By hibukki
Security review for Claude Code plugins with auto-detection of new/changed plugins
A Claude Code plugin marketplace with tools for better coding habits.
The main plugin - enforces good development practices and automates code review.
Uncommitted changes block - Don't let Claude ask the user questions if there are uncommitted changes.
Auto-review commits - Claude's code gets reviewed automatically after each commit.
Review comment prioritization - Framework for deciding which automated review comments to fix vs skip. (skill)
Manual review command - /quick-review to trigger a code review on demand.
Plan review - Review agent for plans, automatically executed after every plan file edit. (agent)
Plan checklist - Remind Claude to mention in the plan: small commits, a comprehensive TODO list, etc. (skill)
Comment quality check - Reminds Claude that redundant comments are bad.
Package management - Blocks editing package.json/pyproject.toml directly. Enforces npm install / uv add.
WebFetch tip - Remind Claude it can download the file instead.
Brainstorm mode - Multiple perspectives on a problem before deciding. (skill)
Stack recommendations - Tips for starting new projects (Vite+React, uv for Python, etc.) (skill)
Install guidance - Ensures proper installation methods (CLI over manual edits, official docs over memorized instructions). (skill)
Security review for Claude Code plugins with auto-detection of new/changed plugins.
Access Google Workspace APIs (Gmail, Drive, Sheets, Docs) via oauth2l + curl. (skill)
brew install jq (macOS) or apt install jq (Linux). If missing, you'll see a warning at session start and hooks will be disabled./plugin marketplace add hibukki/yonatans-cc-marketplace
/plugin install quick-review@yonatans-cc-marketplace
Add to your .claude/settings.json:
{
"enabledPlugins": {
"quick-review@yonatans-cc-marketplace": true
},
"extraKnownMarketplaces": {
"yonatans-cc-marketplace": {
"source": {
"source": "github",
"repo": "hibukki/yonatans-cc-marketplace"
}
}
}
}
git config core.hooksPath .githooks
This enables the pre-commit hook that auto-bumps the plugin version.
As markdown, with optimizations for LLMs
Seems more promising than the playwright MCP and the claude chrome plugin.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub hibukki/yonatans-cc-marketplace --plugin plugin-security-reviewsAccess Google Workspace APIs (Gmail, Drive, Sheets, Docs) via oauth2l + curl
Auto-triggers a quick code review after git commits
Comprehensive code review with architecture, security, and PR enhancement
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.
Automated code review, security scanning, and quality enforcement
Specialized security review subagent
Perform security audit on codebase
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.