By dvideby0
Comprehensive, language-aware repository audit with composable sub-commands. Run /audit for full analysis or /audit-quick, /audit-security, /audit-deps, /audit-arch, /audit-patterns, /audit-coverage for targeted scans.
Architecture review — detects god modules, layering violations, coupling issues, and computes risk scores to identify which modules need attention first. Runs in 3-5 minutes.
Test coverage analysis — assesses per-module test coverage, identifies critical untested paths, and evaluates test quality. Runs in 2-3 minutes.
Dependency analysis — builds module dependency graph, detects circular dependencies, classifies hub/orphan modules, and scans for external dependency vulnerabilities. Runs in 1-2 minutes.
Convention discovery — identifies naming patterns, error handling styles, testing approaches, and inconsistencies across your codebase. Generates a proposed CLAUDE.md. Runs in 2-3 minutes.
Fast deterministic-only scan — runs linters, type checkers, dependency audits, and pattern pre-scans without spawning LLM sub-agents. Results in 30-60 seconds.
Use this agent when reviewing code for excessive complexity, unnecessary abstractions, god objects, and readability blockers during a repository audit. This agent should be invoked when audit triage flags files with complexity concerns. <example> Context: The audit triage flagged src/services/order-service.ts and src/core/engine.ts for deep nesting, excessive function length, and too many responsibilities. user: "Run the complexity specialist on the flagged files" assistant: "I'll launch the complexity-specialist to analyze the complexity patterns and suggest simplification strategies." <commentary> Triage found complexity concerns that need specialist-depth analysis of structural issues. </commentary> </example>
Use this agent when reviewing code for silent failures, inadequate error handling, broad catch blocks, and inappropriate fallback behavior during a repository audit. This agent should be invoked when audit triage flags files with error handling concerns. <example> Context: The audit triage flagged src/auth/oauth.ts and src/api/client.ts for broad catch blocks and fallback patterns. user: "Run the error handling specialist on the flagged files" assistant: "I'll launch the error-handling-specialist to do a deep review of the flagged error handling patterns." <commentary> Triage found concerning error handling patterns that need specialist-depth analysis. </commentary> </example>
Use this agent when reviewing code for performance issues, inefficient patterns, memory leaks, and scalability concerns during a repository audit. This agent should be invoked when audit triage flags files with performance concerns. <example> Context: The audit triage flagged src/db/queries.ts and src/api/handlers.ts for N+1 query patterns and unbounded data fetching. user: "Run the performance specialist on the flagged files" assistant: "I'll launch the performance-specialist to do a deep review of the performance patterns." <commentary> Triage found performance concerns that need specialist-depth analysis beyond static pattern matching. </commentary> </example>
Use this agent when reviewing code for security vulnerabilities, authentication flaws, injection patterns, and secrets management issues during a repository audit. This agent should be invoked when audit triage flags files with security concerns. <example> Context: The audit triage flagged src/api/auth.ts and src/db/queries.ts for potential injection and auth flow issues. user: "Run the security specialist on the flagged files" assistant: "I'll launch the security-specialist to do a deep review of the flagged security patterns." <commentary> Triage found concerning security patterns that need specialist-depth analysis beyond what static tools catch. </commentary> </example>
Use this agent when reviewing code for test coverage quality, test design issues, and missing test scenarios during a repository audit. This agent should be invoked when audit triage flags files with test quality concerns. <example> Context: The audit triage flagged tests/api/ and tests/auth/ for happy-path-only testing and over-mocking. user: "Run the test quality specialist on the flagged files" assistant: "I'll launch the test-quality-specialist to do a deep review of the test coverage and quality patterns." <commentary> Triage found test quality concerns that need specialist-depth analysis of coverage gaps and test design. </commentary> </example>
Admin access level
Server config contains admin-level keywords
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
A collection of Claude Code plugins distributed as a plugin marketplace.
| Plugin | Command | Description |
|---|---|---|
| repo-audit | /audit | Full repository audit — auto-detects languages, runs your existing linters and tools, spawns per-module sub-agents, and generates reports in sdlc-audit/. Supports 15 languages, incremental mode, variant analysis, and programmatic dependency/risk scoring. Non-destructive — never modifies your code. |
In Claude Code, run:
/plugin marketplace add dvideby0/claude-plugins
/plugin install repo-audit
Or browse all available plugins:
/plugin
Then navigate to Discover to see everything in this marketplace.
After installing a plugin, its commands are available immediately:
/audit # Run repo-audit
/repo-audit:audit # Namespaced version (if there's a name conflict)
claude-plugins/
├── .claude-plugin/
│ └── marketplace.json ← Indexes all plugins for discovery
├── plugins/
│ ├── repo-audit/ ← Each plugin is self-contained
│ │ ├── .claude-plugin/
│ │ │ └── plugin.json
│ │ ├── commands/
│ │ │ └── audit.md
│ │ ├── lang/
│ │ │ ├── typescript.md
│ │ │ ├── python.md
│ │ │ ├── go.md
│ │ │ └── ... (15 language guides)
│ │ ├── README.md
│ │ └── LICENSE
│ ├── example-plugin/ ← Your next plugin goes here
│ │ ├── .claude-plugin/
│ │ │ └── plugin.json
│ │ ├── commands/
│ │ │ └── hello.md
│ │ └── ...
│ └── another-plugin/ ← And the next one here
│ └── ...
└── README.md
plugins/:mkdir -p plugins/my-new-plugin/{.claude-plugin,commands}
// plugins/my-new-plugin/.claude-plugin/plugin.json
{
"name": "my-new-plugin",
"version": "1.0.0",
"description": "What this plugin does"
}
.claude-plugin/):plugins/my-new-plugin/
├── .claude-plugin/
│ └── plugin.json ← Only manifest goes here
├── commands/ ← Slash commands at root level
├── agents/ ← Sub-agents at root level
├── skills/ ← Skills at root level
├── hooks/ ← Hooks at root level
└── README.md
.claude-plugin/marketplace.json:{
"name": "my-new-plugin",
"description": "What this plugin does",
"path": "plugins/my-new-plugin"
}
/plugin uninstall repo-audit
This removes the plugin and its commands from your Claude Code environment. Your project files (e.g., sdlc-audit/ output) are not affected.
/plugin marketplace remove dvideby0/claude-plugins
This removes the marketplace and all plugins installed from it. You can re-add it at any time with the install command above.
Each plugin can include any combination of:
| Component | Location | Purpose |
|---|---|---|
| Commands | commands/ | Slash commands (.md files) |
| Agents | agents/ | Specialized sub-agents (.md files) |
| Skills | skills/ | Auto-discovered capabilities (SKILL.md) |
| Hooks | hooks/ | Event handlers (hooks.json) |
| MCP | .mcp.json | External tool connections |
| Scripts | scripts/ | Helper scripts for hooks/commands |
MIT
npx claudepluginhub dvideby0/claude-plugins --plugin repo-auditAnalyze local repos for code health, complexity, test coverage gaps - multi-dimensional health analysis combining complexity + churn + coverage
Audit Claude Code plugins and skills for best practices, deprecations, compatibility, usability, coverage gaps, duplication, and workflow optimization
Audits a software codebase across 29 dimensions — security, privacy, accessibility, sector compliance (HIPAA/PCI/SOC 2/ISO 27001/FedRAMP/COPPA/FERPA/GLBA/EU AI Act/NIS2/DORA/Quebec Law 25), architecture, testing, dependencies, code reuse / consolidation, workaround / root-cause detection, performance, speed, DevOps, cost, engineering practice, UX, product gaps, frontend modernization, i18n, SEO, AI/ML, and product-type idioms. Produces structured docs under /docs/audits/ and files remediation tickets. Entry point: /audit.
Personal Claude Code + Codex dev stack: security hooks, AI-first code conventions, /security-review, /repo-map, /stack-check, portable statusline. Designed to complement other skills-based plugins, not replace them.
Agents for code review, security audits, debugging, and quality assurance
Perform security audit on codebase