No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by svy04 · Codex Skill · ★ 59
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is ballast safe to install? View the security audit →
ballast 한국어 문서 → · 简体中文 → ballast is a Claude Code and Codex plugin that takes a goal you have no expertise in, builds it up from the foundations, and carries it through — then keeps every solved path so the next goal starts further along. A few weeks into working with Claude, this piles up: You give the same correction again next month A settled decision reopens, or quietly changes You act on an unsourced answer, and find out later Your copy names a feature nobody built yet "Done" turns out to mean Claude said so What you shipped stalls its first reader Another model's tidy summary lands as fact You re-research what the project already wrote down All eight have one cause: the weight sits in the conversation and nowhere else. Ships fix this by loading weight low in the hull, under everything else — that weight is called ballast. Here, it is rules, decisions, and verified facts riding in files, under the conversation. And it accumulates. A method you only found after dead ends, a fact that survived checking, a vague problem finally cut into pieces — each one stays, and the next goal starts on top of it. You do not dig the same hole twice.
| Stars | 59 |
| Forks | 9 |
| Language | JavaScript |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 62.510535635414/100 |
| Last Updated | 2026-08-23 |
| Created | 2026-08-13 |
| Platforms | claude-code, codex, node |
| Est. Tokens | ~18k |
These tools work well together with ballast for enhanced workflows:
Looking for a ballast alternative? If you're comparing ballast with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Opinionated AI coding agent and dev environment automation for macOS
🏛 [UNDER CONSTRUCTION] A (roman) claude plugin marketplace
Production-ready AI agent profiles for Claude Code, Cursor, Codex, OpenClaw, and Hermes. Search, install, and
An AI agent that applies to jobs for you - searches boards, tailors your resume, fills applications, messages
DeepContext is an MCP server that adds symbol-aware semantic search to Claude Code, Codex CLI, and other agent
Multi-agent orchestration system for Claude Code with parallel execution, automated quality gates, Board of Di
Explore other popular codex skill tools:
ballast is Builds up to a goal in a field you have no expertise in: splits it into the foundations that goal actually needs, mobilizes what you already hold, learns what is missing, and leaves every solved path . It is categorized as a Codex Skill with 59 GitHub stars.
ballast is primarily written in JavaScript. It covers topics such as claude, claude-code, claude-code-plugin.
You can find installation instructions and usage details in the ballast GitHub repository at github.com/svy04/ballast. The project has 59 stars and 9 forks, indicating an active community.
ballast is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to ballast on Agent Skills Hub include hal-9000, claude-emporium, forgecat-agent-profiles. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: