Getting Started

Go from zero to your first SENTINEL-secured skill install in under 5 minutes.

What is TopGun?

TopGun is a Claude Code plugin that solves a simple but critical problem: finding and installing the right skill, safely. Without TopGun, you search one registry at a time, install code you've never audited, and have no way to know if a better option exists elsewhere.

TopGun fixes all three problems with a four-stage pipeline:

  1. FindSkills — searches 16 active registries in parallel
  2. CompareSkills — ranks candidates by capability, security, popularity, and recency
  3. SecureSkills — runs SENTINEL audit until 2 consecutive clean passes
  4. InstallSkills — installs the winner after your approval

The result: every skill you install via TopGun is the best available option, and it has been independently audited before it touches your environment.

SENTINEL v2.3.0 is bundled directly inside the TopGun plugin. No separate installation step is required — installing TopGun gives you the complete security audit chain.

Prerequisites

TopGun only requires one thing:

Claude Code Required

TopGun is a Claude Code plugin. You need Claude Code installed and authenticated.

npm install -g @anthropic/claude-code
No external dependencies. SENTINEL v2.3.0 ships inside the TopGun plugin at skills/sentinel/SKILL.md. No prerequisites required — reinstall TopGun to restore it if needed.

Installation

With prerequisites in place, install TopGun in one command inside Claude Code:

Claude Code terminal
/plugin install alo-labs/topgun

Claude Code will fetch the plugin, verify the manifest, and register the /topgun slash command. No configuration needed — TopGun works out of the box with sensible defaults.

Verify the install by typing /topgun --help in Claude Code. You should see the TopGun banner and available flags.

Your First /topgun Invocation

Invoke TopGun with a plain-English description of the skill you need. TopGun interprets the description and searches all registries accordingly.

Example invocations
/topgun find me a skill for web scraping /topgun best git workflow automation skill /topgun code review skill with multi-pass support # With flags /topgun deployment pipeline skill --auto-approve /topgun test runner skill --registries skills.sh,npm

After you run a /topgun command, the pipeline executes automatically:

  1. 1

    FindSkills searches all registries in parallel

    16 active registries are queried simultaneously. Results are normalized to a unified schema and deduplicated by contentSha. This typically completes in 2–5 seconds.

  2. 2

    CompareSkills ranks the candidates

    Every candidate is scored across four dimensions and given a composite score. The top-ranked candidate advances to the audit stage.

  3. 3

    SecureSkills runs SENTINEL

    SENTINEL audits the top candidate. If findings are detected, TopGun applies fixes and re-runs. This repeats until 2 consecutive clean passes are achieved.

  4. 4

    InstallSkills — you approve, then it installs

    TopGun presents the full audit manifest. You review and approve. The skill is installed via /plugin install.

Understanding the Output

As TopGun runs, it emits a real-time audit trail in the Claude Code terminal. Here's what a successful run looks like:

TopGun Searching 16 active registries… TopGun Found 14 candidates across 9 registries in 2.3s TopGun Deduplicated to 11 unique skills (by contentSha) TopGun Top score: web-scraper-pro · composite 0.94 TopGun capability 0.96 · security 0.91 · popularity 0.88 · recency 0.97 TopGun SENTINEL pass 1/2 — scanning web-scraper-pro… TopGun SENTINEL pass 1 clean · 0 findings · SHA-256 verified TopGun SENTINEL pass 2/2 — confirming… TopGun SENTINEL pass 2 clean · 0 findings · SHA-256 verified TopGun Awaiting approval — type yes to install or no to abort

Key things to look for:

  • Candidate count — how many skills were found and how many were unique after deduplication
  • Composite score — the winning skill's overall quality score (0–1)
  • Four sub-scores — capability, security, popularity, recency
  • SENTINEL passes — both passes must be clean before install is offered
  • SHA-256 verified — confirms the skill content was not modified between audit passes

What's Next

Now that you've installed TopGun and run your first command, explore the rest of the documentation: