Back to Home
davepoon icon

claude-code-subagents-collection

by davepoon

Overview

The repository serves as a comprehensive marketplace and registry for Claude Code, offering a wide array of specialized AI agents, commands, hooks, and a catalog of external Model Context Protocol (MCP) servers to enhance development workflows.

Installation

Run Command
docker run -i --rm mcp/302-sandbox

Environment Variables

  • GITHUB_TOKEN
  • POSTGRES_URL
  • ADMIN_API_TOKEN
  • CRON_SECRET

Security Notes

The system dynamically generates and executes shell commands/scripts for hooks based on metadata from external sources (GitHub, Docker Hub, Official MCP Registry). If `hook.name` or `scriptContent` contains malicious input from an untrusted community contribution, this could lead to remote code execution. The parsing of untrusted YAML content in `scripts/mcp-importers/registry-fetchers/docker-mcp.js` (using `parseSimpleYaml`) is also a potential risk if not robust against all malicious YAML structures. Strong reliance on environment variables for API tokens (`GITHUB_TOKEN`) and database credentials (`POSTGRES_URL`), as well as administrative access tokens (`ADMIN_API_TOKEN`, `CRON_SECRET`), necessitates careful secret management by the deployer. Given the open contribution model, the risk of a malicious hook or plugin being introduced is critical.

Similar Servers

Stats

Interest Score100
Security Score3
Cost ClassMedium
Avg Tokens2000
Stars2264
Forks242
Last Update2026-01-12

Tags

claude-codeplugin-marketplaceai-agentsdev-toolsautomationexternal-apisdocker-mcpweb-uiregistrysubagentscommandshooksskills