Audits this marketplace against its own F1–F13 failure classes: deterministic pure-shell/awk regression detectors (fail-open, path traversal, broken hook contracts, manifest + vendored-lib drift, notebook/stdin/timeout/line-ending gaps) plus breadth+depth review sub-agents. Writes .claude/auditor/FINDINGS.md and records a HIGH count in the STATUS contract so the pipeline release gate enforces 0-high. Silent on a clean tree; no python dependency.
Plugin auditor from marketplace backend-agentic-marketplace in hafizmirhamza276-lab/backend-agentic-marketplace. Commands read from the repo's manifest — 1 month ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
audit-codebaseMethodology for auditing this marketplace against its own F1–F13 failure classes — the deterministic static detectors, the finding line format, and how the review sub-agents add logic/security/invariant findings on top. Use when running /auditor:run or as an auditor sub-agent.
classify-findingsThe severity taxonomy for audit findings — how to assign HIGH / MEDIUM / LOW / ADVISORY so the release gate enforces the right things and never false-blocks. Use when an auditor sub-agent or /auditor:run records a finding.
/auditor:runAudit the repo (or the current change) for this project's F1–F13 failure classes: run the deterministic static detectors, optionally add breadth+depth review sub-agents, aggregate findings, and record a HIGH count the release gate enforces (0-high). Usage: /auditor:run [\"<focus / base ref>\"]
auditor-criticalDepth-first critical auditor. Use to reason hard about the few riskiest areas the scout or the detectors surfaced — fail-open paths, traversal, auth, data-loss, and broken invariants — and confirm or refute each as a real, defensible finding. Read-only; writes findings to disk. Use proactively durin
auditor-scoutBreadth-first audit scout. Use to sweep a change (or the repo) for logic, security, and invariant risks across the whole touched surface, grounded in the explorer memory and the diff. Read-only; writes findings to disk. Use proactively during /auditor:run.
"${CLAUDE_PLUGIN_ROOT}"/scripts/auditor-status.sh
"${CLAUDE_PLUGIN_ROOT}"/scripts/verify-audit.sh
Spec-driven agentic implementation for Claude Code. Reads explorer codebase memory as ground truth, plans a requested change with clarity + technical-plan gates (9/10 required), implements only what the spec says, runs hybrid QA, and keeps the durable memory in sync. Includes a reproduce-first BUG-FIX MODE (failing reproduction + characterization tests + deterministic regression gate) for vague, repro-less bug reports.
7 skills · 2 commands · 8 agents · hooks
Explore a backend codebase ONCE with breadth+depth sub-agents, then write a durable .claude/explorer/ memory so any future session understands the code (what / why / how) without re-exploring.
3 skills · 1 command · 2 agents · hooks
Assesses DEPLOY/RELEASE readiness of the codebase. Deterministic pure-shell/awk checks kept deliberately lean — O1 test-ledger (a recorded RED build/test → BLOCKING; no ledger → CONCERN) and O2 version-consistency (a marketplace entry's version ≠ that plugin's plugin.json version → CONCERN) — plus breadth+depth ops sub-agents that inventory the CI/deploy/observability surface and reason about readiness as advisory CONCERN/NOTE findings. Writes .claude/ops/OPS.md and records a BLOCKING count in the STATUS contract so the pipeline release gate enforces 0-blocking. Fuzzy deploy judgment lives in the agents, never a false-firing detector. Silent on a verified, consistent tree; no python dependency.
2 skills · 1 command · 2 agents · hooks
Reviews a CHANGE (the working-tree diff vs HEAD) against the explorer MEMORY.md invariants and risk map, the approved PLAN scope, and the codebase's surviving callers. Deterministic pure-shell/awk checks — R1 caller-integrity & R2 convention-regression (BLOCKING), R3 risk-touch & R4 scope-discipline (CONCERN) — plus breadth+depth review sub-agents. Writes .claude/reviewer/REVIEW.md and records a BLOCKING count in the STATUS contract so the pipeline release gate enforces 0-blocking. Orthogonal to the auditor (change-vs-invariants, not whole-tree regression). Silent on a clean/in-spec change; no python dependency.
2 skills · 1 command · 2 agents · hooks
Conductor plugin: sequences the explorer -> builder flow (running exploration first when memory is missing/stale, then the spec-driven build or BUG-FIX MODE) and gates the result behind a deterministic RELEASE GATE — fresh explorer memory, builder done with a full task coverage map, bug-fix verification net green, CHANGELOG present, and (when present) auditor 0-high. Advisory by default; enforce via settings.enforce_release or PIPELINE_ENFORCE=1. The gate is pure shell/awk, so it behaves identically on python-less / Windows hosts.
1 skill · 3 commands · hooks
Always-on "write the least code that fully works" discipline. A SessionStart hook injects the full decision LADDER (skills/minimal-code) and a UserPromptSubmit hook re-injects a compact reminder every turn, so the agent ships the SMALLEST code that satisfies the requirement WITHOUT cutting validation, error handling, security, or accessibility. Both hooks are node-guarded and fail-quiet (node is OPTIONAL — absent means the hooks stay silent and the skill still works on demand) and INJECT CONTEXT ONLY (no gate decision; every gate in this marketplace stays pure shell/awk). Intensity off|lite|full|ultra via /minimize, mirrored into STATUS.json. YAGNI applies only to UNREQUESTED scope — anything the builder PLAN or the user mandates stays in-scope. Ladder adapted from Ponytail by Dietrich Gebert (MIT).
1 skill · 1 command · hooks
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Design fluency for frontend development. 1 skill with 24 commands (/impeccable polish, /impeccable audit, /impeccable critique, etc.) and curated anti-pattern detection.
1 skill · 4 agents · hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.
5 skills · 16 commands · 4 agents · hooks
Install the "AAS Secure App Builder" workflow plugin from Agentic Awesome Skills.
12 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.