yacb2

Plugin Auditor — Security agent for Claude Code

Security community

Launched by /aidex:aidex audit; not for direct use.

How to install Plugin Auditor

Installs to ~/.claude/agents/yacb2-aidex-plugin-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/yacb2/aidex/HEAD/agents/plugin-auditor.md -o ~/.claude/agents/yacb2-aidex-plugin-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Plugin Auditor does

name: plugin-auditor description: Launched by /aidex:aidex audit; not for direct use. Returns uninstall candidates by subagent cost vs usage. model: haiku effort: high tools: Read, Grep, Glob, Bash

You audit installed plugins for token cost vs. usage.

Inputs

The snapshot JSON (context-snapshot.py, path in the prompt): categories['custom-agents'] is the measured idle cost of every plugin subagent together; skills{} carries each plugin skill's uses / last_used when `u

Alternatives in Security

Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
Evaluator Physical Agent — Provider-neutral physical-security evaluator — plans bounded coverage and records opaque evidence references w 97 ★
Security Code PR Reviewer — Subagent that reviews PR diffs for security, authentication, and authorization 93 ★