No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by pliablepixels · Claude Skill · ★ 168
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is gap-trap safe to install? View the security audit →
gap-trap Turns vibe coding into high quality code. Complements SDD if you are using it (think of it as the inner loop within) The problem An agent writes most of your code. It is fast, so you stop reading every diff. Quality drifts, and you find out when something breaks. The drift looks the same in every codebase. The agent writes a helper that already exists. It crosses a layer boundary because the shortcut compiled. It writes a test that asserts the code ran, not that it did the right thing. It follows a rule in your instructions file for a week and then forgets it. Nothing stops any of this. The rules are text, and the only thing that reads them is the agent that breaks them. What gap-trap does Run it once in a repository. It reads the code, writes the rules that fit that codebase, and adds a gate for each rule. A gate is a check that fails the commit or the CI run when the rule is broken. The agent cannot skip a gate. It sets up four things: Counts o
| Stars | 168 |
| Forks | 8 |
| Language | JavaScript |
| Category | Claude Skill |
| License | MIT |
| Quality Score | 67.630958203923/100 |
| Last Updated | 2026-09-17 |
| Created | 2026-09-13 |
| Platforms | claude-code, codex, node |
| Est. Tokens | ~14k |
These tools work well together with gap-trap for enhanced workflows:
Looking for a gap-trap alternative? If you're comparing gap-trap with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
An old coder's strategy for the agent era: don't read the code — make it run the gauntlet. Evidence-first deve
Help your AI agent finish the job: solve the right problem, keep changes focused, and show what was verified.
Curated AI coding agent skills and AGENTS.md playbooks for Codex, Claude Code, Cursor, OpenClaw, and other SKI
Engineering workflow layer for AI coding tools with specs, review, quality gates, and traceability.为 AI 编程工具提供
An LLM council that reviews your coding agent's every move
Development workflows for Claude Code that keep broad exploration focused on the outcome you approved.
Explore other popular claude skill tools:
gap-trap is Turns vibe coding into high quality code. Sets up rules and gates in your repo so AI-written code stays correct without you reviewing every line.. It is categorized as a Claude Skill with 168 GitHub stars.
gap-trap is primarily written in JavaScript. It covers topics such as agent-skills, agentic-coding, agents-md.
You can find installation instructions and usage details in the gap-trap GitHub repository at github.com/pliablepixels/gap-trap. The project has 168 stars and 8 forks, indicating an active community.
gap-trap is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to gap-trap on Agent Skills Hub include old-coder, claude-code-skills, ok-skills. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: