Verune

Plugin

game-of-cards

**Game of Cards (GoC)** — agile for the age of agents. GoC turns work into durable, inspectable Markdown cards that humans and AI agents collaborate on. Agents pull cards autonomously, work them under a per-card Definition of Done, and close them via a DoD-gated `finish-card` skill; humans steer by curating the queue and resolving decision gates. Lineage: XP user stories + Kanban pull + Scrum DoD. The plugin ships 14 skills (`kickoff`, `scan-deck`, `create-card`, `finish-card`, `pull-card`, `audit-deck`, `refine-deck`, `standup`, `retrospective`, …) and 3 runtime hooks that surface active cards, route work-initiating prompts, and prompt the agent to consider filing a generalization card after code-mutating turns. Self-contained — skills invoke plain `goc <verb>` and the engine ships with the plugin; no `pipx install` or host-side package step required (the plugin's bundled CLI is on PATH automatically while the plugin is enabled).

Analysed
Last observed

What the code does

  • Runs shell commands Code that starts system commands on the machine it runs on.
  • Evaluates code at runtime Code that builds and runs code while it executes.
  • Runs hooks automatically Hooks that execute without being called explicitly.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.

Risk

Sign in to see this tool's overall risk level and what drives it. Free.

Sign in to see the risk level

Coverage

Complete static analysis

How coverage is measured

Detailed report

6 findings from automated static analysis of the latest version, with severities and explanations.

Sign in to view detailed report

Using this tool across your team? We can assess your whole inventory.

Request an inventory assessment