FlorianBruniaux

287 mods across 11 repositories, 6.2k stars between them.

dupes

145

FlorianBruniaux/starmapper

Command Claude Code

Code duplication analysis for StarMapper using jscpd. Detects repeated patterns across geocoding helpers, GitHub API formatting, compression utils, and cache logic.

83 9d ago A 36 tokens

function-analyzer

147

FlorianBruniaux/starmapper

Agent Claude Code

Performs ultra-granular per-function deep analysis for security audit context building. Use when analyzing dense functions, data-flow chains, cryptographic implementations, or state machines.

83 9d ago A 38 tokens

differential-review

152

FlorianBruniaux/starmapper

Skill Claude CodeCodex

Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.

83 9d ago A 61 tokens

insecure-defaults

153

FlorianBruniaux/starmapper

Plugin Claude Code

Detects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production.

83 9d ago A tokens not measured

insecure-defaults

154

FlorianBruniaux/starmapper

Skill Claude CodeCodex

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.

83 9d ago A 48 tokens

sharp-edges

155

FlorianBruniaux/starmapper

Plugin Claude Code

Identify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.

83 9d ago A tokens not measured

sharp-edges

156

FlorianBruniaux/starmapper

Skill Claude CodeCodex

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant…

83 9d ago A 74 tokens

static-analysis

157

FlorianBruniaux/starmapper

Plugin Claude Code

Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection.

83 9d ago A tokens not measured

semgrep-scanner

158

FlorianBruniaux/starmapper

Agent Claude Code

Executes Semgrep CLI scans for a specific language category and produces SARIF output. Spawned by the semgrep skill as a parallel worker — one agent per detected language.

83 9d ago C 40 tokens

codeql

159

FlorianBruniaux/starmapper

Skill Claude CodeCodex

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality + security-experimental suites) and…

83 9d ago A 102 tokens

sarif-parsing

160

FlorianBruniaux/starmapper

Skill Claude CodeCodex

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SARIF data. Does NOT…

83 9d ago A 91 tokens

semgrep

161

FlorianBruniaux/starmapper

Skill Claude CodeCodex

Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full ruleset coverage) and "important only" (high-confidence security vulnerabilities). Automatically detects and uses Semgrep Pro for cross-file taint analysis when available. Use when asked to scan code for…

83 9d ago A 95 tokens

ai-methodology

164

FlorianBruniaux/claude-code-plugins

Plugin Claude Code

AI-assisted development methodology — scaffolding skills, talk pipeline (6 stages), landing page generator, context engineering, and design templates.

40 2mo ago A tokens not measured original MIT

adr-writer

165

FlorianBruniaux/claude-code-plugins

Agent

Architecture Decision Record generator agent — read-only. Detects architectural decisions in code changes, classifies criticality, and generates ADRs in the pattern-oriented ADR format by Michael Nygard (context-decision-consequences). Never modifies code. Use after significant changes or when a decision needs…

40 2mo ago A 64 tokens original MIT