Claude Plugins — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Claude Plugins (Plugin) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A collection of Claude Code plugins by Songbird. Each plugin is an independently installable unit that extends Claude Code with new skills, hooks, and workflows.
All plugins are currently in alpha. Interfaces may change between minor releases. See each plugin's CHANGELOG for current version and history.
| Plugin | Description |
|---|---|
| forge | Pre-code feature review pipeline. Stress-tests a design through parallel domain experts, an adversarial critic, and a user approval gate before any code is written. |
| iceberg | Encode architectural rules as compiler/lint errors. Audits structural debt, applies the asymmetric-complexity convention, or bootstraps enforcement scaffolding in a fresh project. |
| jetbrains-router | Routes Claude Code tools through a JetBrains IDE MCP server (WebStorm, Rider, IntelliJ IDEA) for live diagnostics and unsaved-buffer reads. Fails open when no IDE is connected. |
| kairoi | Session safety for unfamiliar codebases. Edit-time guards, automatic commit capture, and cross-module reflection so Claude stays in sync across long sessions. |
| rulesense | Audits and authors CLAUDE.md rule files. Scores rules for structural clarity, suggests rewrites, and creates new rules optimized for Claude's parsing. |
| scriptorium | Reference guide and proofreader for Claude Code instruction artifacts (SKILL.md, CLAUDE.md, plans, subagents, slash commands, hook scripts). |
Each plugin is installed individually. Clone this repository and register the plugin directory with Claude Code.
See each plugin's README for setup steps and requirements.
claude-plugins/
├── forge/
├── iceberg/
├── jetbrains-router/
├── kairoi/
├── rulesense/
└── scriptorium/MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.