cc-devkit
Verified Safeby jarrett-au
Overview
Configuration synchronization tool for Vibe IDEs (Claude Code), allowing users to sync commands, skills, and MCP configurations from a Git repository or local folder into their development environment.
Installation
npx cc-devkit --init claudeEnvironment Variables
- CC_DEVKIT_SCOPE
Security Notes
The tool's core function involves synchronizing configurations, including potentially executable commands defined in `mcp.json`, from external sources (local directories or remote Git repositories). The `child_process.execSync` call for `git clone` with a user-provided repository URL is a potential vector for supply chain attacks if the user points to an untrusted or malicious repository. While the tool itself does not contain explicit vulnerabilities like `eval` or obfuscation, its utility in deploying arbitrary configurations from external sources means users must exercise caution and only sync from trusted sources to prevent injecting malicious scripts or settings into their IDE.
Similar Servers
claude-code-subagents-collection
The repository serves as a comprehensive marketplace and registry for Claude Code, offering a wide array of specialized AI agents, commands, hooks, and a catalog of external Model Context Protocol (MCP) servers to enhance development workflows.
consult-llm-mcp
An MCP server that allows AI agents like Claude Code to consult stronger, more capable AI models (e.g., GPT-5.2, Gemini 3.0 Pro) for complex code analysis, debugging, and architectural advice.
mcpick
Manages MCP server configurations for Claude Code to optimize context usage and performance by enabling/disabling servers, creating backups, and using profiles.
ccmcp
A CLI tool that intelligently discovers, validates, and selects MCP (Model Context Protocol) server configurations for Claude Code, providing both a TUI and text-based interface.