What it can do: rugproof
Plugin bundle · omermaksutii
What rugproof declares, asks for and runs, according to the marketplaces we read. Installs into the AI tool as a plugin bundle; what it starts is listed below. Environment variables it asks for: 12, secrets among them: 5. As of our marketplace pass on 2026-10-12.
This is not a security audit. We list what the marketplaces publish about this plugin: what it declares, what it asks for and what it runs. We do not run or inspect its code, and a verified mark is the marketplace's statement, not ours.
Where it runs
- Installs into the AI tool as a plugin bundle; what it starts is listed below.
What it declares
None of the marketplaces we read publishes a list of tools for it.
Prompts and resources: the marketplaces we read do not publish them.
What it asks for
Environment variables it asks for: 12, secrets among them: 5. As declared on: Claude Code: claude-plugins-community.
ARBISCAN_API_KEYsecret requiredBASESCAN_API_KEYsecret requiredBERATRAIL_API_KEYsecret requiredECHIDNA_PATHrequiredETHERSCAN_API_KEYsecret requiredHALMOS_PATHrequiredMEDUSA_PATHrequiredMYTHRIL_PATHrequiredSLITHER_PATHrequiredTENDERLY_ACCESS_KEYsecret requiredTENDERLY_ACCOUNTrequiredTENDERLY_PROJECTrequired
Names only: we keep no values, examples or descriptions of these variables. OAuth scopes and install-time settings are not published by the marketplaces we read.
What it runs besides MCP
Skills: 45 As declared on: Claude Code: claude-plugins-community.
access-controlapproval-issuescaching-and-incrementalcentralization-riskconfidence-scoringcosmwasmcross-chain-messagingcross-contract-statedelegatecall-risksdiamond-eip2535dos-vectorserc1271-contract-signatures
Show the remaining 33
erc4337-account-abstractionerc4626-inflationfalse-positive-feedback-loopfee-on-transferflash-loan-attacksinitializationinline-assemblyinteger-issuesintents-erc7683known-good-comparisonliquidation-cascademev-frontrunningmev-pbsmulti-pass-self-critiqueoracle-manipulationoracle-redundancypermit2-patternspragma-and-addressesprogress-and-streamingreentrancyrestaking-eigenlayerselfdestruct-eip6780signature-malleabilitysignature-replaysolana-anchorstorage-layoutstylus-rusttoken-compatibilitytx-context-misuseunchecked-callsve-lock-governancevyper-specificzk-verifier-bugs
Commands: 45 As declared on: Claude Code: claude-plugins-community.
auditaudit-changesaudit-deepaudit-depsaudit-diffaudit-historyaudit-liveaudit-multi-chainaudit-strictbountybounty-submitcard
Show the remaining 33
coveragedemodiff-auditdismissexplainexploitexploit-chainexploit-livefuzzgasinvariantmint-certmonitormythrilnotify-discordnotify-slackpre-deployproverquick-scanremediatereplay-incidentreportrug-checkrugproof-initscoresimulateslithersymbolictest-gentweetupgrade-safetyverify-deployverify-finding
Agents: 23 As declared on: Claude Code: claude-plugins-community.
aa-specialistamm-specialistassembly-auditorattackerbridge-specialistcrosschain-messaging-specialistdefendereconomic-rug-specialistexploit-poc-writergas-optimizergovernance-specialistintents-specialist
Show the remaining 11
invariant-writerl2-sequencer-specialistlending-specialistnft-specialistremediation-suggesterreport-writerrestaking-specialiststaking-specialistvyper-specialistyield-aggregator-specialistzk-verifier-specialist
Hooks: 2 As declared on: Claude Code: claude-plugins-community.
PostToolUsePreToolUse
Who answers for it
omermaksutii
- No marketplace we read marks it or its publisher as verified.
- License: MIT.
- The repository github.com/omermaksutii/rugproof belongs to the account the publisher is listed under on Claude Code: claude-plugins-community.
How it has changed
Its tools, settings, hooks and composition have not changed since we started watching it.
In context
- Median number of secrets a plugin bundle asks for on the marketplaces we read: 0.0. This one asks for: 5.
- Share of plugin bundles that run on a remote server: 17%.
Where it is published and how its figures have moved
Compare it side by side with similar plugins
Data comes from the public marketplace file https://github.com/anthropics/claude-plugins-community/blob/HEAD/.claude-plugin/marketplace.json. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.