Plugin

wizard

Wizard turns any recurring task you do with AI into a reusable workflow ("a spell") that runs in one command. At its core it's a meta-builder: it interviews you about a task you already do, drafts a tested SKILL.md, and saves it to your personal library. Or point it at a chat session that worked and it'll infer the spell directly. Ships with 25 hand-crafted spells covering research, writing, decisions, planning, status updates, code review, debugging, and more — plus the meta-builder that lets you grow your own. Every generated spell is end-to-end-tested before being saved (Iron Law). MIT, no telemetry.

• Published source
• Repository

Analysed

11 October 2026

Last observed

14 October 2026

What the code does

What does this mean?

These are capabilities our static analysis found in the latest published version. They describe what the code can do, not whether it is malicious: many tools need shell access or the network to do their job. Use them to decide what to check before installing.

• Runs shell commands Code that starts system commands on the machine it runs on.
• Runs hooks automatically Hooks that execute without being called explicitly.
• Has an install script A script that runs when the package is installed.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.