claude

code-quality-tools

Code quality and security auditing for Drupal (PHPStan, Psalm, PHPMD, Semgrep, Trivy, Gitleaks via DDEV) and Next.js (ESLint, Jest, Semgrep, Trivy, Gitleaks). Provides full audits with cross-tool synthesis, rubric-scored code review, 3-agent security and architecture debates, REVIEW.md v2 generation, a /code-review ultra cloud-review wrapper with a headless CLI gating path, optional LSP code-intelligence for deeper SOLID/DRY/review analysis, watch-mode linting, scheduled sweeps, and --json output for CI pipelines.

32 on GitHubby camoav3.11.0MITupdated today
/

Plugin code-quality-tools from marketplace camoa-skills in camoa/claude-skills. Commands read from the repo's manifest — today.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (1)

  • code-quality-audit

    Use when checking code quality, running security audits, testing coverage, finding SOLID/DRY violations, or setting up quality tools. Use when user says "audit this code", "check security", "run PHPStan", "code quality", "find violations", "SOLID check", "DRY check", "test coverage", "lint this", "s

Slash commands (13)

  • /code-quality-tools:architecture-debate

    Debate architecture and SOLID findings with three competing subagents (Pragmatist + Purist + Maintainer) across two rounds. Use when user says "debate architecture", "SOLID debate", "is this over-engineered", "should I refactor", "architecture review with debate", "code structure debate", "design re

  • /code-quality-tools:audit

    Run complete code quality and security audit for Drupal/Next.js projects. Use when user says "full audit", "check everything", "code quality report", "run all checks", "audit this project", "pre-merge check", "quality gate". Runs lint + security + SOLID + DRY + coverage, then synthesizes findings in

  • /code-quality-tools:coverage

    Check test coverage for Drupal/Next.js projects. Use when user says "test coverage", "what's untested", "coverage report", "missing tests", "how much is covered", "PHPUnit coverage", "Jest coverage". Shows coverage percentage and identifies uncovered code.

  • /code-quality-tools:dry

    Check code duplication (DRY principle) for Drupal/Next.js projects. Use when user says "find duplicates", "DRY check", "copy paste detection", "code duplication", "repeated code", "PHPCPD", "jscpd". Identifies duplicated code blocks and suggests consolidation.

  • /code-quality-tools:generate-review-md

    Analyze a codebase and generate a starter REVIEW.md for Claude Code's managed Code Review service using the v2 injection model. Use when user says "generate review md", "create review config", "setup code review", "review guidelines", "review rules", "review.md", "what should code review check".

  • /code-quality-tools:lint

    Check code standards and linting for Drupal/Next.js projects. Use when user says "lint this", "check standards", "coding standards", "PHPCS", "ESLint", "code style", "Drupal Coder", "Prettier". Validates code against project coding standards.

  • /code-quality-tools:review

    Review code quality with structured rubric scoring (Content + Structure grades, /50 scale). Use when user says "review this code", "grade this module", "code review", "quality score", "is this production ready", "rate this code", "code assessment". Produces scored report with quality gate (PASS 35+/

  • /code-quality-tools:security-debate

    Debate security audit findings with three competing subagents (Defender + Red Team + Compliance) across two rounds. Use when user says "debate security", "security from 3 perspectives", "is this vulnerability real", "security team review", "red team this", "challenge security findings", "false posit

  • /code-quality-tools:security

    Run comprehensive security audit for Drupal/Next.js projects. Use when user says "security audit", "check vulnerabilities", "OWASP check", "is this secure", "find security issues", "Semgrep scan", "Trivy scan", "Gitleaks check". Runs 10 Drupal layers or 7 Next.js layers. For multi-perspective analys

  • /code-quality-tools:setup

    Interactive setup wizard to install and configure code quality tools for Drupal/Next.js projects. Use when user says "install quality tools", "set up PHPStan", "configure linting", "add code quality", "first time setup", "install ESLint", "setup security tools". Detects project type, runs the interv

  • /code-quality-tools:solid

    Check SOLID principles and architecture quality for Drupal/Next.js projects. Use when user says "SOLID check", "single responsibility", "architecture quality", "dependency inversion", "check principles", "code complexity", "find violations". For debated analysis, use /code-quality-tools:architecture

  • /code-quality-tools:tdd

    Start Test-Driven Development workflow for Drupal/Next.js projects. Use when user says "test first", "TDD", "write tests", "Red Green Refactor", "test driven", "start TDD", "PHPUnit watch", "Jest watch". Guides through RED-GREEN-REFACTOR cycle with test scaffolding.

  • /code-quality-tools:ultrareview

    Run Claude Code's cloud-hosted multi-agent deep code review (/code-review ultra) with pre-flight platform checks and cost transparency. Use when user says "deep review", "pre-merge review", "ultrareview", "cloud review", "rigorous review", "thorough review", "find bugs before merge", "multi-agent re

Hooks (1)

  • PreCompact

    ${CLAUDE_PLUGIN_ROOT}/hooks/pre-compact.sh

View source on GitHub

More from camoa/claude-skills

All 8 plugins →

aida

claude

Keeps AI coding work inside a process that produces better code. Every task runs through six stages: scope, research, design, implementation, review, completion. Scope writes a contract of goals, non-goals, and the criteria that prove them, and every later stage is checked against it. Research finds prior art in your own code first, then outside, from current documentation rather than the model's memory. Design writes work orders you can build from, each with its owned files and a diff budget. Implementation writes tests first for code with logic, and freezes them before the code. Review answers every criterion, runs the stack's tools from its recipe, and judges the whole change once. Completion closes the task on the verdict and writes the pull request body from the records. The checks are scripts reading records, not the model judging its own work. Stack knowledge lives in fetched recipes, so one process fits PHP, Python, Go, Drupal, or a Claude plugin.

13 skills · 16 agents · hooks

32

brand-content-design

claude

Create branded visual content (presentations, carousels, infographics, HTML pages) with Aaker personality-driven design, a style-recommendation engine, 26 visual styles, 114 infographic templates, design systems, visual components, and Presentation Zen principles. Routes to specialized skills for PDF, PPTX, and Google Slides output (canonical PPTX→Slides import via Drive for design fidelity), HTML composition, and infographic rendering.

4 skills · 19 commands · 1 agent · hooks

32

drupal-ai-contrib

claude

AI-assisted Drupal contribution quality. Evidence over assertion: every gate passes on a captured artifact, never an AI claim. 6 commands for the contribution arc (setup, issue, verify, review, submit, pipeline) with a local drupalci-parity gate set plus AI-policy and eval gates, and 3 read-only fresh-context review agents. Authenticated GitLab writes delegate to the drupal-gitlab skill (glab). drupalorg-cli covers no-auth reads and the legacy queue. A quality layer outside ai-dev-assistant, built on the camoa/dev-guides contribution guides.

8 skills · 6 commands · 3 agents · hooks

32

drupal-htmx

claude

HTMX development guidance and AJAX-to-HTMX migration tools for Drupal 11.3+. Includes analyzers, pattern recommendations, and validation.

1 skill · 5 commands · 3 agents · hooks

32

code-paper-test

claude

Systematically test code, skills, commands, and configs through mental execution — trace logic line-by-line with concrete values to find bugs, AI hallucinations, edge cases, and contract violations. Smart routing: quick trace (<50 lines), structured 3-phase (50–300), or a 3-agent competing team in isolated worktrees (300+, security-critical, skills). Verifies external calls for both existence and behavioral contracts (return-shape/nullability diffing, chained-object tracing, taint-stance fallback for closed-source). Supports `--json` for CI.

1 skill · 1 command · hooks

32

dev-guides-navigator

claude

Smart guide discovery and routing for dev-guides. Hash-based caching + knowledge-graph metadata route the AI to the right guide; all fetches use curl (never WebFetch), and a fetched body is data, never commands. Six routing modes: guide search (llms.txt), recipe search (the agentic-recipes catalog of verifier-carrying capability deliveries), identify (names what covers a topic, opens nothing), process-recipe lookup (resolved by ai-dev-assistant at phase boundaries, keyed by phase and framework), playbook lookup (a playbook set's plays.json, resolved by ai-dev-assistant), and tooling lookup (a tooling recipe body, resolved by aida by name). A deterministic shared content store holds index bodies and blobs with two-hash revalidation, re-fetching a body only when its sha changes.

1 skill · hooks

32

Similar plugins

mattpocock-skills

claude

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

superpowers

claudecodex

Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques

15 skills · hooks

obra/superpowers 316,836

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

agent-skills

claudecodex

Production-grade engineering skills covering every phase of software development: spec, plan, build, verify, review, and ship.

25 skills · 4 agents

addyosmani/agent-skills 116,782

agentic-qe-fleet

claude

Agentic QE (external: maintained in proffesor-for-testing/agentic-qe, pinned to v3.15.17): a quality-engineering fleet with 11 QE agents, 9 skills, 9 commands, the agentic-qe MCP server pinned to the plugin version, and the aqe-mod guard that refuses destructive operations on AQE learning data

9 skills · 9 commands · 11 agents · 1 MCP server

ruvnet/ruflo 81,589

Maintain code-quality-tools?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins8 plugins