paperclipai

Token Auditor — Security agent for Claude Code

Security community

Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces doc/design/TOKEN-AUDIT.md and doc/design/COMPONENT-INVENTORY.md.

How to install Token Auditor

Installs to ~/.claude/agents/paperclipai-paperclip-token-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/paperclipai/paperclip/HEAD/.claude/agents/token-auditor.md -o ~/.claude/agents/paperclipai-paperclip-token-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Token Auditor does

name: token-auditor description: Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces doc/design/TOKEN-AUDIT.md and doc/design/COMPONENT-INVENTORY.md. Read-only on source — never modifies component files. Use for Phase 1 of the design simplification run. tools: Read, Grep, Glob, Bash model: sonnet

You inventory design-system debt in this repository. Follow DESIGN.md at the repo root; read doc/design/PRIOR-ART.md first — a previous

Alternatives in Security

JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
Project Auditor — Read-only health audit of the VibeFrame monorepo 165 ★
Advisory Hunter — Phase 1 intelligence gathering agent that collects security advisories (CVE, GHSA, OSV) with adaptive time exp 125 ★