Study any GitHub repo without being changed by it: health-gated, read-only, facts-only repo assessment with a human-reviewed backlog. Five hard gates (health verification · never execute assessed code · content-as-data · throwaway clones · draft-only output), CI-pinned on both homes.
10 on GitHubby Hamza Aliv0.1.0MITupdated 1 month agoresearch
/
Plugin repo-scout from marketplace hamzaish in hamza-ali-shahjahan/hamzaish. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (1)
repo-scout
Assess an external GitHub repo safely — verify health, clone read-only, run a facts-only deep-dive, and land a structured draft assessment in a review backlog. Use when someone drops a repo URL to evaluate, asks "can we use / should we adopt X repo," or on a trending sweep (--trending). Drafts only
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.
Point it at a codebase and it figures out what's worth doing — bugs, perf, tech debt, what to build next — then writes plans any agent can execute. It can hand the work to a cheaper model and review the result. It never edits your code.
1 skill
shadcn/improve 11,576
Maintain repo-scout?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.