Vulnerability-aware dependency upgrade orchestrator. Detects outdated packages across npm, Python, Go, Rust, Java, Kotlin, and C# ecosystems; recommends the safest-yet-most-recent version per package using OSV.dev; executes upgrades wave-by-wave with build/typecheck/test verification and clean git rollback on failure.
migration-runner pipeline agent that applies a single package upgrade for one wave. Calls the ecosystem adapter's apply-upgrade subcommand and reports the outcome.
migration-runner pipeline agent that reports outdated dependencies in ONE ecosystem. Calls the ecosystem adapter via Bash and returns a strict JSON object with the outdated list. Invoked once per ecosystem detected in the repo.
migration-runner pipeline agent that turns merged detector output into a wave-ordered upgrade plan. For each outdated package, queries OSV.dev and the ecosystem registry, applies the version-ranker (safety vs recency), topologically sorts, and writes docs/migration-runner/migration-plan.md and plan.json.
migration-runner pipeline agent that runs the ecosystem's verify commands (build, typecheck, tests) after a wave's upgrade and reports pass/fail with the failed step and a tail of stdout.
Scan the repo for outdated dependencies across all detected ecosystems (npm, Python, Go, Rust, Java, Kotlin, C#), query OSV.dev for vulnerabilities, and produce a vulnerability-aware upgrade plan at docs/migration-runner/migration-plan.md and plan.json. Recommends "latest with no unfixed HIGH/CRITICAL CVE and >=14d soak" within the current major; surfaces cross-major upgrades separately unless --allow-major is passed.
Execute the upgrade plan written by /migration-runner:detect, one package per wave, verifying build + typecheck + tests after each upgrade. On verifier failure: hard reset to pre-wave SHA, write fix-plan.md, halt. Resumable with --resume.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Five production-grade plugins for Claude Code: multi-agent code review, queryable architecture maps, parallel plan execution, spec consolidation, and vulnerability-aware dependency upgrades.
# One-time: add the marketplace
claude plugin marketplace add MisterVitoPro/qa-claude-market
# Then install whichever plugins you want (see per-plugin sections below)
claude plugin install qa-swarm@mistervitopro-plugin-marketplace
A swarm of specialist agents reviews your code, then fixes the bugs test-first.
Six Sonnet core reviewers (security, correctness, performance, architecture, data-flow, async) run in parallel, optionally joined by up to six Haiku specialists (config/env, supply chain, type safety, state mgmt, logging, backwards-compat). Findings are deduplicated, ranked P0–P3, and corroborated across agents. The implement skill picks up the report and fixes issues with a 3-agent TDD loop (failing test → minimal fix → verify).
claude plugin install qa-swarm@mistervitopro-plugin-marketplace
/qa-swarm:attack "audit the authentication flow for security and correctness"
/qa-swarm:implement
Stops Claude from re-exploring your repo every session.
Three analyst agents scan your codebase in parallel and a graph synthesizer annotates the key modules, producing a curated architecture index (directory map, key files, tech stack, patterns, dependencies, build commands) plus a semantic dependency graph. Graph queries (dependencies, dependents, blast radius, risk filters) run deterministically through a bundled Node script. A SessionStart hook injects the index as context at session start so Claude navigates straight to the right files instead of grepping. Incremental updates re-scan only what changed.
claude plugin install code-atlas@mistervitopro-plugin-marketplace
/code-atlas:map # full first-time scan
/code-atlas:update # incremental refresh
/code-atlas:query "what calls AuthService.login?"
Take a Markdown implementation plan, run it through a parallel agent swarm.
The analyzer breaks your plan into file-disjoint waves (≤6 agents per wave). Dev agents implement tasks in parallel; verifier agents check acceptance criteria per wave; the aggregator dedupes bugs and emits a fix-plan.md for re-runs. Per-wave git commits keep history bisectable. Optional TDD red-green mode.
claude plugin install plan-runner@mistervitopro-plugin-marketplace
/plan-runner:run path/to/implementation-plan.md
Consolidates scattered specs into a single canonical tree, and stubs out the docs you forgot to write.
adopt reorganizes spec files in place, grouped by module (multi-module repos) or feature (single-module). rewrite collapses everything to one file with optional source cleanup. The surface scanner walks your code and appends stubs for undocumented agents, skills, CLIs, and configs so nothing slips through.
claude plugin install jupiter@mistervitopro-plugin-marketplace
/jupiter:adopt # reorganize specs in place
/jupiter:rewrite # collapse to single master file
Vulnerability-aware dependency upgrade orchestrator across 7 ecosystems.
npx claudepluginhub mistervitopro/qa-claude-marketConsolidate scattered specs into a canonical master-spec tree with a navigable index, and append stubs for undocumented public surface found in code
Take a Markdown implementation plan, run it through a parallel agent swarm with per-wave verification, and generate a bug-fix plan for re-runs; optional TDD red-green mode with per-task red/green gate evidence
AI-powered code quality analyzer: specialized agents find security, performance, architecture, and correctness issues, then fix them via TDD
Generate square pixel-art sprites from semantic JSON grids + palettes. Deterministic, no external image model.
Scan a codebase and generate a comprehensive architecture index with graph-schema and query capability — directory map, key files, tech stack, patterns, dependencies, build commands, and queryable knowledge graph
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
Harness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
Comprehensive feature development workflow with specialized agents for codebase exploration, architecture design, and quality review
Tools to maintain and improve CLAUDE.md files - audit quality, capture session learnings, and keep project memory current.
Develop, test, build, and deploy Godot 4.x games with Claude Code. Includes GdUnit4 testing, web/desktop exports, CI/CD pipelines, and deployment to Vercel/GitHub Pages/itch.io.
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer