scorecard plugins

by Ross Young

Agentic-Security: SAST + SCA + secrets + IaC + LLM-sec scanner with deterministic fix toolchain. Exposes a Model Context Protocol (MCP) server with 17 tools that Codex CLI can call directly.

by Stellars Henson

Critical document analysis with persona-driven risk scoring, iterative scorecard evaluation, and versioned corrections. Includes adversarial-review - hostile red-team review of code and artefacts via fresh claude -p reviewers with eleven pluggable expert adversaries.

by Jebel-Quant

Slash commands for rhiza-managed repos: init and sync from a pinned template release, score code quality, refresh README/CLAUDE.md/mkdocs, prepare releases, and report sync status.

by Steve Harlow

Audit Claude Code artifacts from inside Claude Code: the audit-skill runs the free skillcrossroads CLI to grade skills, subagents, slash commands, MCP configs, and plugins with an evidence-cited file:line scorecard, then walks the ranked fix list until the grade stops improving.

by Steve Harlow

Audit your Claude Code skills from inside Claude Code: installs the audit-skill, which runs the skillcrossroads CLI (the grader for skills, subagents, slash commands, MCP configs, and plugins) to produce an evidence-cited, file-and-line scorecard and walk the ranked fix list until the grade stops improving.

A Claude Code kit with two roles that grade opposite halves of the same round. The MENTOR coaches how each request was framed before the work runs, then grades the ask — framing, leverage, learnings applied. The CRITIC judges, in fresh context and its own words, whether the thing you ASKED for actually happened, then grades the delivery — did it happen, was there evidence, did it stay in scope. Both write to one append-only ledger per repo, and the SCORECARD renders it as a published board where the human prompter and the model are scored side by side.