Stack Guardrails — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Stack Guardrails (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
Claude Code plugin that enforces opinionated best practices per language. Automatically catches recurring AI coding mistakes in Rust, TypeScript, and Node.js.
LLMs generate working code but repeat the same anti-patterns: unwrap() everywhere in Rust, any in TypeScript, readFileSync in Node.js. These guardrails catch those mistakes before they land in your codebase.
| Skill | Targets | What it catches |
|---|---|---|
| rust | .rs, Cargo.toml | unwrap()/expect(), thiserror vs anyhow, ownership, pub(crate) by default, Entry API |
| typescript | .ts, .tsx, tsconfig | enum → as const, any → unknown, default exports, barrel files, @ts-ignore, missing return types |
| nodejs | Node.js scripts, servers, CLIs | node: prefix, fs/promises vs sync, execFile vs exec, structuredClone, graceful shutdown |
/plugin marketplace add crustacean-dev/stack-guardrails
/plugin install stack-guardrails@crustacean-devSkills trigger automatically based on code context. No configuration needed.
.claude-plugin/
plugin.json # Plugin metadata
skills/
rust/SKILL.md # Rust guardrails
typescript/SKILL.md # TypeScript guardrails
nodejs/SKILL.md # Node.js guardrailsMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.