Goalpost — Security skill for Claude Code
Your agent says “All tests pass!” The hidden tests say 28/34. goalpost makes Claude Code's /goal prove it: frozen spec, real checks after every edit, read-only tests, fresh-eyes audit.
How to install Goalpost
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open syntaxixr/goalpost and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Goalpost does
Your agent says “All tests pass!” The hidden tests say 28/34. goalpost makes Claude Code's /goal prove it: frozen spec, real checks after every edit, read-only tests, fresh-eyes audit. Enforced by hooks, not by asking nicely.
Alternatives in Security
- Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
- Claude Bootstrap — Opinionated project initialization with security-first guardrails, spec-driven atomic todos, LLM testing patte 536 ★
- Goal Prompt Builder — Build audit-friendly /goal prompts for OpenAI Codex 225 ★
README
Your agent says “All tests pass!” The hidden tests say 28/34.
goalpost makes /goal prove it before Claude is allowed to stop.

▶ Watch the full 90-second demo · two real benchmark runs, same model, same task, nothing staged
English · Русский
**Install** (then open a new Claude Code session and type `/goal` like always):
claude plugin marketplace add syntaxixr/goalpost
claude plugin install goalpost@goalpost
On Windows you can just double-click [`install.bat`](install.bat). Remove it any time with `uninstall.bat` / `./uninstall.sh`. Details are [below](#install).
You keep typing `/goal `. goalp
Related Skills
Forward Pass Nt
Fresh-eyes whole-app audit — walk the codebase start to finish hunting bugs, security issues, stray code, and
Last Pass
Stage 4 last pass - fresh-eyes regression against ALL prior milestones (_firstinitial through _finalinitial),
Trust Me Bro
Every skill you install says trust me bro. This one reads it first. Pre-install audit for agent skills, plugin
Test
Prove it works. Multi-dimensional quality validation across functional, non-functional, security, DevOps, DX,
Exploit Confirm
Prove a SUSPECTED finding with one targeted, SOC-stealth, operator-supervised confirmation probe (confirm_ too
Claudemd Rules
Audit the HARD-rules manifest. Cross-references spec/hard-rules.json with rule-hits.jsonl bySection data over
Related Agents
Cold Reviewer
Zero-context code reviewer. Reviews changes cold - no spec, no project knowledge, no domain context. Catches w
Slide QA
Fresh-eyes defect hunt on a rendered slide image (genslides Phase-5 QA gate). Use after every render of a gens
Harness Shipper
Fresh shipping agent for goal loops. Runs the no-mistakes validation pipeline exactly once after Checker PASS,