plumpslabs

Matcha:Audit — Security skill for Claude Code

Security community

🍵 Stack health check — find overlaps, waste, and risks before they become problems.

How to install Matcha:Audit

Installs to ~/.claude/commands/plumpslabs-matcha-matcha-audit.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/plumpslabs/matcha/HEAD/.claude/commands/matcha:audit.md -o ~/.claude/commands/plumpslabs-matcha-matcha-audit.md

Restart Claude Code, or start a new session, for it to be picked up.

What Matcha:Audit does

description: "🍵 Stack health check — find overlaps, waste, and risks before they become problems"

/matcha:audit

**Stack health check.** Find overlaps, waste, and risks before they become problems.

Scope

Audit covers: dependencies, services, config, security posture, and architecture health.

Process

Step 1 — Inventory

Scan all manifests and config:

package.json, go.mod, Cargo.toml, pyproject.toml, requirements.txt
docker-compose*.yml, Dockerfile*
`.e

Alternatives in Security

Security Ownership Map — Map people-to-file ownership, compute bus factor, and identify risks 14.6k ★
Cross-Pollinate Hex MCP Servers — Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp 238 ★
Security Health Check — Execute the security-health-inline skill for inline orchestration 172 ★