontend

Frontend, desktop, and mobile UI builder agents paired with DESIGN.md specs.

Name Tagline Harnesses Languages/Platforms Tools
Frontend Design Agent UI builder agent pairing WebUI skills with Figma MCP. [opencode] — —

DevOps, Database & Research Agents

agents/devops-data

Read-only database auditors, SRE responders, and deep-research teams.

Name Tagline Harnesses Languages/Platforms Tools
SRE Database Responder Agent Read-only K8s and Postgres responder with SQL audit skills. [opencode] — —

Per-Agent Skill & MCP Scoping

Every agent compiled by the Agent Builder WebUI and CLI follows deny-first context hygiene: permissions start by denying everything (deny "*" first), then explicitly allow only the skills and MCP tools that agent needs. OpenCode evaluates permission rules in order and the last matching rule wins, so the deny-all rule must come first.

{
  "agents": {
    "my-agent": {
      "permissions": [
        { "action": "skill", "resource": "*", "effect": "deny" },
        { "action": "skill", "resource": "rust-secure-coding", "effect": "allow" },
        { "action": "postgres-prod_*", "resource": "*", "effect": "deny" },
        { "action": "postgres-prod_execute_query", "resource": "*", "effect": "allow" }
      ]
    }
  }
}

MCP tool names are normalized as <serverName>_<toolName> preserving hyphens and underscores (matching upstream OpenCode/Claude Code mcp__plugin_my-plugin_database-tools__query style); every other run of non-alphanumeric characters becomes _ (e.g. server postgres-prod + tool execute_query → postgres-prod_execute_query).

Contributing

  1. Scaffold a new entry:
    node scripts/new-entry.js --id my-skill --name "My Skill" --kind skill --category skills/coding/rust --repo https://github.com/org/repo --tagline "Short summary"
  2. Validate, export, and regenerate docs:
    npm run validate
    npm run export
    npm run generate
  3. Normalize YAML formatting with npm run fmt and open a pull request.

This README is generated from data/taxonomy.json + data/**/*.yaml — do not edit by hand; run npm run generate.

Releases

Packages

Used by

Contributors

Languages