Agent Plugins Marketplace
← All plugins

review-audit

v0.13.0

Codebase audit and review: the codebase-audit / check-* / audit-* suite plus the issue writer.

Claude Code12 Skills

By Josh Hall1 GitHub starsUpdated 2 weeks ago

Directory evidence

Runtimes
Claude Code
Parsed components
12 skill or MCP entries
Source updated
Sep 9, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install review-audit for Claude Code

Installs for the current user
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install review-audit@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/joshjhall/librarian

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/review-audit/.

Plugin files

plugins/review-audit/
├── .claude-plugin/plugin.json
├── skills/check-ai-config/SKILL.md
├── skills/check-code-health/SKILL.md
├── skills/check-decomposition/SKILL.md
├── skills/check-docs-deadlinks/SKILL.md
├── skills/check-docs-examples/SKILL.md
├── skills/check-docs-missing-api/SKILL.md
├── skills/check-docs-organization/SKILL.md
├── skills/check-docs-staleness/SKILL.md
├── skills/check-lifecycle/SKILL.md
├── skills/check-okf-conformance/SKILL.md
├── skills/check-security/SKILL.md
└── skills/codebase-audit/SKILL.md

Included Skills12

check-ai-configskills/check-ai-config/SKILL.md

Validates Claude Code configuration files (agents, skills, CLAUDE.md, MCP configs, hooks) for structural issues, bloat, and misconfigurations. Combines deterministic pre-scan with LLM heuristic analysis.

check-code-healthskills/check-code-health/SKILL.md

Deterministic code health pre-scan for tech debt markers, debug statements, empty error handlers, and unused imports. Runs patterns.sh before LLM analysis. Used by the checker agent.

check-decompositionskills/check-decomposition/SKILL.md

Deterministic file-sizing and language-aware decomposition pre-scan. Counts production LOC with per-language test/comment exclusion and emits actionable decomposition seams (which lines move where), not just a line count. Runs patterns.sh before LLM analysis. Used by the checker agent and the audit-decomposition agent.

check-docs-deadlinksskills/check-docs-deadlinks/SKILL.md

Validates internal and external links in documentation files. Detects broken relative links, missing anchors, and suspicious external URLs. Used by checker agent.

check-docs-examplesskills/check-docs-examples/SKILL.md

Validates code examples in documentation against actual source code. Detects broken imports, deprecated APIs, and incomplete examples. Used by checker agent.

check-docs-missing-apiskills/check-docs-missing-api/SKILL.md

Detects undocumented public APIs and complex functions across languages. Uses language-specific regex for exported symbols without docstrings. Used by checker agent.

check-docs-organizationskills/check-docs-organization/SKILL.md

Checks documentation structure, missing standard files, directory README coverage, and content duplication. Used by checker agent in audit and review modes.

check-docs-stalenessskills/check-docs-staleness/SKILL.md

Detects stale documentation — comments contradicting code, outdated references, expired dates. Used by checker agent in audit and review modes.

check-lifecycleskills/check-lifecycle/SKILL.md

Deterministic resource-lifecycle pre-scan for unreaped subprocesses, terminate-without-kill timeouts, unclosed handles, and unpaired listeners. Runs patterns.sh before LLM analysis. Used by the checker agent.

check-okf-conformanceskills/check-okf-conformance/SKILL.md

Deterministic Open Knowledge Format (OKF) pre-scan for a memory bundle — schema conformance (type, frontmatter, reserved files, version drift) plus whole-bundle health (orphans, dangling index lines, staleness). Runs patterns.sh before LLM analysis. Used by the checker agent.

check-securityskills/check-security/SKILL.md

Deterministic security pre-scan for hardcoded secrets, injection risks (SQL and command), XSS, insecure deserialization, weak randomness, TLS/CORS/JWT/XXE misconfiguration, and insecure cryptography. Runs patterns.sh before LLM analysis. Used by the checker agent.

codebase-auditskills/codebase-audit/SKILL.md

Periodic codebase sweep that identifies tech debt, security issues, test gaps, architecture problems, and documentation staleness. Creates actionable GitHub/GitLab issues grouped by category. Invoke with /review-audit:codebase-audit.

Plugin manifests1

plugins/review-audit/.claude-plugin/plugin.json
{
  "name": "review-audit",
  "version": "0.13.0",
  "description": "Codebase audit and review: the codebase-audit / check-* / audit-* suite plus the issue writer.",
  "author": {
    "name": "Josh Hall",
    "url": "https://github.com/joshjhall"
  }
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[review-audit on Agent Plugins Marketplace](https://pluginsmp.com/plugins/review-audit)