maruda plugin
AI with a harness. Agent skills, rules, CI and security gates for AI-assisted development — a diagnose → issue → plan → resolve ⇄ verify loop, shipped as one harness.
How to install the maruda plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add northraystudio/maruda
/plugin install maruda@northraystudioWhat's inside maruda
14 parts read from the plugin's own files.
Skills 14
Claude loads it when the task matches- data-validation
Inspects project data for correctness by generating read-only reports on record counts, NULL rates, distributions, and referential integrity.
- dependency-audit
Audits third-party dependencies and container images for known vulnerabilities using a pinned Trivy scanner.
- gh-batch-runner
Groups multiple GitHub Issues into a single Epic Issue to implement, verify, and release them together via one integration branch and one Pull Request.
- gh-issue-drafter
Converts rough user intent into well-structured GitHub Issues with defined completion criteria, scope boundaries, and design constraints.
- gh-issue-planner
Analyzes GitHub Issues by investigating related code and proposing structured implementation plans as comments.
- gh-issue-resolver
Implements and verifies fixes for GitHub Issues by following an agreed plan, creating feature branches, running tests, and opening Pull Requests.
- progress-dashboard
Generates an interactive HTML dashboard to visualize software quality, security, and dependency audit trends from JSON summary files.
- report-to-issues
Converts software evaluation and security audit reports into GitHub Issues using the gh CLI.
- rule-proposer
Converts security findings from scan reports and manual notes into validated Semgrep rules and test fixtures.
- sakuda-triage
Triages DAST findings by tracing them through source code to confirm vulnerabilities or identify false positives with specific file and line evidence.
- setup
Installs the maruda development harness into a project through an interactive interview to set up project rules, hooks, and CI workflows.
- software-evaluation
Evaluates code quality across architecture, reliability, observability, security, and developer experience to produce a scorecard and improvement roadmap.
- spec-doc
Generates or synchronizes living technical specifications from source code to prevent documentation drift.
- vulnerability-scan
Performs offensive security audits using Semgrep to detect OWASP-based vulnerabilities like injection, broken access control, and hardcoded secrets.
Using maruda in Claude Code
Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update maruda@northraystudio
- Refresh the marketplace
- /plugin marketplace update northraystudio
- Turn it off for now
- /plugin disable maruda@northraystudio
- Remove it
- /plugin uninstall maruda@northraystudio
Skills in maruda
- vulnerability-scannorthraystudio/maruda
Performs offensive security audits using Semgrep to detect OWASP-based vulnerabilities like injection, broken access control, and hardcoded secrets.
3 files7stars - data-validationnorthraystudio/maruda
Inspects project data for correctness by generating read-only reports on record counts, NULL rates, distributions, and referential integrity.
7stars - dependency-auditnorthraystudio/maruda
Audits third-party dependencies and container images for known vulnerabilities using a pinned Trivy scanner.
7stars - gh-batch-runnernorthraystudio/maruda
Groups multiple GitHub Issues into a single Epic Issue to implement, verify, and release them together via one integration branch and one Pull Request.
7stars - gh-issue-drafternorthraystudio/maruda
Converts rough user intent into well-structured GitHub Issues with defined completion criteria, scope boundaries, and design constraints.
7stars - gh-issue-plannernorthraystudio/maruda
Analyzes GitHub Issues by investigating related code and proposing structured implementation plans as comments.
7stars - gh-issue-resolvernorthraystudio/maruda
Implements and verifies fixes for GitHub Issues by following an agreed plan, creating feature branches, running tests, and opening Pull Requests.
7stars - progress-dashboardnorthraystudio/maruda
Generates an interactive HTML dashboard to visualize software quality, security, and dependency audit trends from JSON summary files.
7stars - report-to-issuesnorthraystudio/maruda
Converts software evaluation and security audit reports into GitHub Issues using the gh CLI.
7stars - rule-proposernorthraystudio/maruda
Converts security findings from scan reports and manual notes into validated Semgrep rules and test fixtures.
7stars - sakuda-triagenorthraystudio/maruda
Triages DAST findings by tracing them through source code to confirm vulnerabilities or identify false positives with specific file and line evidence.
7stars - setupnorthraystudio/maruda
Installs the maruda development harness into a project through an interactive interview to set up project rules, hooks, and CI workflows.
7stars - software-evaluationnorthraystudio/maruda
Evaluates code quality across architecture, reliability, observability, security, and developer experience to produce a scorecard and improvement roadmap.
7stars - spec-docnorthraystudio/maruda
Generates or synchronizes living technical specifications from source code to prevent documentation drift.
7stars
maruda plugin questions
How do I install the maruda plugin?
In Claude Code run /plugin marketplace add northraystudio/maruda, then /plugin install maruda@northraystudio.
What does the maruda plugin include?
maruda bundles 14 skills.
How do I update or remove the maruda plugin?
Update it with claude plugin update maruda@northraystudio in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall maruda@northraystudio.