# grimoire Security research toolkit for discovering and remediating vulnerabilities - **Kind:** plugin (installs as one bundle) - **Owner:** JoranHonig - **Source:** https://github.com/JoranHonig/grimoire - **Pinned commit:** `98ea48120d9f65f91cb2d74a83703e4d33d152f8` - **Page:** https://forefy.com/plugins/4e40dd70-ff16-5961-84be-e502d80581b2 - **API (JSON):** https://forefy.com/api/asr/plugins/4e40dd70-ff16-5961-84be-e502d80581b2 ## Install Ask your agent: `Install the grimoire plugin securely from: https://forefy.com/plugins/4e40dd70-ff16-5961-84be-e502d80581b2 globally to ~/.claude/skills` Or run the pinned install script: `curl -fsSL https://forefy.com/api/asr/plugins/4e40dd70-ff16-5961-84be-e502d80581b2/install | bash` (`?location=project` for the current project, `&shell=powershell` with `irm ... | iex`; `harness=agents` prints the Codex commands). ## Skills in this plugin (19) - [write-poc](https://forefy.com/skills/373e147d-3e47-47a4-af42-260c109ad0b2): This skill should be used when the user asks to "write a proof of concept", "create a PoC", "demonstrate a vulnerability", "write an exploit PoC", "show this b… - [annotation](https://forefy.com/skills/111959b1-4801-4f26-9d57-358aca72b8d9): This skill should be used when the user says "find annotations", "list audit tags", "show @audit comments", "compile annotations", "/annotation", "find todos",… - [hunt-summary](https://forefy.com/skills/f3b1de02-c4ca-408e-a0de-ad17c224e9d0): This skill should be used when the user says "hunt-summary", "/hunt-summary", "summarize the hunt", "summarize this session", "session summary", "hunt summary"… - [librarian-clean-cache](https://forefy.com/skills/8ca39b65-e8a9-4726-a951-47a866fab090): Use this skill when the user says "clean librarian cache", "clear librarian cache", "clean up librarian repos", "prune librarian cache", "shrink librarian cach… - [scribe-utilities](https://forefy.com/skills/4845d19a-5738-4ab4-83eb-77613c49cb78): This skill should be used when the user says "list my sigils", "what detectors do I have", "show my spellbook", "scribe info", "/scribe-utilities", "what's in… - [cartography](https://forefy.com/skills/c302b06d-f1dc-472c-8bb1-053a50c29acb): This skill should be used when the user says "build context on a flow", "trace a flow", "map how X works", "cartography", "/cartography", "document a flow", "c… - [finding-review](https://forefy.com/skills/fe7249df-8e6e-429d-959d-e8fc66d56256): This skill should be used when the user says "review finding", "review my finding", "check my finding", "fact check finding", "improve finding", "/finding-revi… - [librarian-index](https://forefy.com/skills/c5de9504-40be-4f7c-8268-56c7fb4a97a8): Use this skill when the user says "index the library", "index my libraries", "build the search index", "index the librarian", "rebuild the index", "update the… - [scribe-gc](https://forefy.com/skills/1110a62d-275d-41c2-a439-9da4007ebd39): This skill should be used when the user says "clean up sigils", "garbage collect", "deduplicate sigils", "scribe gc", "/scribe-gc", "merge duplicate detectors"… - [summon](https://forefy.com/skills/ddef7711-1838-4380-a0f6-f775ba58ab5e): This skill should be used when the user says "summon", "summon grimoire", "/summon", "initialize grimoire", "start an audit", "begin security review", "set up… - [checks](https://forefy.com/skills/3c92affb-94fd-42f3-bf6c-e495a9eaec24): This skill should be used when the user says "create a check", "write a check", "add a check", "apply checks", "run checks", "/checks", "vulnerability pattern"… - [finding](https://forefy.com/skills/5870b074-3e95-4274-ba92-19978d892dc2): This skill should be used when the user asks about findings, finding structure, finding format, finding best practices, "how should a finding look", "what goes… - [finding-dedup](https://forefy.com/skills/07fa3d2f-51f0-4ec9-bc2e-9a6808a9a3e2): This skill should be used when the user says "deduplicate findings", "dedup findings", "compare findings", "find duplicate findings", "merge findings", "clean… - [finding-draft](https://forefy.com/skills/3f1262f7-cf76-4b41-83ac-58931f0b1622): This skill should be used when the user says "draft a finding", "write a finding", "create a finding", "document a vulnerability", "write up this bug", "findin… - [gc-cartography](https://forefy.com/skills/3b533709-b78c-435c-b209-9880fed97f19): This skill should be used when the user says "clean up flows", "merge flows", "gc cartography", "garbage collect flows", "deduplicate flows", "consolidate cart… - [librarian-library-search](https://forefy.com/skills/e7ed294c-94c7-4bbf-9537-fb52e9aa2175): Semantic search across the librarian's indexed knowledge bases. This skill is invoked by the librarian agent when it needs to search local libraries by meaning… - [modify-library](https://forefy.com/skills/d3a4b7c4-b75a-4e30-8c28-ac431fa3d39a): Use this skill when the user wants to add, remove, or change a library in the grimoire librarian. Trigger phrases include: "add a library", "add a git library"… - [review-cartography](https://forefy.com/skills/8427e80e-1190-4da4-8729-06258d5839b1): This skill should be used when the user says "review a flow", "improve a flow", "verify a flow", "refine cartography", "check a cartography file", "verify flow… - [scribe-distill](https://forefy.com/skills/bce90bab-aa81-4bfb-bbca-a83eb2bacad7): This skill should be used when the user says "distill this finding", "create a detection module", "encode this finding", "make a sigil from this", "automate de… ## MCP servers it brings - `claudit` - `context7`