commodore65

Claude Tune — Security skill for Claude Code

Security community

Audit and tune your Claude Code setup — hooks, skills, plugins, MCPs, memory, processes, disk.

How to install Claude Tune

This entry records only its repository, not the path inside it, so there is no exact command to give. Open commodore65/claude-tune and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Claude Tune does

Audit and tune your Claude Code setup — hooks, skills, plugins, MCPs, memory, processes, disk.

Alternatives in Security

  • Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
  • Install — Install the Damage Control security hooks system 456 ★
  • Reflexion — Audit and optimize the .claude/ ecosystem — skills, hooks, guides, patterns, agents, and settings — for qualit 224 ★

README

claude-tune

![claude-tune](assets/banner.png)

**Audit and tune your Claude Code setup** — hooks, skills, plugins, MCPs, memory, processes, disk.

Safety-railed, three modes, snapshot-and-rollback on every mutation.


What it does

claude-tune is a Claude Code skill that walks your installation through 12 audit phases and surfaces:

  • 🔴 Silently broken hooks — scripts the harness "runs" but that exit early because they rely on removed env vars from Claude Code 1.x
  • 🟠 Unused skills, plugins, MCP servers, and agents — categorized HEAVY / ACTIVE / COLD / DEAD with a session-log observation window
  • 🟠 Stale memory files — dead references, filename/content mismatches, past-due dates
  • 🔴 Orphan Claude/MCP processes — left behind by crashed terminals, classified as "mine vs orphan"
  • 🟢 Disk cruft in ~/.claude/ — telemetry failed-batch buildups, old claude-tune backups
  • 🔴 Dead project entries in ~/.claude.json — paths that no longer exist on disk
  • 🟠 Contradictions in global or project CLAUDE.md — narrow generalizations, static lists inside dynamic-discovery blocks
  • 🟠 Bloated MCP servers — globally-scoped but rarely used; proposes an on-demand loading pattern

For each finding it produces a severity-ranked table and, if you approve, applies provably-safe cleanups. Every mutation emits a `ROLLBACK:` command alongside.


Install

git clone https://github.com/commodore65/claude-tune ~/.claude/skills/claude-tune

Open a new Claude Code session and say one of:

  • claude-tune
  • audit my claude code
  • tune claude code
  • clean up claude setup
  • broken hooks
  • unused skills
  • orphan claude processes

The first thing the skill does is ask which mode to run.


Three modes

| Mode | Description | When to use | | ---------