Updated 1d ago
by wellwelwel
lagune
🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).
174 GitHub stars (174)
+2 in 30 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | +2 |
| Oct 3 | −1 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | −1 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | +1 |
| Oct 15 | 0 |
| Oct 16 | 0 |
| Oct 17 | 0 |
| Oct 18 | 0 |
| Oct 19 | 0 |
| Oct 20 | 0 |
| Oct 21 | 0 |
| Oct 22 | 0 |
| Oct 23 | 0 |
| Oct 24 | 0 |
| Oct 25 | 0 |
| Oct 26 | 0 |
| Oct 27 | 0 |
| Oct 28 | 0 |
| Oct 29 | 0 |
| Oct 30 | +1 |
| Oct 31 | 0 |
| Nov 1 | 0 |
| Nov 2 | 0 |
| Nov 3 | 0 |
| Nov 4 | 0 |
| Nov 5 | 0 |
- 22 skills (22 skills found in its SKILL.md files)
- 6 forks (6 forks)
- 1d ago last update (Last updated 1d ago)
Install
Skills CLI
npx skills add wellwelwel/lagune
Asks which skills and agents to install. Just one: npx skills add wellwelwel/lagune --skill lagune-charter — add -g for every project.
Claude Code
git clone https://github.com/wellwelwel/lagunecp -r "lagune/skills/lagune-charter" ~/.claude/skills/
Copies the lagune-charter skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add wellwelwel/lagune
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
lagune-charter
Establish or update the project's security charter, the safe-by-default principles every later phase must respect. Reads the project's files to learn what it is and uses, weighs any description you give against them, and asks when something is unclear.
skills/lagune-charter/ on GitHub (opens in a new tab)SKILL.md -
lagune-detect
Detect what the system actually does by reading the code, and map the security-relevant findings (login, uploads, payments, data exposure, and so on) with the evidence later phases need. Scans the whole project, named files, or a focused scope.
skills/lagune-detect/ on GitHub (opens in a new tab)SKILL.md -
lagune-harden
Apply the defense plan's fixes to the code, safely and one at a time, then record what was applied and what is left. Reads the plan and the charter, then hardens every fix, the fixes, files, or directories you name, or a priority you choose.
skills/lagune-harden/ on GitHub (opens in a new tab)SKILL.md -
lagune-plan
Turn what detect found into the defense plan, one fix per finding, each rated by CVSS v4.0 (category, CVSS, priority) and tied to a charter principle. Reads the detect map and the charter, then plans every finding, named paths, or a concern you describe.
skills/lagune-plan/ on GitHub (opens in a new tab)SKILL.md -
lagune-prove
Prove detected findings with runnable, defense-only evidence. For each finding the detect map carries, it writes a safe-path JavaScript test and a self-contained advisory under `.lagune/proofs/`. The test asserts secure behavior, never an exploit.
skills/lagune-prove/ on GitHub (opens in a new tab)SKILL.md -
lagune-repair
Repair Lagune's internal tracking so each item stays whole when files are renamed or moved, and check every memory artifact against its template. A maintenance pass, not a security phase, rewriting the tracking map across all phases in one pass.
skills/lagune-repair/ on GitHub (opens in a new tab)SKILL.md -
lagune-specialize
Specialize Lagune from a source or topic you give it, distilling it into a new on-demand specialization the detect and verify phases load later. It writes a focused, language-agnostic, defense-only knowledge module, never an exploit.
skills/lagune-specialize/ on GitHub (opens in a new tab)SKILL.md -
lagune-verify
Prove each applied control holds by confronting the hardening record with the code, writing each verdict back into that record, then standing the findings proven closed out of the chain. Read-only on your code, it writes only Lagune's own chain.
skills/lagune-verify/ on GitHub (opens in a new tab)SKILL.md -
lagune
Do the work the prompt asks for, with security guarding the build as it happens. Loads the charter, matches the security knowledge the work touches, builds safe-by-default, then checks its own result against what it used.
skills/lagune/ on GitHub (opens in a new tab)SKILL.md -
architecture
Authoritative record of Lagune's architecture decisions, covering the three owners, what ships, the engine command, the published skills and their plugins, project state, the catalog, and the tracking map. Use when a change depends on one or alters it.
