Menu
Repo visibility guard. Blocks repos from going public without a -private counterpart.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Complete DevOps toolkit for AI-assisted software development. Release pipeline, license compliance, copyright enforcement, repo visibility guard, identity file protection, manifest reconciler, and best practices. All core tools are agent-callable via MCP.
Private-to-public repo sync. Copies everything except ai/ to the public mirror. Creates PR, merges, syncs releases.
PreToolUse hook that enforces branch discipline, blocks destructive commands, requires repo onboarding before first write, tracks blocked-file retries, and gates PR creation against external repos. Read when: a tool call was denied by the guard, or you're about to make the first write in a new repo, or an agent is setting up a new Claude Code / OpenClaw install.
Hook that blocks destructive edits to protected identity files. For Claude Code CLI and OpenClaw.
One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.
Repo manifest reconciler. Makes repos-manifest.json the single source of truth for repo organization.
| name | wip-repo-permissions-hook |
| description | Repo visibility guard. Blocks repos from going public without a -private counterpart. |
| license | MIT |
| interface | ["cli","module","mcp","hook","plugin"] |
| metadata | {"display-name":"Repo Visibility Guard","version":"1.0.0","homepage":"https://github.com/wipcomputer/wip-ai-devops-toolbox","author":"Parker Todd Brooks","category":"dev-tools","capabilities":["visibility-check","org-audit","public-gate"],"requires":{"bins":["node","gh"]},"openclaw":{"requires":{"bins":["node","gh"]},"install":[{"id":"node","kind":"node","package":"@wipcomputer/wip-repo-permissions-hook","bins":["wip-repo-permissions"],"label":"Install via npm"}],"emoji":"🔒"}} |
| compatibility | Requires node, gh (GitHub CLI). Node.js 18+. |
Prevents repos from being made public unless a -private counterpart exists on GitHub. Protects internal plans, todos, and development context from accidental exposure.
Every repo that goes public must have a {name}-private repo. The private repo holds ai/ folders with plans, todos, dev updates, and notes. The public repo has the same code without ai/.
Forks of external projects are exempt.
node cli.js check <org>/<repo>
node cli.js audit <org>
Add to ~/.claude/settings.json under hooks.PreToolUse with matcher "Bash".
Copy to ~/.ldm/extensions/wip-repo-permissions-hook/ and restart gateway.
Tools: repo_permissions_check, repo_permissions_audit
Add to .mcp.json:
{
"wip-repo-permissions": {
"command": "node",
"args": ["/path/to/tools/wip-repo-permissions-hook/mcp-server.mjs"]
}
}