claude-code-buddy
Verified Safeby PCIRCLE-AI
Overview
An intelligent AI Agent orchestration system for Claude Code, focusing on smart task routing, prompt enhancement, project memory, workflow guidance, and planning, presented via a real-time terminal UI dashboard.
Installation
node ${CLAUDE_PLUGIN_ROOT}/dist/mcp/server.jsEnvironment Variables
- ANTHROPIC_API_KEY
- NODE_ENV
- DATABASE_PATH
- DB_PATH
- CCB_MCP_CONFIG_PATH
- DB_POOL_SIZE
- DB_POOL_TIMEOUT
- DB_POOL_IDLE_TIMEOUT
- LOG_LEVEL
- BEGINNER_MODE
- EVIDENCE_MODE
Security Notes
The project demonstrates strong security awareness: extensive input validation (Zod, regex whitelists), safe use of child processes (`spawn` with array arguments, whitelisting, explicit path validation), no hardcoded credentials, and robust privacy sanitization for telemetry. Critical components like `RollbackManager` and `MCPToolInterface`'s `commandRunner` implement robust measures against command injection. `UninstallManager` also includes checks for path traversal and symlinks. Potential risks are inherent to LLM-based tools (e.g., LLM generating malicious code) or vulnerabilities in underlying dependencies.
Similar Servers
DesktopCommanderMCP
This server empowers AI agents to search, update, manage files, and execute terminal commands on a local or containerized desktop environment. It provides enhanced filesystem operations, process control, and data analysis capabilities with support for various file types like text, Excel, and PDF.
responsible-vibe-mcp
Manages conversation state and guides LLM coding agents through structured software development workflows with long-term project memory and multi-agent collaboration.
my-ai-tools
Provides a comprehensive setup and configuration management guide for an AI-powered developer environment, integrating various AI coding tools and their custom settings.
claude-command-runner
Facilitates AI-driven command execution and terminal automation by bridging Claude Desktop with local macOS terminals, primarily Warp, enabling intelligent output capture, command pipelines, real-time streaming, and reusable templates for developers.