HelpSAFE
A single hub to find Claude Skills, Agents, Commands, Hooks, Plugins, and Marketplace collections to extend Claude Code, Claude Desktop, Agent SDK and OpenClaw
Overview
A single hub to find Claude Skills, Agents, Commands, Hooks, Plugins, and Marketplace collections to extend Claude Code, Claude Desktop, Agent SDK and OpenClaw
80a0afd96301OBSERVED · 2026-10-07What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: help description: > One-screen quick reference for the Origin plugin. Lists the daily verbs, the daily flow, where data lives, and how to view it without a GUI. Use when the user says "help", "what can I do", "list origin commands", "how do I use origin", or invokes `/help`. allowed-tools: [] --- # /help Print the Origin plugin reference card. Read-only — never calls a tool. ## How to invoke When triggered, output the block below verbatim. No editing, no abbreviating, no embellishing. The user is asking for the menu. ``` Origin plugin — daily verbs /init set up Origin (auto-installs daemon + local memory) /brief load identity + topic context (start of session) /capture <x> save one durable memory in flow /recall <q> search local memory /distill [t] synthesize pages from clusters (scoped to current repo) /read <p> preview a distilled page inline /review <surface> deep audit (surface = captures|revisions); /brief handles daily /forget <id> delete a memory by ID /handoff end-of-session ritual (session log + captures) /debrief alias for /handoff (brief/debrief symmetry) /help this card Daily flow (~1 min overhead per session): 1. start session → hook auto-checks daemon, silent if up 2. /brief → ~5 s, load context 3. work normally → Claude proactively /captures durable facts 4. /recall X → as needed for lookups 5. /handoff → ~30 s, narrative session log + captures Where your data lives (everything under ~/.origin/): ~/.origin/pages/ wiki pages distilled from your memories (md) ~/.origin/sessions/ session logs by date (md) ~/.origin/sessions/_status/ current per-project goals + last-handoff ~/.origin/db/ memories + knowledge graph (symlink to libSQL) ~/.origin/bin/ installed binaries View it without a GUI: open ~/.origin/ browse in Finder code ~/.origin/ open in VS Code git -C ~/.origin log --oneline timeline of every memory + distill pass ln -s ~/.origin/pages ~/Vault/origin # symlink into Obsidian for graph view ~/.origin/ is a git repo. Skills auto-commit per logical batch (one per session, distill pass, or forget). Use git log / git diff / git revert as a free audit trail. No remote — purely local history. Three classes of artifact: - memories: granular, queryable, live in DB only (confirmed = stays in DB) - pages: synthesized wikis, DB + ~/.origin/pages/*.md projection - sessions: chronological narrative, ~/.origin/sessions/*.md only Daemon must run at 127.0.0.1:7878. Hook prints "/origin:init" if down. Optional upgrades for richer distill cycles: origin model install local Qwen, no API cost origin key set anthropic Anthropic API, higher quality ``` ## When to use - User explicitly types `/help`. - User asks "what can I do with origin", "list origin commands", "how does this plugin work", "remind me what verbs are available". - First session after install — print this once on `/init` success too. ## When NOT to use - Specific factual lookup → use `/recall`. - Setup troubleshooting → use `/init` (it diagnoses + auto-installs).
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
80a0afd96301full audit observations/trust-audit/skill/davepoon__help.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 80a0afd96301 | SAFE | B | 89 | first audit |
Questions
What does the Help skill do?
A single hub to find Claude Skills, Agents, Commands, Hooks, Plugins, and Marketplace collections to extend Claude Code, Claude Desktop, Agent SDK and OpenClaw
Is Help safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Help access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (80a0afd96301), read on 2026-10-07. The repository is watched, and a new audit runs when it changes — this is the first audit.