Skip to content
Back to skills

Extensions

ASecurity

Report which extensions the connected NeatContext context expects, and whether this machine provides them. Use when the user asks what a context can reach, why an extension tool is missing, or how to connect one here.

  • 13 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added August 31, 2026
ai-agentsgonode

Works with

  • cli

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned August 31, 2026

npx -y skills add XTSoftwareLabs/neatcontext-plugins --skill extensions --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Extensions?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Extensions
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/xtsoftwarelabs-extensions/badge)](https://www.skillsdirectory.com/skills/xtsoftwarelabs-extensions)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: extensions
description: Report which extensions the connected NeatContext context expects, and whether this machine provides them. Use when the user asks what a context can reach, why an extension tool is missing, or how to connect one here.
---

# Context extensions

Resolve `<plugin-root>` as two directories above the directory containing this file. Run:

```text
node "<plugin-root>/src/codex/neatcontext-cli.mjs" extensions
```

Relay the report. Two separate things are being reported, and the difference matters:

- What the **context** expects — the extension it declares and the capability that provides. This travels with the context and is the same on every machine it reaches.
- What **this machine** provides for it. That is local, hand-written, and lives in the bindings file the report names. Nothing configures it automatically, and nothing inside a shared context can configure it.

If something is reported as not configured, show the example binding from the report and say where the file goes. Tell the user to keep credentials in the environment and name them under `envFrom` rather than writing them into the file.

If an extension is reported as unavailable or failed, relay the reason exactly as given — a command that is not there, a server that did not answer — and do not guess at a fix beyond what the report says.

Say plainly that the context still works: its profile and knowledge folder are served whether or not any extension is configured.

To record that this context expects something new:

```text
node "<plugin-root>/src/codex/neatcontext-cli.mjs" extensions add <id> --capability "<what it lets this context do>"
```

Add `--tools a,b` to narrow it to specific tools, and `--important` when the context leans on it. That records what the context wants; it connects nothing on its own. `extensions remove <id>` drops the declaration and leaves any local binding alone, and `extensions test <id>` starts one on purpose and names the tools it really offers.

Files in this skill

  • SKILL.md2 KB
  • agents/openai.yaml292 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.