rami-216ddf — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited rami-216ddf (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="https://rami.reviews/static/images/rami_logo_full.png" alt="Rami" width="200"> </p>
Works with Claude Code AND Codex. Rami reviews every PR for security, bugs, and performance — then fixes the findings through MCP. You stay in control of what merges.
Both clients are first-class: Claude Code loads the root plugin package, while Codex installs its isolated package from plugins/rami through the same marketplace repository.
<p align="center"> <img src="https://rami.reviews/static/images/rami_pr_check.png" alt="Rami PR check" width="720"> </p>
Not every finding needs a fix. Push back when you have evidence — Rami evaluates the dispute and either accepts it or asks you to fix:
The dispute loop runs in the same session as the review, so accepted disputes drop out and only real issues land in your commits.
Install Rami on your repository.
Claude Code:
/plugin marketplace add rami-code-review/claude-code-marketplaceCodex:
codex plugin marketplace add rami-code-review/claude-code-marketplaceClaude Code:
/plugin install rami@rami-code-reviewCodex:
codex plugin add rami@rami-code-reviewStart a new Codex task after installation so the Rami skills and MCP tools are loaded.
On a PR branch, run:
/rami:reviewRami fetches the review, walks each finding by priority, and applies fixes (or accepts disputes) until the PR is clean.
/rami:reviewFull review-fix-dispute loop on the current PR branch:
/rami:review-statusCheck review status without triggering a new review.
/rami:usageCheck remaining quota and credit balance.
/rami:setupGuided setup — installs the GitHub App, registers the MCP server, completes OAuth, and verifies the connection. Run this first if Rami isn't connected yet. It can also offer, only if you agree, to add a short removable Rami section to your CLAUDE.md / AGENTS.md.
/rami:doctorRead-only health check. Reports auth, GitHub App coverage, quota, and whether the plugin is up to date — with the fix for anything that's off.
/rami:upgradeUpdates the plugin to the latest published version and shows what changed.
"No PR found for branch" — push the branch and open a pull request.
"Authentication required" — install the Rami GitHub App on the repo.
Review taking too long? — /rami:review-status checks progress without triggering a new review.
Rami checks once a day — silently — whether a newer plugin version is published, and nudges you when one is. To update at any time:
/rami:upgradeOr manually:
claude plugin marketplace update rami-code-review
claude plugin update rami@rami-code-reviewThen run /reload-plugins (or start a new session) to activate it.
For Codex:
codex plugin marketplace upgrade rami-code-review
codex plugin add rami@rami-code-reviewThen start a new task to activate the updated plugin.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.