morodomi/dev-crew

AI development team as a Claude Code plugin -- TDD workflow, security audit, and phase-boundary compaction.

1Stars on the repository
62Mods indexed here, across every type
3d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

api-attacker

01

morodomi/dev-crew

Agent

A code-review agent that looks for common security weaknesses in web APIs. An API is a program interface that lets applications exchange data and perform actions.

1 3d ago A 33 tokens original MIT

morodomi/dev-crew

Agent

An automated reviewer for API contracts, the agreed rules for how software services communicate. It checks for breaking changes, naming consistency, error-response structure, versioning, and pagination, using guidance from major API design standards.

1 3d ago A 35 tokens original MIT

architect

03

morodomi/dev-crew

Agent

A code-review agent that checks an approved implementation plan against the actual files and an already-created Cycle document, a record of the planned work.

1 3d ago A 68 tokens original MIT

attack-scenario

04

morodomi/dev-crew

Agent

An agent that turns detected software vulnerabilities into concrete attack scenarios from an attacker's point of view. It can analyze how multiple weaknesses may combine into an attack chain.

1 3d ago A 35 tokens copy · 94% MIT

auth-attacker

05

morodomi/dev-crew

Agent

A static-analysis agent for finding authentication and permission security weaknesses in application code. Authentication checks who a user is; authorisation checks what that user may do.

1 3d ago A 37 tokens copy · 86% MIT

morodomi/dev-crew

Agent

A review agent for making deployments and database changes safer. A database migration changes the structure or data of a database; a rollback returns software to an earlier version.

1 3d ago A 41 tokens original MIT

crypto-attacker

08

morodomi/dev-crew

Agent

A code-scanning agent for finding insecure settings and weak cryptography. It checks for issues such as enabled debugging, outdated hash functions, weak encryption methods, default passwords, and unrestricted cross-origin access.

1 3d ago A 32 tokens original MIT

csrf-attacker

09

morodomi/dev-crew

Agent

A code-scanning agent that looks for Cross-Site Request Forgery, or CSRF, weaknesses. CSRF is an attack where another website tricks a logged-in user's browser into changing data on a different website.

1 3d ago A 35 tokens original MIT

dast-crawler

10

morodomi/dev-crew

Agent

A browser-based security-testing agent that discovers web application URLs and endpoints, including routes created while the page runs.

1 3d ago A 32 tokens original MIT

design-reviewer

11

morodomi/dev-crew

Agent

A combined design review that checks whether a proposed software change has a suitable scope, consistent architecture, and acceptable risks.

1 3d ago A 52 tokens original MIT

designer

12

morodomi/dev-crew

Agent

A planning agent that proposes user-interface and user-experience guidelines for a feature. It compares Japanese and Western design patterns for a specified audience and interface area, such as a form, dashboard, or landing page.

1 3d ago A 52 tokens original MIT

dynamic-verifier

13

morodomi/dev-crew

Agent

An agent that dynamically checks suspected web security problems by sending controlled requests to a running website. It covers SQL injection, cross-site scripting, authentication, request-forgery, server-side request forgery, and file-reading checks.

1 3d ago C 36 tokens original MIT

error-attacker

14

morodomi/dev-crew

Agent

A code-scanning agent that looks for unsafe exception handling, such as ignored errors or missing resource cleanup, across Java, Python, JavaScript, PHP, and Ruby code.

1 3d ago A 28 tokens original MIT

morodomi/dev-crew

Agent

Agent "false-positive-filter-reference" from morodomi/dev-crew, covering false positive filter - reference, input format, @security-ignore format, sanitization patterns by language and output format.

1 3d ago A 0 tokens original MIT

morodomi/dev-crew

Agent

A filter for static-analysis security findings that marks likely false alarms based on code patterns and surrounding context. Static analysis scans source code for possible security problems without running it.

1 3d ago A 27 tokens original MIT

file-attacker

17

morodomi/dev-crew

Agent

A security-scanning agent for file-related vulnerabilities, including path traversal, unsafe file uploads, local file inclusion, and unrestricted file access. These are weaknesses that may let users read, upload, or access files they should not control.

1 3d ago A 28 tokens original MIT

green-worker

18

morodomi/dev-crew

Agent

Agent "green-worker" from morodomi/dev-crew, covering green worker, input, example input, output and context retrieval protocol.

1 3d ago A 40 tokens original MIT

impact-reviewer

19

morodomi/dev-crew

Agent

A code-review agent that examines how a change can affect the rest of a codebase. It checks dependencies, public APIs, single points of failure, and circular dependencies.

1 3d ago A 44 tokens original MIT

injection-attacker

20

morodomi/dev-crew

Agent

Agent "injection-attacker" from morodomi/dev-crew, covering detection targets, sql injection, command injection, framework detection patterns and dangerous patterns.

1 3d ago A 32 tokens original MIT

morodomi/dev-crew

Agent

A code-review agent that checks how easy software is to read, understand, and change. It uses Martin Fowler’s “code smells,” which are common patterns that often make code harder to maintain.

1 3d ago A 42 tokens original MIT

morodomi/dev-crew

Agent

Agent "observability-reviewer" from morodomi/dev-crew, covering focus, output, ブロッキングスコア基準, correctness-reviewer との分担(dedup ルール) and memory.

1 3d ago A 40 tokens original MIT

observer

23

morodomi/dev-crew

Agent

A helper agent that detects recurring patterns in an AI coding session and evaluates how reliable those patterns are.

1 3d ago A 42 tokens original MIT

morodomi/dev-crew

Agent

A code-review agent focused on runtime performance: how efficiently code works, how much memory it uses, and whether concurrent operations are safe. N+1 queries are repeated database or API calls caused by processing items one at a time.

1 3d ago A 35 tokens original MIT