By allousas
A plugin that fixes security vulnerabilities in codebases by identifying and patching known issues.
This command will:
Fetches alert details, fixes or dismisses if already resolved, runs tests, creates commit.
List all open Dependabot security alerts with IDs, severity, and brief summary
A collection of Claude Code plugins to enhance development workflows with AI-powered automation.
NOTE: Experimental — learning and exploring Claude Code capabilities. Not intended for production use.
/plugin marketplace add allousas/claude-code-plugins
/plugin install <plugin-name>
Set of claude code skills recipes for Kotlin microservices, organized by concern. Skills are auto-loaded by Claude when relevant to the current task.
kotlin-architecture)| Skill | Description | Triggered when |
|---|---|---|
| applying-pragmatic-hexagonal | Hexagonal architecture with pragmatic shortcuts | Designing or reviewing project structure |
| applying-pragmatic-layered | Layered architecture style | Designing or reviewing project structure |
kotlin-bootstrapping)| Skill | Description | Triggered when |
|---|---|---|
| setting-up-a-new-project | Bootstrap with default tech stack and hexagonal structure | Creating a new microservice from scratch |
kotlin-building-blocks)| Skill | Description | Triggered when |
|---|---|---|
| implementing-application-services | Application services that orchestrate business use cases | Creating or changing application services |
| implementing-controllers | HTTP controllers (inbound adapters) | Creating or changing REST controllers |
| implementing-kafka-consumers | Kafka message consumers | Creating or changing Kafka consumers |
| implementing-kafka-producers | Kafka message producers | Creating or changing Kafka producers |
| implementing-repositories | Database repositories (outbound adapters) | Creating or changing repositories |
| implementing-service-integrations | External service integrations (outbound HTTP) | Creating or changing HTTP clients |
kotlin-cross-cutting)| Skill | Description | Triggered when |
|---|---|---|
| configuring-runtime-dependencies | Spring configuration and dependency wiring | Setting up Spring beans and config |
| handling-errors-with-either | Functional error handling with Arrow's Either | Implementing error handling with Either |
| handling-errors-with-exceptions | Exception-based error handling | Implementing error handling with exceptions |
| reviewing-code-for-cleanliness | Code cleanliness review checklist | Reviewing code quality |
| versioning-database-schema | Flyway database migrations | Creating or changing database schema |
| writing-tests | Testing guidelines and patterns | Writing unit, integration, or component tests |
kotlin-patterns)| Skill | Description | Triggered when |
|---|---|---|
| applying-domain-event-publisher | Domain event publishing (in-memory, Kafka-backed) | Implementing domain events |
| applying-optimistic-locking | Optimistic locking for concurrent access | Implementing concurrency control |
| applying-outbox-pattern | Transactional outbox for reliable event publishing | Implementing reliable messaging |
kotlin-refactoring)| Skill | Description | Triggered when |
|---|---|---|
| aligning-existing-code-with-guidelines | Asks before overriding existing codebase patterns | Loaded skills conflict with existing code style |
code-insights)Agents that identify code quality issues in Kotlin codebases, analysis is file-based.
Accidental complexity is complexity introduced by the tools, frameworks, design or implementation choices rather than by the inherent problem being solved.
Usage: navigate to your project and run claude and type:
use accidental-complexity-analyser subagent to analyse all kotlin prod files in this project, please skip test files and configuration.
Output:
| File | Description |
|---|---|
accidental-complexity-findings.jsonl | Line-by-line findings with pattern IDs |
accidental-complexity-report-[YYYY-MM-DD].md | Summary with top patterns and statistics |
security-vulnerabilities)Fixes Dependabot security alerts in GitHub repositories.
export GITHUB_DEPENDABOT_PAT="your-token" # needs dependabot-* scopes
| Command | Description |
|---|---|
/security-vulnerabilities:list-dependabot-alerts | List all open alerts |
/security-vulnerabilities:fix-dependabot-alert 123 | Fix a specific alert |
/security-vulnerabilities:fix-all-dependabot-alerts | Fix all open alerts |
Fork the repo and make your changes. See testing locally and distributing.
External network access
Connects to servers outside your machine
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub allousas/claude-code-plugins --plugin security-vulnerabilitiesSet of agents that identify accidental complexity patterns and code quality issues in Kotlin codebases
Cross-cutting concerns for Kotlin microservices (error handling, testing, database schema, configuration, code review)
Architecture style skills for Kotlin microservices (hexagonal, layered)
Implementation patterns for Kotlin microservices (domain events, optimistic locking, outbox)
Refactoring recipes for aligning existing Kotlin code with guidelines
Advanced Kotlin programming skills for coroutines and DSL patterns
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.
Security best practices advisor with vulnerability detection and fixes
Expert guidance for Kotlin Coroutines: structured concurrency, safe scopes, Dispatchers, cancellation, exception handling, and testing. Use when reviewing or writing Kotlin/Android async code. Includes a playbook and per-practice reference files.
Multi-perspective code analysis covering architecture, security, and best practices
Harness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses