Menú
Repo visibility guard. Blocks repos from going public without a -private counterpart.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Complete DevOps toolkit for AI-assisted software development. Release pipeline, license compliance, copyright enforcement, repo visibility guard, identity file protection, manifest reconciler, and best practices. All core tools are agent-callable via MCP.
Private-to-public repo sync. Copies everything except ai/ to the public mirror. Creates PR, merges, syncs releases.
PreToolUse hook that enforces branch discipline, blocks destructive commands, requires repo onboarding before first write, tracks blocked-file retries, and gates PR creation against external repos. Read when: a tool call was denied by the guard, or you're about to make the first write in a new repo, or an agent is setting up a new Claude Code / OpenClaw install.
Hook that blocks destructive edits to protected identity files. For Claude Code CLI and OpenClaw.
One-command release pipeline. Bumps version, updates changelog + SKILL.md, publishes to npm + GitHub.
Repo manifest reconciler. Makes repos-manifest.json the single source of truth for repo organization.
| name | wip-repo-permissions-hook |
| description | Repo visibility guard. Blocks repos from going public without a -private counterpart. |
| license | MIT |
| interface | ["cli","module","mcp","hook","plugin"] |
| metadata | {"display-name":"Repo Visibility Guard","version":"1.0.0","homepage":"https://github.com/wipcomputer/wip-ai-devops-toolbox","author":"Parker Todd Brooks","category":"dev-tools","capabilities":["visibility-check","org-audit","public-gate"],"requires":{"bins":["node","gh"]},"openclaw":{"requires":{"bins":["node","gh"]},"install":[{"id":"node","kind":"node","package":"@wipcomputer/wip-repo-permissions-hook","bins":["wip-repo-permissions"],"label":"Install via npm"}],"emoji":"🔒"}} |
| compatibility | Requires node, gh (GitHub CLI). Node.js 18+. |
Prevents repos from being made public unless a -private counterpart exists on GitHub. Protects internal plans, todos, and development context from accidental exposure.
Every repo that goes public must have a {name}-private repo. The private repo holds ai/ folders with plans, todos, dev updates, and notes. The public repo has the same code without ai/.
Forks of external projects are exempt.
node cli.js check <org>/<repo>
node cli.js audit <org>
Add to ~/.claude/settings.json under hooks.PreToolUse with matcher "Bash".
Copy to ~/.ldm/extensions/wip-repo-permissions-hook/ and restart gateway.
Tools: repo_permissions_check, repo_permissions_audit
Add to .mcp.json:
{
"wip-repo-permissions": {
"command": "node",
"args": ["/path/to/tools/wip-repo-permissions-hook/mcp-server.mjs"]
}
}