Based on exploring the comprehensive Everything Claude Code repository — 156 skills, 72 commands, 38 agents. This guide covers how to cherry-pick tools without installing the full package.

Repository Overview​

The Everything Claude Code repository is an Anthropic Hackathon winner containing 156 reusable skills across multiple AI platforms.

Scope: 156 skills | 72 commands | 38 agents | 12+ hooks

Target platforms: Claude Code (primary), Cursor, Codex, Gemini

Claude Code-Only vs Shared Access​

Claude Code-Only Components​

These features exist in ~/.claude/ and are not accessible to other AI environments:

• ~/.claude/skills/ — workflow definitions and automation scripts
• ~/.claude/commands/ — slash command shims and integrations
• ~/.claude/agents/ — subagent configurations
• settings.json hooks — system event handlers

Shared Components (Multi-AI)​

These can be accessed by Antigravity Agent, Gemini, or other tools:

• rules/common/*.md — security and style guidelines
• mcp-configs/ — JSON Model Context Protocol server configurations

Critical Hook Dependency Issue​

A major finding: ~90% of hooks depend on ${CLAUDE_PLUGIN_ROOT}/scripts/hooks/*.js

This means:

• You cannot cherry-pick individual hooks
• To use the full hooks system, you must run install.ps1 --profile full (complete installation)
• Only simple hooks like block-no-verify work standalone

Implication: If you want selective skill cherry-picking without the full installation overhead, focus on skills and commands first.

Recommended Cherry-Pick Strategy​

For a tech stack focused on JavaScript / React / Cloudflare / PowerShell, here's what to cherry-pick:

Priority 1: Skills → ~/.claude/skills/​

Priority 2: Commands → ~/.claude/commands/​

Priority 3: Agents → ~/.claude/agents/​

Priority 4: Rules → Merge into CLAUDE.md​

• rules/common/security.md — standard security checklist for all code
• rules/common/coding-style.md — immutability and file organization patterns

Installation Command (Selective)​

# Copy skills
cp -r Research/Claudeskill/skills/security-review ~/.claude/skills/
cp -r Research/Claudeskill/skills/mcp-server-patterns ~/.claude/skills/
cp -r Research/Claudeskill/skills/api-design ~/.claude/skills/
cp -r Research/Claudeskill/skills/frontend-patterns ~/.claude/skills/
cp -r Research/Claudeskill/skills/deployment-patterns ~/.claude/skills/
cp -r Research/Claudeskill/skills/database-migrations ~/.claude/skills/
cp -r Research/Claudeskill/skills/git-workflow ~/.claude/skills/

# Copy commands
cp Research/Claudeskill/commands/code-review.md ~/.claude/commands/
cp Research/Claudeskill/commands/security-scan.md ~/.claude/commands/
cp Research/Claudeskill/commands/build-fix.md ~/.claude/commands/
cp Research/Claudeskill/commands/plan.md ~/.claude/commands/

# Copy agents
cp -r Research/Claudeskill/agents/code-reviewer ~/.claude/agents/
cp -r Research/Claudeskill/agents/security-reviewer ~/.claude/agents/

# Copy and merge rules
cp Research/Claudeskill/rules/common/security.md ~/.claude/docs/SECURITY.md
cp Research/Claudeskill/rules/common/coding-style.md ~/.claude/docs/STYLE.md

What to Skip​

Language-specific skills (if not in your stack):

• All Python, Java, Kotlin, Swift, Android skills
• Rust, PHP, Perl modules
• Language-specific build and test commands

Complex orchestration (too heavy for solo operators):

• Full hooks system (requires Node.js runtime + complete installation)
• Agent harness orchestration (intended for team workflows)

Key Learnings​

1. Hooks require full installation — cherry-pick skills instead
2. Security and API design should be top priority for pcs-platform work
3. Docusaurus patterns are essential for jaxvn-blog maintenance
4. Git workflow rules should be merged into project CLAUDE.md

Related Notes​

• [[guide-2026-04-04-cloudflare-auth-worker]] — pcs-platform Phase 2a implementation
• [[2026-04-03]] — daily notes from initial pcs-auth Worker build
• [[note-2026-04-04-everything-claude-code]] — vault original (Vietnamese)

Status: ✅ Published 2026-04-12 | Integration planned for Phase 2g

Why Browser Policy Matters​

Your browser is the #1 attack surface for most office workers. Phishing links, malicious extensions, HTTP sites that look legitimate — all of these land in the browser first.

The good news: Chrome and Edge both respect Windows Registry policies. You don't need a full MDM to lock them down. You just need the right registry keys and a way to deploy them.

How It Works​

Both Chrome and Edge read from:

HKLM\SOFTWARE\Policies\Google\Chrome\
HKLM\SOFTWARE\Policies\Microsoft\Edge\

Any value you write there overrides the browser's default behavior — and the user can't change it from the Settings UI. It's enforced silently, survives browser updates, and works identically whether the machine is on a domain or not.

