From soundcheck
Detects check-then-act sequences on shared state vulnerable to TOCTOU race conditions. Use when writing concurrent file operations, balance updates, or uniqueness checks.
How this skill is triggered — by the user, by Claude, or both
Slash command
/soundcheck:race-conditionThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Protects against time-of-check-to-time-of-use (TOCTOU) and other race conditions where
Protects against time-of-check-to-time-of-use (TOCTOU) and other race conditions where concurrent access to shared state creates a window for attackers to manipulate data between a check and its corresponding action. Exploitation leads to privilege escalation, double-spend, and data corruption.
Flag the vulnerable code and explain the risk. Then suggest a fix that establishes these properties. Translate each property into the audited file's language, database driver, and filesystem API — use the platform's documented atomic primitives.
npx claudepluginhub thejefflarson/soundcheck --plugin soundcheckAnalyzes code for time-of-check-to-time-of-use (TOCTOU) race conditions in financial transactions, file ops, auth flows, coupon redemption, and inventory management.
Detects race conditions in PHP code including check-then-act patterns, TOCTOU vulnerabilities, shared mutable state, read-modify-write issues, file/DB/session races. Includes grep patterns for scanning.
Detects concurrency bugs: deadlocks, wrong memory ordering, double-checked locking, and blocking operations inside locks. Use when writing multi-threaded code.