Cupcake Catalog — AI skill for Claude Code
The official registry of rulebooks for Cupcake, the policy engine for AI coding agents.
How to install Cupcake Catalog
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open eqtylab/cupcake-catalog and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Cupcake Catalog does
The official registry of rulebooks for Cupcake, the policy engine for AI coding agents.
Alternatives in AI
- Claudecodeui — A desktop and mobile UI for Claude Code, Anthropic's official CLI for AI-assisted coding 9k ★
- Desktop Cc Gui — Multi-engine AI coding desktop client (Tauri) 4.4k ★
- Gsap Skills — Official AI skills for GSAP 1.7k ★
README
Cupcake Catalog
The official registry of rulebooks for [Cupcake](https://github.com/eqtylab/cupcake), the policy engine for AI coding agents.
What is Cupcake Catalog?
Cupcake Catalog is a centralized registry for discovering, sharing, and installing policy rulebooks. Instead of writing Rego policies from scratch, you can install battle-tested rulebooks with a single command.
**Key Benefits:**
- For Users: Instantly adopt security policies without Rego expertise
- For Organizations: Share rulebooks across teams and projects
- For the Community: Contribute and collaborate on open-source policies
Quick Start
Prerequisites
- Cupcake v0.5.0 or later
- A project with
.cupcake/initialized
Browse Available Rulebooks
# Search all rulebooks
cupcake catalog search
# Filter by harness
cupcake catalog search --harness claude
# Show details of a specific rulebook
cupcake catalog show security-hardened
Install a Rulebook
# Install the latest version
cupcake catalog install security-hardened
# Install a specific version
cupcake catalog install security-hardened@1.0.0
# List installed rulebooks
cupcake catalog list
Upgrade and Manage
# Upgrade a rulebook to latest
cupcake catalog upgrade security-hardened
# Upgrade all installed rulebooks
cupcake catalog upgrade
# Remove a rulebook
cupcake catalog uninstall security-hardened
How It Works
Catalog rulebooks are installed as **overlays** in `.cupcake/catalog/`. They never modify your existing configuration:
.cupcake/
├── rulebook.yml # Your config (untouched)
├── policies/ # Your policies (untouched)
├── catalog/ # Installed catalog rulebooks
│ └── security-hardened/
│ ├── manifest.yaml
│ ├── rulebook.yml
│ ├── system/
│ │ └── evaluate.rego # Shared entrypoint
│ ├── helpers/
│ │ └── commands.rego # Shared helpers
Related Skills
Cupcake
A native policy enforcement layer for AI coding agents. Built on OPA/Rego.
Blade Agent Runtime
Blade Agent Runtime (BAR) - A safe execution runtime for AI coding agents with Git worktree isolation, step le
Downshift
Deterministic open-source model router — right-sized LLMs per workload. Agent hooks, catalog policy, shadow mo
Shadxn
Experimenting with AI our way into the unknown — monorepo: agentx (agentic code generation engine) + shadxn (c
Rampart
Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor,
Gravity Stack
Top 1% AI-native development environment — drop-in Claude Code setup: agents, CARL policy engine, 20 hooks, 78
Related Agents
Registry Auditor
Audit the AgtMLS registry for drift, spec violations, routing decay, and stale generated artifacts without cha
Omd UX Researcher
Reads the resolved oh-my-design reference catalog, researches competing services, validates Tier-1 official de
Deps Currency
Build & dependency currency expert. Researches latest stable Gradle, Ktor, Compose, Kover, Kermit, logback, sl