**First action:** read the full plan ancestry before doing anything else.
Do not synchronously block on ambiguity. The user is often asleep when you run. The pipeline drains while they sleep; in the morning they review.
When you hit ambiguity, make a documented reasonable choice and continue with working code. Never write stubs, TODOs, "to be filled in" markers, or empty function bodies that just throw "not implemented."
When you run as a critic in the Refinement Loop ([docs/REFINEMENT_LOOP.md](../../docs/REFINEMENT_LOOP.md)), classify ALL of the following as **critical-severity** findings:
This agent's logic lives at skills/ai-quality/ai-code-quality-reviewer/SKILL.md. Read that file in full, then follow its instructions.
Reviews AI-generated code for common pitfalls — over-engineering, missing edge cases, fabricated patterns, hallucinated imports, stale framework idioms, vacuous tests.
Detects AI-generated code that references non-existent packages, APIs, methods, or fabricated patterns.
Paranoid LLM red-team analyst — scans applications that call LLMs for OWASP LLM Top 10 v2 (2025) findings and maps them to MITRE ATLAS v5.4.0 adversary tactics.
Builds the import graph and detects circular dependencies, layer violations, instability mismatches, and cross-module coupling.
Detects which architecture pattern a codebase follows (Layered, Hexagonal, Clean, Onion, CQRS, DDD, Vertical Slice, Modular Monolith, Microservices) with confidence scoring across 7 languages.
Uses power tools
Uses Bash, Write, or Edit tools
No model invocation
Executes directly as bash, bypassing the AI model
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
CTO Chief
The CTO your AI never had.
CTO Chief is a Claude Code plugin that turns AI coding from "generate and pray" into disciplined engineering. Every feature follows a 16-step Iron Loop — plan before code, test before ship, secure before deploy — wrapped by a refinement loop that drives findings (warnings included) to zero before you ever see the result. 110 agents across 22 categories route through a 4-tier architecture (CTO Chief → sub-orchestrators → specialists → Haiku scouts), with 4 mandatory human gates. The 421-file skill library (99 Tier-2 specialist bodies + 322 reference files) has been brought to 2026 best-practices quality through a websearch → update → critique → update loop on every specialist — no invented statistics, sourced citations, 7-language coverage. The result: AI that writes production-quality code on the first try.
/plugin marketplace add https://github.com/robotijn/ctoc
/plugin install ctoc
[!TIP] Enable auto-update:
/plugin→ Marketplaces tab →robotijn→ Enable auto-update
1. Start Claude Code:
claude
2. Open the dashboard:
/ctoc
That's it. CTO Chief detects your stack and shows a dashboard.
3. Tell Claude what you want to build:
I want a SaaS product with AI to help creative writers when they get stuck
CTO Chief starts with ideation — agents explore your idea with you, ask clarifying questions, and shape it into actionable plans. Steps 1-7 are collaborative: agents ask, you decide. Steps 8-16 are automated: agents execute, you review the result. Use numbered menus ([1], [2], [3]) to navigate.
Already know exactly what you want? Just be specific: "Add a /health endpoint returning 200 OK" — CTO Chief skips ideation and goes straight to planning.
[!NOTE] CTO Chief is open source and actively developed. Issues, PRs, and skill improvement suggestions are welcome.
[!TIP] For autonomous agent workflows, use
claude --dangerously-skip-permissionsto avoid repeated tool-call prompts. This is safe on feature branches where git can revert changes. Add--continueto resume a previous session.
When you install CTOC from the marketplace, Claude Code auto-discovers every artifact the plugin ships — slash commands, agents, hooks, and skills — per the Claude Code Plugins reference. No manual wiring is needed. The 99 Tier-2 specialist SKILL.md files then become available through three routing paths:
/ctoc (or any sub-command) dispatches CTO Chief, which dispatches a Tier-1 sub-orchestrator, which dispatches the relevant Tier-2 specialist by name. This is the path used during the Iron Loop and refinement loop.when_to_load trigger phrases — each SKILL.md declares a list of natural-language triggers in YAML frontmatter (e.g. "SBOM", "prompt injection", "NIST 800-61"). When your conversation matches a trigger, Claude Code auto-loads the skill into context with no slash command needed.Skill tool invocation — Claude can invoke any skill explicitly via the built-in Skill tool (e.g. Skill(skill_name="ctoc:llm-security-tester")) based on conversational context.The auto-discovery is documented behavior of Claude Code's plugin system. Installing CTOC therefore makes the entire 421-file library reachable without configuration — you only pay for what loads, but everything is wired and ready.
Every one of the 99 Tier-2 specialist SKILL.md bodies was brought to 2026 best-practices quality through an explicit improvement loop (v6.9.15–v6.9.27). The library is not a grab-bag of LLM-generated stubs — it is engineered.
npx claudepluginhub robotijn/ctoc --plugin ctocProduction-grade engineering skills for AI coding agents — covering the full software development lifecycle from spec to ship.
Persona-driven AI development team: orchestrator, team agents, review agents, skills, slash commands, and advisory hooks for Claude Code
Plugin de ingeniería de software completa: 10 agentes de núcleo y 9 opcionales con personalidad propia, memoria persistente por proyecto, quality gates y flujos automatizados desde la idea hasta producción.
Give soul to your workflow. 58 AI-powered skills across 17 roles — PM, Dev, Backend, Frontend, QA, UX, Data, Detect, WordPress, Release, Security, DevOps, and Core. Spec-to-ship pipeline: scaffold, implement, test, secure, deploy. Features two-phase workflow with human approval, quality-reviewer agent, token optimization, and continuous improvement via LEARN.md system.
Use Claude Code As Is - native plugin leveraging built-in architecture
Describe your goal, approve the spec, then step away — Claude and Codex loop together until it's right.