Agent skill · Audited from source
claude-automation-recommender
skill · anthropics/claude-plugins-officialApache-2.0 licenceAudited 31 Oct 2026 · source 159d63a7c255
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 159d63a7c255 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Analyze a codebase and recommend Claude Code automations (hooks, subagents, skills, plugins, MCP servers). Use when user asks for automation recommendations, wants to optimize their Claude Code setup, mentions improving…
Cite
Cite this page
ModelsAtlas. “claude-automation-recommender (anthropics/claude-plugins-official)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/anthropics/claude-automation-recommender
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 159d63a7c255 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisheranthropics GitHub organizationOwner of the repository this skill is read from
- Source folderanthropics/claude-plugins-official/plugins/claude-code-setup/skills/claude-automation-recommenderThe exact folder we audited
- LicenceApache-2.0As the repository states it
- Commit pinned for this verdict159d63a7c255A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Analyze a codebase and recommend Claude Code automations (hooks, subagents, skills, plugins, MCP servers). Use when user asks for automation recommendations, wants to optimize their Claude Code setup, mentions improving…
--- name: claude-automation-recommender description: Analyze a codebase and recommend Claude Code automations (hooks, subagents, skills, plugins, MCP servers). Use when user asks for automation recommendations, wants to optimize their Claude Code setup, mentions improving Claude Code workflows, asks how to first set up Claude Code for a project, or wants to know what Claude Code features they should use. tools: Read, Glob, Grep, Bash --- # Claude Automation Recommender Analyze codebase patterns to recommend tailored Claude Code automations across all extensibility options. **This skill is read-only.** It analyzes the codebase and outputs recommendations. It does NOT create or modify any files. Users implement the recommendations themselves or ask Claude separately to help build them. ## Output Guidelines - **Recommend 1-2 of each type**: Don't overwhelm - surface the top 1-2 most valuable automations per category - **If user asks for a specific type**: Focus only on that type and provide more options (3-5 recommendations) - **Go beyond the reference lists**: The reference files contain common patterns, but use web search to find recommendations specific to the codebase's tools, frameworks, and libraries - **Tell users they can ask for more**: End by noting they can request more recommendations for any specific category ## Automation Types Overview | Type | Best For | |------|----------| | **Hooks** | Automatic actions on tool events (format on save, lint, block edits) | | **Subagents** | Specialized reviewers/analyzers that run in parallel | | **Skills** | Packaged expertise, workflows, and repeatable tasks (invoked by Claude or user via `/skill-name`) | | **Plugins** | Collections of skills that can be installed | | **MCP Servers** | External tool integrations (databases, APIs, browsers, docs) | ## Workflow ### Phase 1: Codebase Analysis Gather project context: ```bash # Detect project type and tools ls -la package.json pyproject.toml Cargo.toml go.mod pom.xml 2>/dev/null cat package.json 2>/dev/null | head -50 # Check dependencies for MCP server recommendations cat package.json 2>/dev/null | grep -E '"(react|vue|angular|next|express|fastapi|django|prisma|supabase|convex|stripe)"' # Check for existing Claude Code config ls -la .claude/ CLAUDE.md 2>/dev/null # Analyze project structure ls -la src/ app/ lib/ tests/ components/ pages/ api/ 2>/dev/null ``` **Key Indicators to Capture:** | Category | What to Look For | Informs Recommendations For | |----------|------------------|----------------------------| | Language/Framework | package.json, pyproject.toml, import patterns | Hooks, MCP servers | | Frontend stack | React, Vue, Angular, Next.js | Playwright MCP, frontend skills | | Backend stack | Express, FastAPI, Django | API documentation tools | | Database | Prisma, Supabase, Convex, raw SQL | Database / backend MCP servers | | External APIs | Stripe, OpenAI, AWS SDKs | context7 MCP for docs | | Testing | Jest, pytest, Playwright configs | Testing hooks, subagents | | CI/CD | GitHub Actions, CircleCI | GitHub MCP server | | Issue tracking | Linear, Jira references | Issue tracker MCP | | Docs patterns | OpenAPI, JSDoc, docstrings | Documentation skills | ### Phase 2: Generate Recommendations Based on analysis, generate recommendations across all categories: #### A. MCP Server Recommendations See [references/mcp-servers.md](references/mcp-servers.md) for detailed patterns. | Codebase Signal | Recommended MCP Server | |-----------------|------------------------| | Uses popular libraries (React, Express, etc.) | **context7** - Live documentation lookup | | Frontend with UI testing needs | **Playwright** - Browser