From e6078d99c748f175d451a506323c3e4ee9099db9 Mon Sep 17 00:00:00 2001 From: The Beast Date: Sun, 19 Jul 2026 11:05:56 +0000 Subject: [PATCH] feat: add beast-dev-guard plugin --- .grok-plugin/marketplace.json | 20 +++++++++++++++ .grok-plugin/plugin-index.json | 46 ++++++++++++++++++++++++++++++++++ 2 files changed, 66 insertions(+) diff --git a/.grok-plugin/marketplace.json b/.grok-plugin/marketplace.json index 286a7a7..15db79e 100644 --- a/.grok-plugin/marketplace.json +++ b/.grok-plugin/marketplace.json @@ -159,6 +159,26 @@ "homepage": "https://github.com/stripe/ai", "keywords": ["stripe", "stripe payments", "stripe connect", "stripe mcp", "stripe billing"], "domains": ["stripe.com", "docs.stripe.com", "dashboard.stripe.com"] + }, + { + "name": "beast-dev-guard", + "description": "Verification-first agentic development from The Beast, the self-improving AGI software company. Docs-only skills and commands: verify-before-claim launch gates, primary-source preflight, evidence-labeled research, a 7-point security audit for installing third-party skills, and deterministic QA with checksums and pinned SHAs.", + "category": "development", + "source": { + "source": "url", + "url": "https://github.com/thebeastagi/beast-dev-guard.git", + "sha": "df33477dfa730a660851f3243f42d943a36486e2" + }, + "homepage": "https://github.com/thebeastagi/beast-dev-guard", + "keywords": [ + "beast", + "thebeastagi", + "beast dev guard", + "the beast agi" + ], + "domains": [ + "thebeastagi.com" + ] } ] } diff --git a/.grok-plugin/plugin-index.json b/.grok-plugin/plugin-index.json index e1fc5ad..ab0acd2 100644 --- a/.grok-plugin/plugin-index.json +++ b/.grok-plugin/plugin-index.json @@ -43,6 +43,52 @@ ] } }, + "beast-dev-guard": { + "sha": "df33477dfa730a660851f3243f42d943a36486e2", + "version": "1.0.0", + "components": { + "commands": [ + { + "name": "evidence-label", + "description": "Label every factual claim in a document or research output by evidence strength (✅ verified / ⚠️ vendor-claimed / ❓ unv…" + }, + { + "name": "preflight", + "description": "Run the primary-source preflight checklist over a claim, repo, API, or task premise before building on it — verify repo…" + }, + { + "name": "skill-audit", + "description": "Run the 7-point static security audit on a third-party skill, plugin, hook, or MCP config before installing it — RCE, e…" + }, + { + "name": "verify-claims", + "description": "Audit the completion claims in the current work (or a given summary/diff) against actual evidence, and produce the veri…" + } + ], + "skills": [ + { + "name": "deterministic-qa", + "description": "Make deliverables reproducible and tamper-evident — SHA-256 manifests for every artifact, two-run byte-determinism chec…" + }, + { + "name": "evidence-labeled-research", + "description": "Label every factual claim in research output by evidence strength — ✅ independently verified (primary source fetched),…" + }, + { + "name": "primary-source-preflight", + "description": "A 1-5 minute checklist to verify primary sources before building on any claim — repo identity, live API probes, existen…" + }, + { + "name": "safe-skill-install", + "description": "Static security audit checklist for third-party agent skills, plugins, prompts, and MCP configs BEFORE installing them.…" + }, + { + "name": "verify-before-claim", + "description": "Never claim \"done\", \"live\", \"fixed\", or \"delivered\" without end-to-end evidence. Use before announcing a launch, closin…" + } + ] + } + }, "chrome-devtools": { "sha": "77e1d3f9616d5b32671da0b9ea094f4929c14a9c", "version": "1.6.0",