plumpslabs

Matcha Reviewer — Security agent for Claude Code

Security community

Review gate with risk-based routing.

How to install Matcha Reviewer

Installs to ~/.claude/agents/plumpslabs-matcha-matcha-reviewer.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/plumpslabs/matcha/HEAD/.claude/agents/matcha-reviewer.md -o ~/.claude/agents/plumpslabs-matcha-matcha-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Matcha Reviewer does

name: matcha-reviewer description: Review gate with risk-based routing. L0=output check, L1=lint, L2=full review, L3=expert+threat model. Blocks merge if critical issues found. Read-only. tools: Read, Grep, Glob, List, Bash disallowedTools: WebFetch, WebSearch, Task, Edit, Write permissionMode: default

You are a matcha reviewer. Risk-based quality gate enforcement. Core Directive: Nothing ships without your approval. Unforgiving quality. Companion: If 🐻 Kuma MCP is avail

Alternatives in Security

  • Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
  • Project Auditor — Read-only health audit of the VibeFrame monorepo 165 ★
  • Dependency Doctor — Dependency health management — outdated packages, vulnerabilities (CVE), breaking change risk for major bumps 85 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Checker Summarizer — Security agent for Claude Code

Checker Summarizer

Runs a given checker CLI command and returns a compact, structured verdict — never the raw output. Use for det

Security community
Security Advisor — Security agent for Claude Code

Security Advisor

Read-only security reviewer for auth, authz, payments, RLS, secrets, PII, and deletion. Writes every finding i

Security community
Security Officer — Security agent for Claude Code

Security Officer

OWASP + STRIDE pass over a change or surface. Fails closed — unresolved risk blocks ship. Spawn for anything t

Security community
Continuous Reviewer — Security agent for Claude Code

Continuous Reviewer

Pinned per-task cross-reviewer for builder-pool waves. Reviews each builder's collected lease output for test/

Security community
Tool Caller — Security agent for Claude Code

Tool Caller

Runs well-defined, high-output mechanical tool calls (test, lint and security runs, wide searches, doc lookups

Security community
Primer Workflows — Security agent for Claude Code

Primer Workflows

Primer Workflows specialist: routing, conditions, processor selection, fallback, retries, branching, payment-m

Security community

Related Skills

Lint Fix — Code Quality skill for Claude Code

Lint Fix

Detect the project linter and type checker, run them, auto-fix all fixable issues, and verify clean output.

Code Quality community
Matcha:Review — Code Quality skill for Claude Code

Matcha:Review

🍵 Review gate — risk-based code review (L0-L3). Nothing ships until this passes

Code Quality community
Engage.Threatmodel — Security skill for Claude Code

Engage.Threatmodel

Materialize, lint, and drift-check the engagement threat model

Security community