By mbwsims
Run project-wide or PR readiness audits dispatching parallel agents for security vulnerability scans, test plan generation and quality reviews, architecture mapping, git-based code evolution analysis, and instruction conformance checks, yielding synthesized reports with prioritized risks and fixes.
Autonomous agent that performs a comprehensive codebase analysis. Use this agent when the user asks for a "full codebase overview", "help me understand this project", "codebase analysis", "onboard me to this codebase", "project deep dive", or wants a complete understanding of the project's architecture, hotspots, and key modules.
Autonomous agent that analyzes the temporal health of a codebase. Use this agent when the user asks for a "full evolution analysis", "temporal audit", "codebase evolution report", "how has this project changed", "project health over time", or wants a comprehensive assessment of how the codebase has evolved with drift detection and forecasting.
Autonomous agent that performs comprehensive instruction file analysis. Use this agent when the user asks for a "full instruction review", "deep analysis of my rules", "comprehensive CLAUDE.md audit", or wants a thorough assessment of instruction quality, adherence, and missing conventions in a single report. This agent discovers conventions, lints quality, and checks conformance, then produces a prioritized report.
Autonomous orchestrator for /orbit Standard mode. Runs MCP tools across all 5 claude-universe systems (security, tests, code, evolution, instructions) in parallel, verifies top findings by reading actual code, and synthesizes a unified dashboard. Used by /orbit when no mode keyword or when Standard mode is invoked. Expected runtime: 30-90 seconds on medium projects.
Autonomous agent that performs a comprehensive security audit of the entire project. Use this agent when the user asks for a "full security audit", "security assessment", "comprehensive security review", "audit my project for vulnerabilities", or wants a complete security evaluation with prioritized findings and remediation plan.
This skill should be used when the user asks to "check adherence", "check rule adherence", "are my rules being followed", "is Claude following my instructions", "how effective is my CLAUDE.md", "rule compliance", "instruction effectiveness", "how are my rules performing", "which rules are being violated", "audit my rules", "check my CLAUDE.md", mentions "/check-rules", or wants to know whether their coding agent instruction rules are actually being followed across Claude Code sessions.
Use when the user wants to infer reusable project conventions from existing code and turn them into instruction rules: "discover conventions", "infer rules from code", "what rules should I add", "generate rules from this codebase", or "/discover". This is for convention mining, not for checking rule adherence or explaining how a specific module works.
This skill should be used when the user asks "when did this get complicated", "why is this file so complex", "how did this evolve", "complexity history", "trace the evolution", "what happened to this code", "dissect this file", mentions "/dissect", or wants to understand how a file or function became complex by tracing its evolution through git history.
This skill should be used when the user asks "has this module drifted", "is this code still doing what it was designed for", "scope creep analysis", "architectural drift", "what was this originally for", "how has this changed over time", mentions "/drift", or wants to detect when code has quietly evolved away from its original purpose.
Use when the user wants a deep explanation of a specific file, module, or implementation flow: "explain this code", "walk me through this file", "why is this structured this way", or "/explain". Best for focused code understanding with history context, not for repo-wide architecture mapping, recent-change summaries, or generic "what happened?" requests.
Admin access level
Server config contains admin-level keywords
Uses power tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Uses Bash, Write, or Edit tools
Uses Bash, Write, or Edit tools
Teach Claude Code to think systematically.
5 layers of systematic intelligence, 20 commands, 1 universe.
Use it to answer questions like:
Run these once inside a Claude Code session (claude in your terminal):
/plugin marketplace add mbwsims/claude-universe
/plugin install universe@claude-universe
The plugin is available in every session after that.
| Command | Outcome |
|---|---|
/orbit | Repo-wide health sweep across tests, security, codebase risk, evolution, and instructions |
/orbit pr | Diff-aware PR readiness review focused on changed files |
/test | New tests written for a file, function, or module |
/security-review | Attacker-minded review of a specific file or change set |
/trace | End-to-end feature/data flow from entry point to storage |
Other /orbit modes: deep for a full 5-agent audit (~5 min), quick for a 10-second status glance. You can also scope it: /orbit security tests runs only those areas.
| System | Domain | Commands |
|---|---|---|
| Navigate | Instruction intelligence | /discover /lint-rules /check-rules |
| Diagnose | Testing intelligence | /test /test-review /test-plan |
| Shield | Security intelligence | /scan /threat-model /security-review |
| Survey | Codebase intelligence | /trace /hotspots /impact /explain /map |
| Timewarp | Temporal intelligence | /recap /drift /dissect /forecast /rewind |
You can also just describe what you need in plain English, the right command should activate automatically.
Navigate — Extract the standards. Discover your project's unwritten conventions, lint instruction quality, and check whether the codebase actually follows the rules.
Diagnose — Pressure the behavior. Write tests that catch real bugs through input space analysis and deep assertions, not just happy path coverage.
Shield — Model the attacks. Find vulnerabilities, build STRIDE threat models, and trace untrusted input through code to determine exploitability.
Survey — See the blast radius. Trace features through layers, find hotspots, map architecture, and understand impact before changing code.
Timewarp — Trace the evolution. Detect architectural drift, forecast which files are about to become problems, and recap recent changes across the codebase.
Each command combines two layers: MCP servers handle the quantitative analysis (pattern matching, dependency graphs, scoring), and skills guide Claude's reasoning with structured methodology and domain expertise. The skills are what make the output consistently deeper than asking Claude the same question directly.
For enhanced instruction tracking across sessions, the external alignkit MCP
server provides session-based adherence data. It activates automatically via the
plugin's .mcp.json configuration.
MCP server analysis (deterministic pattern matching, dependency graphs, trend computation):
Skill-guided analysis (Claude reads and reasons about code):
The MCP servers provide structured data that skills use to guide analysis. When MCP servers aren't available (e.g., in restricted environments), every skill falls back to manual analysis using Glob, Grep, and Read.
Each system includes an autonomous agent for comprehensive analysis:
| Agent | System | Purpose |
|---|---|---|
| instruction-advisor | Navigate | Full instruction file audit |
| test-auditor | Diagnose | Project-wide test quality audit with criticality weighting |
| security-auditor | Shield | Comprehensive security audit with data flow tracing |
| codebase-analyst | Survey | Architecture mapping with health assessment |
| evolution-analyst | Timewarp | Temporal health report with drift and forecasting |
Five bundled MCP servers provide deterministic analysis and activate automatically with zero setup:
npx claudepluginhub mbwsims/claude-universe --plugin universeComprehensive code review with architecture, security, and PR enhancement
Review pull requests with structured analysis and approve with confidence
Live codebase visualization and structural quality gate — 14 health dimensions graded A-F, dependency analysis, and architecture governance via MCP
Codebase exploration, refactoring, and quality analysis
Reflective code review toolkit with structured analysis, blast radius analysis, domain expertise, and intelligent review orchestration
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.