15 Policies Worth Deploying​

Here's what I recommend as a baseline for any organization:

Deploying via PowerShell​

Each policy maps to a single registry value. A basic Set script looks like this:

#Requires -RunAsAdministrator

function Ensure-RegistryPath {
    param([string]$Path)
    if (-not (Test-Path $Path)) {
        New-Item -Path $Path -Force | Out-Null
    }
}

$ChromePath = "HKLM:\SOFTWARE\Policies\Google\Chrome"
$EdgePath   = "HKLM:\SOFTWARE\Policies\Microsoft\Edge"

Ensure-RegistryPath $ChromePath
Ensure-RegistryPath $EdgePath

# Enable Safe Browsing
Set-ItemProperty -Path $ChromePath -Name "SafeBrowsingEnabled" -Value 1 -Type DWord
Set-ItemProperty -Path $EdgePath   -Name "SmartScreenEnabled"  -Value 1 -Type DWord

And every Set script should have a matching Remove script that cleans up the keys:

#Requires -RunAsAdministrator

$ChromePath = "HKLM:\SOFTWARE\Policies\Google\Chrome"
$EdgePath   = "HKLM:\SOFTWARE\Policies\Microsoft\Edge"

Remove-ItemProperty -Path $ChromePath -Name "SafeBrowsingEnabled" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $EdgePath   -Name "SmartScreenEnabled"  -ErrorAction SilentlyContinue

This is the Set/Remove pattern — for every policy you deploy, you have a clean rollback path.

Deploy via Action1​

If you're using Action1 (free up to 200 endpoints — the right choice for Vietnamese SMBs), deployment is straightforward:

1. Upload the .ps1 to Action1 → Scripts
2. Create a Policy, target by OU or tag
3. Set scheduled enforcement (weekly re-run to catch new machines)

The scripts run as SYSTEM with elevation, so no UAC prompts, no user interaction.

Skip GPO If You Can​

GPO works, but it has friction: you need a DC, you need the ADMX templates imported, and workgroup machines are excluded entirely. Registry-based PowerShell scripts work everywhere — domain, workgroup, Azure AD joined, hybrid. Same behavior, zero dependencies.

The only thing GPO gives you that scripts don't is real-time enforcement on policy change. For most SMBs, a weekly re-run schedule covers that gap.

Use the Generator​

Rather than writing these scripts by hand, I built a tool that generates ready-to-deploy Set and Remove .ps1 scripts for all 15 policies above:

Browser Policy Manager → pcs.io.vn/tools/browser-policy

Select the policies you want, configure the values, and download two files: Set-BrowserPolicy.ps1 and Remove-BrowserPolicy.ps1. Upload directly to Action1.

The tool covers Chrome and Edge simultaneously — one script pair, both browsers.

What's Actually In Here​

The repo is structured around four core components:

Plus language-specific rules for TypeScript, Python, Go, Java, Kotlin, Swift, C++, Rust, Perl, PHP, and more.

Claude-Only vs Cross-Agent​

The first thing to understand: most of this is Claude Code-specific.

Claude Code only:

• ~/.claude/skills/ — only Claude Code reads these
• ~/.claude/commands/ — slash command definitions
• ~/.claude/agents/ — subagent configs
• Hooks in settings.json — lifecycle events Claude Code fires

Cross-agent (works with Gemini, Cursor, etc.):

• rules/common/*.md — security and style guidelines any AI can follow
• mcp-configs/ — MCP server JSON configs, client-agnostic
• Any rule content you paste into a shared CLAUDE.md / AGENTS.md

If you run multiple AI environments (I use Claude Code + Antigravity/Gemini), the rules folder is the most transferable investment.

The Hooks Problem​

The hooks look powerful on paper:

{
  "PreToolUse": [
    {
      "matcher": "Bash",
      "hooks": [{ "type": "command", "command": "npx block-no-verify@1.1.2" }],
      "description": "Block --no-verify on git commits"
    }
  ]
}

But 90% of them reference ${CLAUDE_PLUGIN_ROOT}/scripts/hooks/*.js — Node.js scripts that only exist inside the installed plugin. You cannot cherry-pick the hooks JSON without installing the full package.

The simpler hooks (like block-no-verify) work standalone. The rest require install.ps1 --profile full.

What I Actually Kept (Cloudflare/React Stack)​

My stack is JavaScript, React/Docusaurus, and Cloudflare Workers — not Python or Java. Out of 156 skills, about 8 are directly relevant:

Skills worth keeping:

Commands worth keeping:

Agents worth keeping:

Rules worth merging into CLAUDE.md:

• rules/common/security.md — solid baseline checklist
• rules/common/coding-style.md — immutability, file organization

What I Skipped​

• All Python, Java, Kotlin, Swift, Android, Rust, PHP, Perl skills (not my stack)
• The full hooks system (requires Node.js environment + full install)
• Agent harness orchestration (overkill for a solo operator)

How to Install Selectively​

The repo ships install.ps1 / install.sh with --profile full or per-language flags:

# Install only what you need
.\install.ps1 typescript     # TypeScript rules only
.\install.ps1 --profile full  # Everything (156 skills, all rules)

For a selective cherry-pick without the installer:

# Copy only the skills you want
cp -r skills/security-review ~/.claude/skills/
cp -r skills/mcp-server-patterns ~/.claude/skills/
cp -r skills/api-design ~/.claude/skills/

# Copy useful commands
cp commands/code-review.md ~/.claude/commands/
cp commands/security-scan.md ~/.claude/commands/

# Copy common rules
cp rules/common/security.md ~/.claude/rules/

Bottom Line​

ECC is genuinely useful — but it's built for polyglot teams shipping TypeScript, Python, Go, Java, and Kotlin simultaneously. If your stack is narrower, install selectively.

The two things worth having regardless of stack:

1. rules/common/security.md — every project benefits from this checklist
2. skills/security-review/ — activates automatically when you touch auth code

Everything else: read the skill, decide if it matches your actual workflow, copy only what you'll actually invoke.

Stack: Cloudflare Workers + D1, Docusaurus 3.7, React 18, PowerShell. Running Claude Code (Pro) as primary coding environment.

Feel free to play around and edit this post as much as you like.