Agent Plugins Marketplace
← All plugins

code-audit-tools

v3.0.0

Audit repositories and app security, measure bloat, inspect branches and plan remediation.

Claude CodeAgent Plugins12 Skills

By Legion Code Inc.License: AGPL-3.0-or-later88 GitHub starsUpdated last week

Directory evidence

Runtimes
Claude Code and Agent Plugins
Parsed components
12 skill or MCP entries
Source updated
Oct 13, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install code-audit-tools for Claude Code

Installs for the current user
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install code-audit-tools@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/legioncodeinc/vibe-coding-tools

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/code-audit-tools/.

Plugin files

plugins/code-audit-tools/
├── .claude-plugin/plugin.json
├── plugin.json
├── skills/audit-my-code-stinger/SKILL.md
├── skills/code-audit-brief-stinger/SKILL.md
├── skills/code-bloat-stinger/SKILL.md
├── skills/code-forensics-stinger/SKILL.md
├── skills/lovable-audit-stinger/SKILL.md
├── skills/nextjs-security-stinger/SKILL.md
├── skills/polyglot-security-stinger/SKILL.md
├── skills/react-security-stinger/SKILL.md
├── skills/remediation-planning-stinger/SKILL.md
├── skills/source-command-audit-my-code/SKILL.md
├── skills/sveltekit-security-stinger/SKILL.md
└── skills/swarm-audit-stinger/SKILL.md

Included Skills12

audit-my-code-stingerskills/audit-my-code-stinger/SKILL.md

Orchestrates /audit-my-code. Five tiers (foundation, vibe, basic, full, mario) of codebase audits, dispatched to paired Drones and delivered as a Legion Code Inc. brief.

code-audit-brief-stingerskills/code-audit-brief-stinger/SKILL.md

Render the Audit My Code brief, one self-contained Field Guide styled HTML file per run, from the workspace only. Escapes repo text, merges duplicates, prints cleanly to PDF.

code-bloat-stingerskills/code-bloat-stinger/SKILL.md

Read-only bloat audit of any repo. jscpd duplication, knip or language dead-code tools with a spot-check, cloc size, function and closure structure, split plans, banded verdict.

code-forensics-stingerskills/code-forensics-stinger/SKILL.md

Review software vendor engagements using contracts, invoices, messages and delivery records. Produce cited evidence drafts for human or counsel review. Read README.md for the guide map.

lovable-audit-stingerskills/lovable-audit-stinger/SKILL.md

Audit Lovable-built Supabase apps: RLS denials, role-differential reads, function gating, auth posture, bundle-forensics key/endpoint extraction, findings triage, reporting.

nextjs-security-stingerskills/nextjs-security-stinger/SKILL.md

Deep Next.js security audit (13 to 16, App and Pages Router). Version advisories, proxy and middleware auth, Server Actions, Route Handlers, data exposure, caching, config. Read-only.

polyglot-security-stingerskills/polyglot-security-stinger/SKILL.md

Deep security audit for Node servers, Python, Go, Rust, Rails, PHP, Spring, and .NET, plus secrets, dependencies, SAST, and CI. Read-only, writes Audit My Code findings.

react-security-stingerskills/react-security-stinger/SKILL.md

Review React 18/19 security, including Next.js clients. Covers XSS, secrets and client trust. Delegate Next.js server surfaces to nextjs-security-stinger. Read-only.

remediation-planning-stingerskills/remediation-planning-stinger/SKILL.md

Plan fixes from audit findings. Clusters findings into work packages, orders Now, Next, Later, and with approval writes Library PRDs, IRDs, knowledge docs, and draft contracts.

source-command-audit-my-codeskills/source-command-audit-my-code/SKILL.md

Audit a codebase the way Legion Code Inc. does: foundation health, duplication and dead code, framework-deep security, quality, and a remediation plan, delivered as a branded brief.

sveltekit-security-stingerskills/sveltekit-security-stinger/SKILL.md

Evidence-backed, read-only security audit of Svelte 4/5 and SvelteKit 2 apps, any stack. Versions vs advisories, load leaks, actions, remote functions, hooks, XSS, CSRF, adapters.

swarm-audit-stingerskills/swarm-audit-stinger/SKILL.md

Swarm audit of a repository: Workflow fleet of single-lens Sonnet investigators, adversarial verification, Opus interpreters and critic, 10-minute check-ins, kill and respawn, nothing unreviewed.

Plugin manifests2

plugins/code-audit-tools/.claude-plugin/plugin.json
{
  "name": "code-audit-tools",
  "version": "3.0.0",
  "description": "Audit repositories and app security, measure bloat, inspect branches and plan remediation.",
  "author": {
    "name": "Legion Code Inc.",
    "url": "https://www.legioncodeinc.com"
  },
  "license": "AGPL-3.0-or-later",
  "repository": "https://github.com/legioncodeinc/the-wasp-nest-source",
  "skills": [
    "./skills/"
  ],
  "agents": [
    "./agents/code-audit-brief-wasp-drone.md",
    "./agents/code-bloat-wasp-drone.md",
    "./agents/code-forensics-wasp-drone.md",
    "./agents/code-foundation-wasp-drone.md",
    "./agents/lovable-audit-wasp-drone.md",
    "./agents/nextjs-security-wasp-drone.md",
    "./agents/polyglot-security-wasp-drone.md",
    "./agents/react-security-wasp-drone.md",
    "./agents/remediation-planning-wasp-drone.md",
    "./agents/sveltekit-security-wasp-drone.md",
    "./agents/swarm-audit-wasp-drone.md"
  ],
  "commands": [
    "./commands/audit-my-code.md"
  ],
  "dependencies": [
    "wasp-nest-core"
  ]
}
plugins/code-audit-tools/plugin.json
{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "code-audit-tools",
  "version": "3.0.0",
  "description": "Audit repositories and app security, measure bloat, inspect branches and plan remediation.",
  "author": {
    "name": "Legion Code Inc.",
    "url": "https://www.legioncodeinc.com"
  },
  "license": "AGPL-3.0-or-later",
  "repository": "https://github.com/legioncodeinc/the-wasp-nest-source",
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Code Audit Tools",
        "shortDescription": "Audit repositories and app security, measure bloat, inspect branches and plan remediation.",
        "developerName": "Legion Code Inc.",
        "category": "Productivity",
        "capabilities": [
          "Read",
          "Write"
        ]
      }
    }
  }
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[code-audit-tools on Agent Plugins Marketplace](https://pluginsmp.com/plugins/code-audit-tools)