fin-2x (Intercom 2x-skills) plugin
fin-2x
A Claude Code marketplace from Intercom's Fin team: skill review, GitHub Actions hardening, permission analysis, flaky tests and pull requests
- 271 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Plugins install hooks that fire on commands and edits, such as intercepting `gh pr create` and loading a skill when a workflow is edited
- The attach-github-assets skill uploads local files to GitHub
- Skills read permissions, memory and telemetry data of your Claude Code setup
Install
- Works in
Manual install
/plugin marketplace add intercom/2x-skillsAdds the fin-2x marketplace. Plugins are installed separately.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Plugins install hooks that fire on commands and edits, such as intercepting `gh pr create` and loading a skill when a workflow is edited
- The attach-github-assets skill uploads local files to GitHub
- Skills read permissions, memory and telemetry data of your Claude Code setup
This is third-party code. Review the repository files before installing.
What it does
fin-2x is an Intercom Fin marketplace with six Claude Code plugins. Install each separately to choose skill review, GitHub Actions checks or flaky-test diagnosis. The Claude Code tooling plugin examines permissions and missing utilities. It also analyzes costs from your OpenTelemetry data and checks agent memory against current code. A separate review plugin focuses on change structure and architecture. Another collection handles pull requests: the agent drafts descriptions and attaches images or recordings. Uploads use your GitHub access and may include posting a PR or issue comment. Inspect its hooks and upload rules before enabling it.
Who it is for. For teams that work in Claude Code and want ready skills for review, GitHub Actions security, permission tuning and tidy pull requests.
Good fit when
- You write your own skills and want them reviewed against a clear rubric: structure, integrity, security, cost, hooks
- The repository has GitHub Actions workflows and you want them checked for injection and supply-chain exposure
- Your Claude Code permission allowlist has grown and you need to sort out which rules are safe
- CI tests pass sometimes and fail other times, and you want analysis by framework with verification by a green run
- You need to open a pull request with a description and attach screenshots or a screen recording
Not a fit when
- You need a ready process for your own rules: the skills were collected by Intercom's Fin team for itself and generalized, so tuning to your project is up to you
- Your agent is not Claude Code: the plugins, commands and hooks follow its marketplace format
- You want a single plugin: there are six separate ones here, install only what you need
- You cannot allow hooks that intercept pull request creation: pr-tools includes a hook for `gh pr create`
Example request
Check my .github/workflows/release.yml workflow with the secure-github-actions skill and show what needs pinning by hashLimitations
The skills encode Intercom Fin’s working conventions; compare their advice with your project’s rules. Permission and skill-quality ratings use author-defined criteria and do not guarantee safety. Cost analysis requires your own OpenTelemetry data.
Security, Claude Code tooling, test and pull-request plugins include automatic hooks. They inspect commands and edits, while the agent sends accessible material to the chosen model. Review images before GitHub uploads for secrets or client data. The collection uses MIT; external services follow their own terms.
How to disable. Remove a plugin with /plugin uninstall using a name like skill-tools@fin-2x and, if you like, drop the marketplace with /plugin marketplace remove fin-2x. Hooks go away with the plugin.
FAQ
How do I install the fin-2x plugins in Claude Code?
Add the marketplace with /plugin marketplace add intercom/2x-skills, then install the plugin you need, for example /plugin install skill-tools@fin-2x. The plugin list is in the repository README.
How does skill-review differ from other checks?
The review examines a skill’s structure, integrity and content. Other categories cover tests, safety, cost and hooks. Results use a defined JSON schema; this is an agent assessment, not proof that every run will produce the same outcome.
What does secure-github-actions do?
It is a twelve-rule checklist with audit commands that protects GitHub Actions workflows from supply-chain and injection attacks. A hook in security-tools loads the skill automatically when you edit a workflow file.
What does permissions-analyzer do?
It examines Claude Code permission rules and groups them into three risk categories. A hook counts permission requests and suggests when to run the analysis; the environment owner still decides which rules to change.
How does fix-flaky-tests confirm a fix?
The skill detects the framework and CI provider, classifies the flake and accepts only a green CI run as verification. Its coverage includes RSpec, Jest, pytest and Go test.
Discussion
No questions or reviews yet.
Related
PluginsA Claude Code plugin marketplace by Frad LEE: Git and GitFlow, GitHub, refactoring, memory, research, image generation and interface work
Nick Tune's plugin marketplace for Claude Code: checks before a task is handed in, code review and TDD personas
A marketplace of Claude Code plugins for engineering workflows: feature planning, tests, review, git automation and a code execution runtime
2389 Research marketplace: 28 plugins and MCP servers for Claude Code, from parallel solution search to CSS and Firebase.
A marketplace of 23 plugins for Claude Code: git and pull requests, code review, TDD, specs and delegation to other models
Three Claude Code skills turn Linear and GitHub into a software factory: spec, build and review, with a human merging.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Repository stars | Main difference |
|---|---|---|---|
| fin-2x (Intercom 2x-skills) (this card) | yes | 271 | |
| Trail of Bits Skills Curated | yes | 532 | a security marketplace with line-by-line vetted plugins, while fin-2x is broader: skill review, permissions, tests and pull requests |
| Eigenwise Toolshed | no | 284 | a six-plugin marketplace around a project map and a task board, while fin-2x covers other topics |
README in short
Each plugin has its own instructions and changelog. You can inspect a chosen collection before installation and update only the parts you use.