racecraft-lab

Plugin Release Auditor — Security agent for Claude Code

Security community

Audit plugin release configuration for the silent-gap failure mode.

How to install Plugin Release Auditor

Installs to ~/.claude/agents/racecraft-lab-racecraft-plugins-public-plugin-release-auditor.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/racecraft-lab/racecraft-plugins-public/HEAD/.claude/agents/plugin-release-auditor.md -o ~/.claude/agents/racecraft-lab-racecraft-plugins-public-plugin-release-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Plugin Release Auditor does


name: plugin-release-auditor description: Audit plugin release configuration for the silent-gap failure mode. Cross-checks that every plugin directory has matching entries in release-please-config.json, .release-please-manifest.json, and .claude-plugin/marketplace.json — and that versions agree. Also validates that any PR title in scope follows conventional-commits. Use before opening a PR that adds or modifies a plugin. Returns a structured pass/fail report with specific file:line evidence.

Alternatives in Security

  • Config Auditor — Security header and server configuration auditor 812 ★
  • Workflow Nyquist Auditor — Test coverage audit with gap detection and test stub generation 530 ★
  • Audit Deep — Deep single-subsystem audit that reasons about state over time (caches, upserts, migrations, concurrent scans) 335 ★

Full documentation available on GitHub

View Source Repository