code-audit-rigor

Claude Code Plugins Collection

English | 繁體中文

A collection of powerful plugins for Claude Code, featuring automated development workflows and multi-perspective decision-making systems.

Available Plugins

Plugin	Description	Command
Dev Workflow	Complete development workflow from requirements to QA	/dev-workflow
Multi-Agent Debate	Multi-perspective analysis with critical review	/debate
High-Precision Dev	Safety-critical code with p^4 error rate compression	/init, /start
Session Learning	Incrementally capture valuable conversation patterns as memory or skills	/save-session
OpenSpec + Superpowers Workflow	Six-phase feature development enforcing OpenSpec/Superpowers role separation	auto-triggered skill
Code Audit Rigor	Review & audit toolkit: routine two-round review commands + quantitative frameworks (EV, score calibration, STRIDE+CWE) + engineering guarantees (language rule packs, coverage reconciliation, quote anchoring)	/review-branch, /review-pr + auto-triggered skill
CodeGraph	Structural code intelligence (callers, impact, trace) before grep when editing/reviewing	auto-triggered skill
Security Audit	Six-phase multi-agent pipeline that actively hunts exploitable vulnerabilities (vendored from cloudflare/security-audit-skill)	auto-triggered skill

Installation

# Add the marketplace
/plugin marketplace add chinlung/claude-dev-workflow

# Install all plugins
/plugin install dev-workflow@scl-claude-plugins
/plugin install multi-agent-debate@scl-claude-plugins
/plugin install high-precision-dev@scl-claude-plugins
/plugin install session-learning@scl-claude-plugins
/plugin install openspec-superpowers-workflow@scl-claude-plugins
/plugin install code-audit-rigor@scl-claude-plugins
/plugin install codegraph@scl-claude-plugins
/plugin install security-audit@scl-claude-plugins

Or install directly:

/plugin install chinlung/claude-dev-workflow

---

Quality Gate Selection Guide

Five plugins address quality and correctness from different angles. Choose based on your goal:

Plugin / Skill	Purpose	What it is NOT
Security Audit	Adversarial hunt for exploitable security vulnerabilities across a codebase; six-phase parallel sub-agent pipeline	Not a code review tool; not for design decisions
Code Audit Rigor	Rigorous review discipline for high-stakes code changes — quantified triage (EV, STRIDE+CWE), cross-reference contract, coverage reconciliation	Not a vulnerability hunter; not a design debate; not an implementation tool
Multi-Agent Debate	Structured debate for design decisions and architecture trade-offs; consensus-driven with quantitative scoring	Not for code review; not for implementation; not security hunting
High-Precision Dev	Spec-driven implementation with independent implementers, critic, adversary, and verifier; error rate compression to p^4	Not a reviewer of existing code; not a design tool
OpenSpec + Superpowers	Six-phase feature lifecycle enforcing role separation between OpenSpec (spec) and Superpowers (implementation)	Not a quality gate — enforces workflow discipline

Decision tree:

• "Find exploitable bugs I didn't know about" → Security Audit
• "Review this PR / branch rigorously with evidence" → Code Audit Rigor (/review-branch, /review-pr)
• "Decide between design options with rationale" → Multi-Agent Debate (/debate)
• "Implement this critical spec with near-zero defects" → High-Precision Dev (/init, /start)
• "Manage a feature from proposal to archive" → OpenSpec + Superpowers

Chain them: use /debate to decide What/Why, then /start to implement How, then /review-branch to review the diff.

Running Validator Fixture Checks

All plugin output schemas have zero-dependency Node validators with fixture suites. Run all checks from the repo root:

node scripts/validate-fixtures.cjs

This validates every valid fixture exits 0 and every invalid fixture exits non-zero across all plugins (148 checks: self-test canaries + static fixtures + generated single-field mutations + schema↔validator consistency, no install required).

Individual validator examples:

# Multi-Agent Debate
node plugins/multi-agent-debate/validators/validate-debate-output.cjs path/to/debate-output.json

# High-Precision Dev
node plugins/high-precision-dev/validators/validate-high-precision-output.cjs path/to/output.json