First release of kascheck — a production-readiness audit plugin in the kas-claude-plugins marketplace.
Renamed from
project-auditorimmediately after that earlier (now-deleted) release. Use this one.
What it does
Spawns parallel subagents to assess production readiness across:
- Security — auth, input validation, secrets, OWASP Top 10
- Code quality — type safety, error handling, vibe-code red flags
- Infrastructure — CI/CD, containerization, observability, DB
- Testing — coverage, framework, unit/integration presence
Produces a scored report (0-100) with verdict tiers: READY, READY WITH FOLLOWUPS, NEEDS WORK, NOT RECOMMENDED. Especially useful for vibe-coded / AI-generated codebases.
Scoring
Per-finding deductions are capped per severity class so a pile of polish nits cannot drag down an otherwise-clean project:
| Severity | Per finding | Class cap |
|---|---|---|
| CRITICAL | -20 | -60 |
| HIGH | -8 | -24 |
| MEDIUM | -3 | -15 |
| LOW | -1 | -5 |
Install
claude plugin marketplace add kastheco/claude-plugins
claude plugin install kascheck@kas-claude-pluginsThen use /kascheck:audit [path] [--detailed] or just say "kascheck this project".