Guardrails for your AI coding agent

One prompt installs 19 skills and 6 always-on guards into your repo. Your agent inspects before it edits and never commits a secret. Pro adds Senior Mode, Git protection, and checkpoint recovery.

$ npx slashstack@latest install --target agents

Or paste one prompt into your agent and it installs itself. No terminal needed.

Six guards that never sleep

Guards fire automatically at dangerous boundaries. You never invoke them. They are simply always on.

commit-guard

Scans every staged diff before any commit. Refuses when it finds sk- keys, AKIA AWS ids, private key blocks, staged .env files, or <<<<<<< conflict markers.

push-guard

The second gate. Catches secrets that escaped into commit history before they ever reach a remote.

install-guard

Checks new packages for typosquatting before any install.

fragile-guard

Warns before editing files your project marked hands-off.

env-guard

Flags drift between .env.local and .env.example keys.

memory-nudge

Prompts your agent to save durable project knowledge before a session ends, so the next session starts smarter.

19 skills, one prompt away

Each skill is a structured workflow your agent follows instead of improvising. Eleven are free forever; Pro adds the rest plus Senior Mode, Git protection, and checkpoint recovery.

Free

11 skills
/preflightInspects project state and constraints before editing code.
/vibeShapes a rough product idea before you build.
/auditReviews changes for bugs, regressions, and missing tests.
/shipVerifies behavior with concrete evidence before handoff.
/executePlans multi-step tasks across files, tests, and checks.
/securityChecks for visible risks before deploy or sharing.
/rememberSaves durable facts that future sessions need.
/recallLoads saved reference material before working.
/improveCaptures reusable patterns from each session.
/explainTranslates technical output into plain language.
/nextSuggests safe prompt options when you are unsure.

Pro

+8 skills and all 6 guards
/spawnSplits large tasks into sub-goals that run in parallel.
/costFlags paid services in your codebase that create billing risk.
/newCreates custom slash commands owned by your project.
/forgetRemoves stale or wrong memory entries.
/syncDetects dependency drift from the latest releases.
/mobileChecks responsive readiness before shipping UI changes.
/healthSurfaces production errors through your cloud CLI.
/seniorAdopts a lazy-senior posture: smallest surface, stdlib/native first, smallest runnable check.

Modo Aprendiz: no more "chino mandarín"

Agent output is dense. If you are learning to build with AI, half of it reads like a foreign language.

With Modo Aprendiz, every risk SlashStack flags comes with a plain-Spanish explanation: what it means, why it matters, and what to do right now. Write to your agent in Spanish and it answers in Spanish.

RIESGO MEDIOarchivo .env sin .gitignore

Qué significa

Tu archivo de claves secretas no está en la lista de archivos que git debe ignorar.

Por qué importa

Si lo subes por accidente, cualquiera con acceso al repo puede usar tus claves y generar cargos en tu tarjeta.

Qué hacer ahora

Pídele al agente: "agrega .env al .gitignore y verifica que no esté en el historial".

Senior Mode (Pro): the lazy-senior posture

Senior engineers don't over-build. They confirm the smallest surface, prefer stdlib and native over new dependencies, and verify with the smallest runnable check before stopping. The /senior skill wires that posture into preflight, implementation, audit, and ship.

Git protection

via slashstack protect

Installs owned pre-commit and pre-push hooks that scan staged content and outgoing history for secrets (sk-, AKIA, private keys, conflict markers, .env paths). User hooks are preserved; the runner exits non-zero when it finds a violation, blocking the commit or push.

Checkpoint recovery

via slashstack checkpoint

Snapshot the working tree before risky edits with slashstack checkpoint create --label .... List them with checkpoint list. Roll back on a new branch with recover <id>. The original branch stays untouched so you can compare.

What early testers said

Real feedback from the first validation round, in their own words.

“Me dio totalmente más control sobre lo que hace el agente. Ya lo estoy usando en otro proyecto.”

Rigoberto García

Early tester, builds with Codex

“Me ayudó a entender que me faltaba estructura. Sin duda lo volvería a usar.”

Ramiro Rodríguez

Early tester, learning to build with AI

Pay once. Own it forever.

No subscription. No SaaS. Your license validates offline on your machine.

Free

$0

MIT licensed, free forever

  • 11 core skills
  • Agent kernel (AGENTS.md)
  • Project memory
  • Open source on GitHub
Start free

Pro

$39$49one-time

Founder price for the first 20 licenses

  • All 19 skills
  • All 6 always-on guards
  • Senior Mode planning
  • Git protection (owned hooks)
  • Checkpoint recovery
  • Lifetime updates
  • Offline license key, zero phone-home
Get Pro for $39

Questions, answered

Which agents does it work with?

Any agent that reads AGENTS.md or skill files in your repo: Claude Code, Codex, Cursor, and compatible tools. SlashStack installs plain markdown into .agents/, so there is no runtime dependency.

Does it send my code anywhere?

No. Everything is local files in your repo. The Pro license key validates offline with an Ed25519 signature. Zero network calls, zero telemetry, zero phone-home.

What exactly do I get with Pro?

All 19 skills (including the Pro-only /spawn, /cost, /new, /forget, /sync, /mobile, /health, and the /senior planning skill), all 6 guards, Senior Mode posture, Git protection via slashstack protect, checkpoint create / list / recover, and lifetime updates. One key, unlimited projects on your machine.

I already installed the free tier. How do I upgrade?

Run npx slashstack activate --key SSK-... --email you@example.com (or paste the activation prompt into your agent). It upgrades in place and keeps your project memory.

What if it does not work for me?

Email me within 14 days and I refund you, no questions. It is a one-time purchase, so there is nothing to cancel.

Give your agent guardrails today

Install free in two minutes, or get everything for a one-time $39.