By Jobairshi
Engineering best-practices code review across 20 categories (security, performance, architecture, scale).
A Claude Code plugin that adds /eng-review — a thorough engineering best-practices code review covering 20 categories: input validation, auth/IDOR, SQL performance, N+1 queries, pagination, rate limiting, password storage, race conditions, file uploads, production architecture, monitoring, scale readiness, and more.
Three commands, in order:
/plugin marketplace add Jobairshi/eng-review-plugin
/plugin install eng-review@jobairshi-marketplace
/reload-plugins
That's it. The plugin is now available on this device.
After
/plugin installyou'll see✓ Installed eng-review. Run /reload-plugins to apply.— that's why step 3 is required. (Quitting and reopening Claude Code also works.)
/eng-review
/eng-review src/auth/
/eng-review the changes on this branch
The command reviews the project (or the files/scope you specify) against the embedded checklist and reports each issue with:
It ends with a summary of total issues, severity breakdown, and the top 3 priorities to fix first.
When the plugin is updated in this repo, pull the changes on each device with:
/plugin marketplace update jobairshi-marketplace
/reload-plugins
/plugin uninstall eng-review@jobairshi-marketplace
/plugin marketplace remove jobairshi-marketplace
/eng-review not found after install
You skipped /reload-plugins. Run it, or restart Claude Code.
An old personal version is shadowing the plugin
If /eng-review was previously installed as a personal slash command, the file at ~/.claude/commands/eng-review.md will override the plugin. Remove it:
rm ~/.claude/commands/eng-review.md
Want to verify the plugin is installed
ls ~/.claude/plugins/cache/jobairshi-marketplace/eng-review/
.
├── .claude-plugin/
│ ├── plugin.json # plugin manifest
│ └── marketplace.json # marketplace catalog (same repo serves both)
├── commands/
│ └── eng-review.md # the slash command
└── README.md
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub jobairshi/eng-review-plugin --plugin eng-reviewHarness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
v9.44.1 — Patch release for Gemini environment/version detection and qwen auth gating. Run /octo:setup.
Next.js development expertise with skills for App Router, Server Components, Route Handlers, Server Actions, and authentication patterns
Comprehensive .NET development skills for modern C#, ASP.NET, MAUI, Blazor, Aspire, EF Core, Native AOT, testing, security, performance optimization, CI/CD, and cloud-native applications
Complete collection of battle-tested Claude Code configs from an Anthropic hackathon winner - agents, skills, hooks, and rules evolved over 10+ months of intensive daily use