code-audit-rigor
程式碼審查工具箱 - routine 兩輪審查指令（/review-branch、/review-pr，共用語言規則包；跨輪記憶——未變動的檔跳過、已駁回的 anchor 不重貼、已驗證未修的帶入下一輪；每條 finding 標本次引入／既有；Phase 2 逐條派 finding-verifier agent（opus、先試著推翻）驗證；依路徑印風險 tier；/review-pr 在 inline thread 回貼並 resolve）+ 量化決策框架（EV 計算、評分校準、STRIDE+CWE 分類、強制交叉引用契約）+ 工程化保證（語言規則包分層匹配由腳本解析、機械化 scope/coverage 核銷、引用程式碼 grep 錨定）。靈感來自 codexstar69/bug-hunter 對抗式 review 與 alibaba/open-code-review 決定性工程層。本工具箱刻意不含 auto-fix 與 LLM-readable 注入面：只審查與驗證，不改寫程式碼——finding 轉 patch 的工作交由 claude-security plugin 的 suggest-patches。
- version
- 2.3.0
- GitHub stars
- 1
Install
/plugin install code-audit-rigor@scl-claude-pluginsRun it inside Claude Code after adding the marketplace with /plugin marketplace add chinlung/claude-dev-workflow.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageDetails
- Marketplace
- chinlung/claude-dev-workflow
- Source
- plugins/code-audit-rigor
- Category
- Community
- Keywords
- code-review, audit, security-review, quantitative, decision-framework, stride, cwe, expected-value, workflow, adversarial-verification