automation/testing | | Uses Supabase | **Supabase MCP** - Direct database operations | | Uses Convex | **Convex MCP** - Live deployment introspection, run queries/mutations, manage env vars and logs | | PostgreSQL/MySQL database | **Database MCP** - Query and schema tools | | GitHub repository | **GitHub MCP** - Issues, PRs, actions | | Uses Linear for issues | **Linear MCP** - Issue management | | AWS infrastructure | **AWS MCP** - Cloud resource management | | Slack workspace | **Slack MCP** - Team notifications | | Memory/context persistence | **Memory MCP** - Cross-session memory | | Sentry error tracking | **Sentry MCP** - Error investigation | | Docker containers | **Docker MCP** - Container management | #### B. Skills Recommendations See [references/skills-reference.md](references/skills-reference.md) for details. Create skills in `.claude/skills/<name>/SKILL.md`. Some are also available via plugins: | Codebase Signal | Skill | Plugin | |-----------------|-------|--------| | Building plugins | skill-development | plugin-dev | | Git commits | commit | commit-commands | | React/Vue/Angular | frontend-design | frontend-design | | Automation rules | writing-rules | hookify | | Feature planning | feature-dev | feature-dev | **Custom skills to create** (with templates, scripts, examples): | Codebase Signal | Skill to Create | Invocation | |-----------------|-----------------|------------| | API routes | **api-doc** (with OpenAPI template) | Both | | Database project | **create-migration** (with validation script) | User-only | | Test suite | **gen-test** (with example tests) | User-only | | Component library | **new-component** (with templates) | User-only | | PR workflow | **pr-check** (with checklist) | User-only | | Releases | **release-notes** (with git context) | User-only | | Code style | **project-conventions** | Claude-only | | Onboarding | **setup-dev** (with prereq script) | User-only | #### C. Hooks Recommendations See [references/hooks-patterns.md](references/hooks-patterns.md) for configurations. | Codebase Signal | Recommended Hook | |-----------------|------------------| | Prettier configured | PostToolUse: auto-format on edit | | ESLint/Ruff configured | PostToolUse: auto-lint on edit | | TypeScript project | PostToolUse: type-check o
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 159d63a
git clone https://github.com/anthropics/claude-plugins-official git -C claude-plugins-official checkout 159d63a7c255
The author documents no install command, so this uses the repository directly. Our verdict covers commit 159d63a7c255 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
159d63a7c255
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/anthropics/claude-automation-recommender/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All automation skills →anthropics/claude-plugins-official
Generate and publish a project status artifact — an opinionated, tabbed status page for a project too big for one update (overview & success criteria, the workstream sequence, next steps, plus background, plan, risks &…
anthropics/claude-plugins-official
Generate a personal Claude Code usage & impact report ("receipts") from this machine's local session transcripts — for justifying Claude Code usage/spend to a manager, self-review, or "what have I been using this for"…
anthropics/claude-plugins-official
Creates interactive HTML playgrounds — self-contained single-file explorers that let users configure something visually through controls, see a live preview, and copy out a prompt. Use when the user asks to make a…
anthropics/claude-plugins-official
Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Scans for all CLAUDE.md files, evaluates quality against templates, outputs quality report,…
anthropics/claude-plugins-official
This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent",…
anthropics/claude-plugins-official
This skill should be used when the user asks to "create a slash command", "add a command", "write a custom command", "define command arguments", "use command frontmatter", "organize commands", "create command with file…
Add this badge to your README
[](https://modelsatlas.com/skills/anthropics/claude-automation-recommender/)
<a href="https://modelsatlas.com/skills/anthropics/claude-automation-recommender/"><img src="https://modelsatlas.com/skills/anthropics/claude-automation-recommender/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about claude-automation-recommender
What does the claude-automation-recommender skill do?
Is claude-automation-recommender safe to install?
What can claude-automation-recommender access on my machine?
Which assistants does claude-automation-recommender work with?
How current is this page?
Sources
- github.com/anthropics/claude-plugins-official/tree/main/plugins/ — the audited source at commit 159d63a7c255 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the claude-automation-recommender skill do?
- Is claude-automation-recommender safe to install?
- What can claude-automation-recommender access on my machine?