Audit the whole repo for accumulated patches masking design flaws. Ranked by root cause impact.
Scanned 8/30/2026
Install to Claude Code
npx -y skills add akshatnerella/plumber --skill plumber-audit --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Plumber Audit?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/akshatnerella-plumber-audit)More formats (shields.io, HTML) on the badges page.
---
name: plumber-audit
description: "Audit the whole repo for accumulated patches masking design flaws. Ranked by root cause impact."
homepage: https://github.com/akshatnerella/plumber
license: MIT
---
plumber-review, repo-wide. Scan the whole tree instead of a diff. Rank findings by root cause impact.
## Tags
Same as plumber-review:
- `patch:` fix covering a design flaw. Name the flaw.
- `complexity:` code added to fight existing complexity. Name the root.
- `phantom:` error handling for a scenario that shouldn't exist.
- `shrink:` same logic, genuinely simpler structure.
## Hunt
Conditional chains growing over time (sign of accumulated patches), error handling for impossible scenarios, try/catch around non-throwing code, functions with multiple competing concerns patched together, duplicate logic in sibling callers instead of one shared fix.
## Output
One line per finding, ranked biggest impact first: `<tag> <what is patched>. <redesign>. [path]`
End with `root causes addressable: <N>, estimated complexity removable: ~<M> lines.`
Nothing to fix: `Clean pipes. Ship.`
## Boundaries
Scope: patchwork and complexity only. Correctness, security, and performance are out of scope. Lists findings, applies nothing. One-shot.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.
SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.
Python backend development expertise for FastAPI, security patterns, database operations, Upstash integrations, and code quality. Use when: (1) Building REST APIs with FastAPI, (2) Implementing JWT/OAuth2 authentication, (3) Setting up SQLAlchemy/async databases, (4) Integrating Redis/Upstash caching, (5) Refactoring AI-generated Python code (deslopification), (6) Designing API patterns, or (7) Optimizing backend performance.
Drive the full internationalization journey for a project — detect the stack, recommend a library, set up the chosen library, wrap existing strings, and optionally connect a translation platform. Use when the user asks to add or configure i18n, internationalization, localization, multi-language support, or translations — including when they explicitly mention LinguiJS, Lingui, next-intl, "wrap strings", "find hardcoded text", "make my app translatable", or "set up translations". Triggers on g...
PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.