.claude/skills/ on GitHub (opens in a new tab)architecture/ SKILL.md -
blind-review
Maps what a branch or the work in progress changes in behavior, before and after, from the code diff alone. Commit messages, documents, and tests stay closed, so the map shows what the code does rather than what anyone says it does. The commits are approved before anything is read.
.claude/skills/ on GitHub (opens in a new tab)blind-review/ SKILL.md -
cdp
Visual verification of a running page through Chrome's DevTools Protocol, capturing screenshots and measuring the rendered DOM. Use when a frontend change can only be confirmed once rendered, for layout, spacing, alignment, overflow, or theme tokens.
.claude/skills/ on GitHub (opens in a new tab)cdp/ SKILL.md -
dashboard
Authoritative reference for the Lagune dashboard, a live view of a project's .lagune/ chain with a locked-down local action surface. Use before changing anything under src/dashboard/ or src/types/dashboard/.
.claude/skills/ on GitHub (opens in a new tab)dashboard/ SKILL.md -
engineering
Authoritative engineering reference covering code conventions, comments, TypeScript type rules, testing, and commit messages. Use before writing or changing any source file, and when suggesting a commit message.
.claude/skills/ on GitHub (opens in a new tab)engineering/ SKILL.md -
ingest
Use before reading any .txt file, whatever its name, and whenever a task builds on GitIngest digests. Checks whether a file is a digest (a whole repository in one file) and surveys, searches, and reads it without loading it whole. Returns only the requested lines, with token estimates and anchors for a reusable synthesis.
.claude/skills/ on GitHub (opens in a new tab)ingest/ SKILL.md -
mcp-catalog
Find, review, and add MCP servers to the reviewed catalog that lagune.ai serves to Lagune Code. Use when asked to look for servers worth adding, to add a specific server, or to update or drop an entry.
.claude/skills/ on GitHub (opens in a new tab)mcp-catalog/ SKILL.md -
refine
Confronts a scope with the engineering, testing, and writer skills, each where it applies, and with the architecture a long-lived project needs, then brings it into line. It removes what should not exist, simplifies, decouples, sharpens responsibilities and names, and places files and directories where they belong. The scope is the unstaged, staged, or current work, commits, a branch, paths, a fo…
.claude/skills/ on GitHub (opens in a new tab)refine/ SKILL.md -
simulate
How to simulate a Lagune command end to end so the user sees both the process and the results in chat. Use when the user asks to simulate, demo, preview, run, or see in action any lagune command. Read this before attempting any such simulation.
.claude/skills/ on GitHub (opens in a new tab)simulate/ SKILL.md -
specialize
Author a new built-in Lagune specialization inside the Lagune source, not a project's own catalog. Use when adding or refining a security knowledge module that ships with Lagune, against the native layout (`catalog/*.md` plus the built-in index).
.claude/skills/ on GitHub (opens in a new tab)specialize/ SKILL.md -
testing
Authoritative reference for deciding whether a test should exist and what it must assert. Use before writing or changing tests, and when investigating a test failure.
.claude/skills/ on GitHub (opens in a new tab)testing/ SKILL.md -
ui
Design engineering principles for making interfaces feel polished. Use when building UI, reviewing frontend code, or working on any visual detail, from animations, hover states, shadows, borders, and typography to optical alignment and tabular numbers.
.claude/skills/ on GitHub (opens in a new tab)ui/ SKILL.md -
writer
Authoritative reference for writing the project's prose. Use before writing, editing, or translating any document, command text, comment, or user-facing message.
.claude/skills/ on GitHub (opens in a new tab)writer/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.